The Regulatory Spectrum

Introduction

This analysis maps 27 jurisdictions onto a spectrum of DeFi regulatory approaches, from regulatory vacuum to active innovation facilitation. The spectrum is not linear -- jurisdictions may occupy multiple positions simultaneously, and positions shift over time. The classification below reflects the state of regulation as of June 2026, based on verified data from the jurisdiction files in this repository.

A critical observation: no jurisdiction has achieved a purpose-built, comprehensive DeFi regulatory framework that captures genuinely permissionless protocols. Every approach is either an adaptation of existing rules, a carve-out from broader crypto regulation, a dedicated licensing regime that still attaches to identifiable operators, or a forward-looking sandbox experiment. The spectrum therefore measures how jurisdictions have chosen to address DeFi -- not whether any has solved the fundamental challenge of regulating protocols with no controlling person.

Each position is assigned from the canonical fact-matrix's spectrum_position field for each jurisdiction. Where a jurisdiction's posture has shifted since earlier drafts of this analysis (notably the United States toward extension-of-existing, Australia and Brazil into comprehensive frameworks, and Germany into assertive enforcement-first), the classification has been recomputed to mirror the matrix.

Position 1: No DeFi-Specific Framework / Regulatory Vacuum

Jurisdictions:

South Korea

This position captures jurisdictions where crypto-asset legislation exists but DeFi protocols have no licensing pathway and core DeFi activities are effectively foreclosed in practice. Of the 27 jurisdictions, South Korea is the sole occupant -- a regulatory vacuum with an enforcement overlay, where virtual-asset trading is tightly regulated but DeFi itself is left without a route to compliance.

South Korea

Regulatory mechanism: The Virtual Asset User Protection Act (VAUPA, effective July 19, 2024) and the Specified Financial Information Act regulate centralized VASPs but provide no registration or licensing pathway for DeFi protocols. The Financial Services Commission (FSC) has stated that entities controlling DeFi platforms fall within virtual asset regulation, but no mechanism exists to comply. Lending, staking, and yield products are effectively prohibited in practice.

Outcome data:

• Over 10 million crypto holders -- among the highest per-capita crypto adoption globally
• Only 5 exchanges (Upbit, Bithumb, Coinone, Korbit, Gopax) have secured the real-name banking partnerships required for fiat-to-crypto services; ~20 exchanges in DAXA
• Zero DeFi protocols licensed or registered; no licensing pathway exists
• First VAUPA criminal pump-and-dump charge (2025); Korbit AML fine KRW 2.73 billion (USD 1.9M, December 2025)
• The Digital Asset Basic Act (DABA) was re-introduced by the ruling Democratic Party (April 8, 2026) with bank-style stablecoin authorization rules but remains proposed, not enacted; left off the pre-recess bill-review agenda (May 12, 2026), so enactment is unlikely before late 2026
• Early 2026: FSC ended the 9-year corporate crypto-investment ban via guidelines (not legislation) -- ~3,500 eligible entities may allocate up to 5% of equity capital to top-20 cryptos on domestic exchanges, but no DeFi pathway was created
• May 7, 2026: National Assembly passed an FX Transactions Act amendment requiring cross-border VA-transfer businesses to register and report to the BOK FX network (effective ~December 2026)
• Planned 22% crypto tax (20% base + 2% local surtax) deferred a third time to January 2027

Strengths: Strong user protection under VAUPA; effective enforcement against market manipulation (first pump-and-dump prosecution under VAUPA, 2025); real-name banking eliminates pseudonymous trading on regulated exchanges; one of the strictest AML regimes globally.

Weaknesses: No licensing pathway means DeFi innovation is effectively prohibited domestically. Real-name banking structurally prevents DeFi from operating AML-compliant services. The banking bottleneck creates an oligopolistic exchange market. Three tax deferrals have undermined regulatory credibility. No DAO legal recognition or wrapper exists.

Position 2: Enforcement-First / Regulation by Prosecution

Jurisdictions:

Canada,

India,

Germany,

Estonia

These jurisdictions lack dedicated DeFi legislation but address DeFi through existing securities/AML law applied with active enforcement -- typically targeting centralized gateways, unregistered platforms, and AML failings rather than protocols themselves. The regulatory posture is reactive and enforcement-led. (The United States, historically the archetype of this position, has shifted toward Position 3 -- see below.)

Canada

Regulatory mechanism: CSA staff notices (21-327, 21-329, 21-332) apply provincial securities law to crypto trading platforms; FINTRAC requires MSB registration for entities "dealing in virtual currency." No DeFi-specific guidance exists; the OSC/Bank of Canada AMM Discussion Paper (July 2024) was the first dedicated Canadian DeFi analysis but proposed no solutions.

Outcome data:

• Enforcement focused on centralized gateways: Bybit and KuCoin (OSC, 2022); Binance (FINTRAC, CAD 6M+, withdrew); Xeltox/Cryptomus (FINTRAC CAD 176.9M, October 2025, record); FINTRAC revoked 23 crypto-MSBs (March 17, 2026)
• Zero DeFi-protocol or DAO enforcement actions as of March 2026
• No DAO legislation; unincorporated DAOs risk general partnership classification under provincial Partnership Acts
• Bill C-15 Royal Assent (March 26, 2026) enacts a Bank of Canada-supervised Stablecoin Act (1:1 reserves, at-par redemption, no yield to holders; in force ~2027)
• OECD CARF effective January 1, 2026 (first international exchange expected 2027); Canada joined Operation Atlantic (March 16, 2026)

Strengths: Accessible FINTRAC registration (no fees, 2-8 week timeline); CSA passport system extends registration across provinces; research-driven approach (AMM Discussion Paper); active international cooperation.

Weaknesses: No DeFi guidance from CSA; fragmented provincial regulation (Ontario requires separate OSC registration); no DAO legal framework; no published DeFi-specific tax guidance.

India

Regulatory mechanism: No consolidated crypto statute. DeFi is governed negatively through a punitive Virtual Digital Asset (VDA) tax regime (Income-tax Act, from 2022) and PMLA-based FIU-IND VDASP registration (from March 2023). Crypto has been legal to buy, sell, and hold since IAMAI v. RBI (March 4, 2020) but is not legal tender. There is no India-specific DeFi rulebook.

Outcome data:

• 54 VDASPs registered with FIU-IND as of March 9, 2026 (3 reportedly defunct); 53 unregistered exchanges taken down cumulatively
• Aggressive chokepoint enforcement: Binance ₹18.82 crore (June 2024); Bybit ₹9.27 crore (January 2025); ED investigating WazirX; ~₹28 crore PMLA penalties in FY2024-25; no DeFi-specific action on record
• 30% flat tax on VDA gains (Sec 115BBH) + surcharge + 4% cess + 1% TDS (Sec 194S); no loss set-off, no holding-period distinction -- among the most punitive regimes globally
• Income-tax Act 2025 in force April 1, 2026: 30%/1% TDS retained, "crypto-asset" added to the VDA definition, Sec 285BAA CARF-aligned reporting live
• No DAO law; projects domicile offshore (Cayman, Switzerland, Singapore); the DEA crypto discussion paper was shelved again (~April 2026) amid RBI opposition

Strengths: Bank-comparable AML reporting framework (FIU-IND Guidelines, January 8, 2026); clear registration perimeter for identifiable VDASPs; CARF-aligned cross-border reporting from 2026.

Weaknesses: Punitive 30%/1% tax suppresses domestic activity and drives users offshore; no DeFi or DAO framework; the controller-vs-controllerless boundary is undefined; no affirmative recognition of DeFi.

Germany

Regulatory mechanism: Banking Act (KWG) crypto custody licence (since January 2020); MiCA implementation via FinmadiG/KMAG; Electronic Securities Act (eWpG) for tokenized securities. BaFin runs a "compliance-first architecture" with assertive, substance-over-labels enforcement, while DeFi protocols sit in a grey zone.

Outcome data:

• BaFin forced Ethena GmbH to wind down USDe operations: prohibition (March 21, 2025), EUR 600,000 coercive fine (April 4, 2025), wind-up order (April 14, 2025)
• Continued "name-and-warn" consumer warnings against unauthorised crypto sites (March-May 2026)
• ~18 MiCA-authorized CASPs -- the leading EU jurisdiction; DZ Bank received MiCAR authorization for a retail crypto platform rolling out across ~670 Volksbanken/Raiffeisenbanken (January 14, 2026)
• GwG Section 15a unhosted-wallet rules stricter than the EU minimum (compliance deadline extended to July 2027)
• BMF March 2025 letter: first formal German DeFi tax classification (LP fees and lending as taxable income); 1-year holding exemption makes long-held crypto tax-free for individuals
• KStTG (CARF/DAC8) in force January 1, 2026; BZSt registration by July 31, 2026

Strengths: Early mover on crypto custody licensing; eWpG enables legally recognized tokenized securities; favourable 1-year holding exemption; strong enforcement credibility (Ethena).

Weaknesses: DeFi protocols remain in a regulatory grey zone with no formal BaFin classification; stricter-than-EU unhosted-wallet rules disadvantage German providers; DAO default is GbR (unlimited personal liability); 12-18 month actual licensing timelines.

Estonia

Regulatory mechanism: MiCA via the Market in Crypto-Assets Act (CMA, in force July 1, 2024), with supervision moved from the FIU to Finantsinspektsioon. Estonia's defining feature is its trajectory from permissive VASP haven to restrictive, AML-driven crackdown -- a contraction of the licensed population by roughly 95%.

Outcome data:

• FIU 2020 mass revocation of 500+ VASP licences; 2022 MLTFPA amendments expired 389 authorisations; active authorisations fell from 2,000+ to ~100 (by May 2023)
• Finantsinspektsioon: 2 CASPs authorised as of June 2026 — Lightyear Europe AS (17 November 2025) and AS LHV Pank (18 May 2026), per the ESMA interim MiCA register (CASPS.csv, updated 4 June 2026)
• Hard sunset July 1, 2026: legacy FIU/MLTFPA virtual-currency licences cease to be valid; only FSA CASP or passported EU CASP licences permit services; no grace period and the deadline will not be extended
• Estonian CASP licence passports across all EU/EEA states
• Flat personal and corporate income tax rose from 22% to 24% effective 2026; no separate CGT (gains taxed as ordinary income); asymmetric loss rule disallows losses on non-MiCA-authorised platforms; DAC8/CARF applies to CASPs from January 1, 2026

Strengths: Full MiCA prudential supervision with EU passporting; clean consolidation after the AML crackdown; e-Residency infrastructure.

Weaknesses: Reputation legacy of the mass-revocation era; no bespoke DAO form (e-Residency guidance warns any DAO member who has ever voted may face full joint and several liability); no DeFi-specific guidance; the asymmetric loss rule penalizes use of non-EU venues.

Position 3: Extension of Existing Frameworks

Jurisdictions:

United States,

Hong Kong,

Japan,

France,

South Africa

These jurisdictions apply existing financial regulation to DeFi activities without creating DeFi-specific rules, layering interpretation, taxonomy, and activity-specific guidance onto pre-existing statutes. The regulatory posture is "same activity, same risk, same regulation."

United States

Regulatory mechanism: DeFi is regulated through pre-existing securities (Howey test), commodities (Commodity Exchange Act), and AML (BSA) statutes via multi-agency interpretation -- SEC, CFTC, FinCEN, OFAC, DOJ, IRS, OCC, and 49 state regulators. The 2021-2024 "regulation-by-enforcement" era has given way (2025-2026) to a taxonomy-and-exemption approach layered onto those same statutes rather than a bespoke DeFi licensing regime.

Outcome data -- enforcement era (2021-2024):

• CFTC v. Ooki DAO (2022-2023): first federal enforcement against a DAO as a legal entity; default judgment, $643,542 penalty, permanent shutdown; DAO treated as an unincorporated association
• OFAC Tornado Cash sanctions (August 2022): first sanctioning of autonomous smart contracts; Van Loon v. Treasury (Fifth Circuit, November 2024) held immutable smart contracts are not "property" under IEEPA; OFAC delisted Tornado Cash March 21, 2025
• US v. Roman Storm (2025): convicted on unlicensed money transmission, hung jury on ML/sanctions; DOJ filed to retry the deadlocked counts (March 9, 2026); Rule 29 acquittal motion undecided as of June 2026
• SEC v. Uniswap Labs: investigation closed February 2025 with no action; US v. Eisenberg / Mango Markets: convictions overturned May 2025
• Samuels v. Lido DAO (December 2024): DAO classified as a general partnership; governance token holders face personal liability

Outcome data -- 2025-2026 accommodation:

• SEC/CFTC MOU (March 11, 2026) classifying BTC and ETH as digital commodities under CFTC oversight
• SEC/CFTC joint five-category token taxonomy (March 17, 2026): digital commodities, collectibles, tools, stablecoins, digital securities -- governance tokens generally fall in the "digital tools" carve-out
• GENIUS Act stablecoin NPRMs (OCC, Treasury, FDIC, FinCEN/OFAC) through March-April 2026; SEC "Innovation Exemption"/tokenized-securities framework announced (speech-level) but expressly DELAYED on 22 May 2026 after listed-exchange (Nasdaq/NYSE/Cboe) pushback over market-structure and "third-party token" concerns — no new release timeline set as of 6 June 2026 (announced-but-deferred intent, not law)
• Senate Banking Committee advanced a CLARITY Act substitute adding a dedicated DeFi title (May 14, 2026; not enacted)
• State DAO LLC laws (Wyoming, Utah, Tennessee, Vermont); no federal DAO law; staking/yield rewards taxable as ordinary income on receipt (Rev. Rul. 2023-14)

Strengths: Produced the deepest judicial analysis of DeFi-specific questions globally -- DAO legal personality, smart-contract sanctionability, fraud boundaries in code. Taxonomy and exemption guidance now provide forward-looking clarity. Largest DeFi market globally.

Weaknesses: The enforcement-to-accommodation swing rests largely on executive policy, not durable legislation, and could reverse. Developer liability remains unresolved (Storm mixed verdict). Multi-agency fragmentation and 49 state MTLs impose prohibitive compliance costs; no federal passport (Montana the sole MTL exception).

Hong Kong

Regulatory mechanism: AMLO Part 5A for VATP licensing; SFO for securities-type virtual assets. The SFC applies functional equivalence -- "same business, same risks, same rules" -- and progressively adds activity-specific VASP verticals rather than a bespoke DeFi regime. The ASPIRe roadmap signals expansion to DeFi lending, staking, and advisory.

Outcome data:

• 12 platforms fully VATP-licensed as of mid-February 2026 (Victory Fintech the 12th, February 17, 2026)
• HKD 5 million minimum paid-up capital for a VATP licence; stablecoin issuer HKD 25 million
• JPEX case (HKD 1.6 billion frozen, ~80 arrests) -- largest crypto enforcement in Hong Kong history; total fines HKD 49.9M in 2023/2024
• No CGT; HKMA granted the first two stablecoin issuer licences (Anchorpoint Financial and HSBC, April 10, 2026); 24/7 tokenised-product trading framework (April 20, 2026)
• Mantra Dao v. Mullin (2024): court compelled a DAO to disclose financial records; no DAO legal framework
• CARF/Amended CRS Bill gazetted May 22, 2026; AEOI on crypto from 2028

Strengths: No CGT; clear, aggressive enforcement precedent (JPEX); global liquidity integration for licensed VATPs; institutional credibility via bank stablecoin licensing.

Weaknesses: No DeFi-specific legislation; no DAO legal framework; case-by-case approach creates uncertainty for novel models; purely decentralised protocols with no identifiable operator sit outside the perimeter.

Japan

Regulatory mechanism: Payment Services Act (PSA) for CAESP registration; FIEA for security tokens and collective investment schemes; JVCEA self-regulatory oversight. The FSA applies function-based assessment and is migrating crypto regulation from the PSA to the FIEA (Cabinet-approved bill, April 10, 2026; pending the Diet), with a pioneering DAO LLC carve-out.

Outcome data:

• 32 registered CAESPs as of April 2025; over 12 million accounts; JPY 5 trillion in deposits; 95% cold storage requirement
• April 2024 Cabinet Office Ordinance reclassified DAO LLC (godo kaisha) member tokens as Paragraph II securities, enabling LLC-type DAOs -- a pioneering DAO legal framework
• FY2026 tax reform passed the Diet (March 31, 2026): 20.315% separate self-assessment for "Specified Crypto Assets" on registered exchanges plus 3-year loss carryforward (operative ~2027), but DeFi yields remain miscellaneous income up to ~55.945%
• FSA requested Apple/Google block unregistered exchange apps (February 2025); OECD CARF reporting from January 1, 2026
• No DeFi-specific enforcement actions

Strengths: Comprehensive exchange licensing; pioneering DAO legal framework (LLC-type DAO, 2024); self-regulatory model (JVCEA) with statutory backing; proactive PSA-to-FIEA migration.

Weaknesses: Punitive tax regime for DeFi (up to ~55% on yields); regulatory gap for truly decentralized protocols; 12-18 month actual CAESP registration timeline; no comprehensive DeFi activity guidance.

France

Regulatory mechanism: The bespoke Loi PACTE (2019) PSAN regime is being superseded by MiCA CASP authorization. The AMF applies "same activity, same risk, same regulatory outcome" and has engaged DeFi through a pioneering discussion paper (June 2023, responses July 2024) and a voluntary smart-contract certification initiative.

Outcome data:

• PSAN white list at data.gouv.fr; as of January 2026, 90 DASPs/PSANs had not obtained a CASP licence (~30% applied, ~40% with no intention); hard deadline July 1, 2026 (criminal penalties: 2 years + EUR 30,000)
• Ordinance 2024-936 recognizes crypto-assets as intangible movable property; Law 2025-391 introduced a dedicated crypto-asset pledge regime for collateral/lending certainty
• Strong enforcement: AMF blacklist (23 sites added April 22, 2026), ACPR AML inspections (Binance, Coinbase), Binance criminal ML investigation
• PFU flat tax rose from 30% to 31.4% on 2026 gains; crypto-to-crypto swaps not taxable; DGFiP DeFi-specific tax guidance still not issued as of June 2026
• Domestic DeFi ecosystem includes Morpho (lending) and Velora/ParaSwap (DEX aggregation)

Strengths: Early mover advantage (PACTE 2019); AMF actively engaging with DeFi through discussion papers; dedicated crypto-asset pledge regime; crypto-to-crypto swaps not taxable.

Weaknesses: DGFiP has not issued DeFi tax guidance; smart-contract certification still exploratory; no DeFi-specific framework enacted; DAO default is société de fait (partner liability); hard July 2026 PSAN deadline creates transition risk.

South Africa

Regulatory mechanism: South Africa regulates crypto by declaring it a "financial product" under existing FAIS/FICA statutes (General Notice 1350, October 19, 2022) rather than enacting a bespoke crypto law. The approach is technology-neutral and activity-based within a Twin Peaks structure, with the FSCA recognising a "spectrum of decentralization."

Outcome data:

• 512 CASP applications since June 1, 2023; 300 approved, 14 declined, 121 withdrawn (FSCA, December 15, 2025)
• Genuinely decentralized, operator-less protocols fall outside the CASP perimeter (per the December 2024 DeFi Market Study); where an identifiable operator, governance, oracle, or liquidity-pool controller exists, FAIS may apply
• Escalating supervision: 81 unlicensed-business investigations (56 ongoing); FIC Directive 9 Travel Rule in force April 30, 2025 (~R25,000 threshold)
• Conflicting High Court judgments on crypto as "capital": Standard Bank v SARB [2025] (not capital) vs Mangundhla v SARB [2026] (money and capital; ~R6m / ~1,680 BTC forfeiture upheld, June 1, 2026)
• Exited the FATF grey list October 24, 2025; CARF CASP reporting commenced March 1, 2026 (first batch due May 2027); income tax up to 45%, CGT effective top ~18% for individuals
• No DAO legislation or purpose-built wrapper

Strengths: Activity-based extension provides a clear licensing perimeter; large, fast-moving CASP authorisation pipeline; exited the FATF grey list; technology-neutral treatment of decentralization as a spectrum.

Weaknesses: No bespoke DeFi or DAO framework; "who bears responsibility" for operator-less protocols flagged as unresolved; contested exchange-control/capital classification in the courts; no recognised DAO wrapper.

Position 4: Comprehensive Framework with DeFi Carve-Out

Jurisdictions:

EU (MiCA + Article 142 review),

UK (FSMA regime),

Brazil (Law 14,478 / SPSAV),

Australia (Digital Assets Framework Act 2026),

Malta,

Thailand, British Virgin Islands,

Nigeria

These jurisdictions have enacted (or are enacting) broad crypto regulation that captures identifiable service providers comprehensively, while genuinely decentralized protocols fall into an explicit carve-out, exemption, or gap.

European Union (MiCA)

Regulatory mechanism: MiCA (Regulation (EU) 2023/1114, fully effective December 30, 2024) is the world's first comprehensive harmonised crypto framework. Recital 22 exempts services provided "in a fully decentralised manner without any intermediary" -- conditional and undefined. Article 142 mandated a Commission DeFi report; ESMA applies a four-layer decentralisation test (settlement, architecture, governance, user interface).

Outcome data:

• ~102 MiCA-authorized CASPs as of December 2025; leaders Germany (~18), Netherlands (~14), France (~6), Malta (~6); minimum capital EUR 50,000-150,000 by class; full EU passporting
• Joint EBA-ESMA Article 142 report (January 2025); ESMA peer review (July 2025) found Malta's CASP authorizations had material unresolved quality issues
• Pertsev (Netherlands): Tornado Cash developer convicted, 64 months; appeal pending as of June 2026; cumulative MiCA-related fines exceeded EUR 540 million by November 2025
• TFR in force (December 30, 2024, CASP-to-CASP EUR 0 threshold); AMLR (effective July 2027) prohibits anonymous wallets; DAC8 reporting year began January 1, 2026
• Product Liability Directive 2024/2853 includes software as a "product" with strict liability (transposition December 9, 2026)
• May 20, 2026: Commission launched a targeted MiCA review consultation (closes August 31, 2026) discharging the Article 142 mandate, asking whether DeFi/staking/lending should be brought into scope; standalone Article 142 report still unpublished

Strengths: The global benchmark for harmonised crypto regulation; passporting eliminates 27 national licences; data-driven Article 142 review; the most comprehensive three-pillar AML architecture (AMLR + AMLD6 + AMLA).

Weaknesses: The "fully decentralised" exemption is unworkable without a definition; PLD strict liability could reshape DeFi deployer risk; DAO liability defaults to general partnership in most member states; taxation unharmonised; DeFi-specific calibration remains pending.

United Kingdom (FSMA Regime)

Regulatory mechanism: FSMA 2000/2023 enabling powers; the Cryptoassets Regulations 2026 (made February 4, 2026) create new regulated activities effective October 25, 2027, explicitly covering issuance, trading, dealing, arranging, custody, and staking. The FCA proposes a "truly decentralised" exemption (controlling-person test) -- more comprehensive on DeFi than MiCA.

Outcome data:

• Property (Digital Assets etc) Act 2025: digital assets recognised as a third category of personal property (Royal Assent December 2025)
• MLR registration: ~44 firms registered out of ~359 applications since January 2020 (~87% failure rate); future gateway opens September 30, 2026, closes February 28, 2027
• Capital requirements GBP 75,000-750,000 by activity; CP25/40 proposes retail DeFi over-collateralisation (max 50% LTV) and a ban on proprietary tokens in lending
• April 15, 2026: FCA CP26/13 perimeter guidance; dedicated DeFi guidance confirmed to follow later in 2026; CARF reporting commenced January 1, 2026
• May 26, 2026: HTX designated under UK Russia sanctions -- first crypto exchange so designated; no DeFi-specific enforcement yet
• No DAO entity (Law Commission concluded none currently needed); NGNL tax treatment proposed but not enacted

Strengths: Most developed common-law digital assets framework globally (Property Act 2025, Law Commission work); regime explicitly captures staking, lending, and custody -- core DeFi activities MiCA omits; FCA treats decentralisation as a spectrum.

Weaknesses: Regime does not commence until October 2027; no DAO limited-liability wrapper; 87% MLR failure rate raises capacity concerns; NGNL not enacted; no EU passporting.

Brazil

Regulatory mechanism: Law No. 14,478/2022 and BCB Resolutions 519/520/521 establish a comprehensive statutory VASP/SPSAV licensing regime targeting identifiable service providers, with the CVM applying a functional securities test. Truly decentralized protocols without an identifiable operator fall into an explicit gap; staking jurisdiction is unresolved between the BCB and CVM.

Outcome data:

• Capital requirements of R$10.8-37.2 million for SPSAVs -- prohibitive for DeFi startups; SPSAV framework in force February 2, 2026; compliance deadline October 30, 2026
• Stablecoins drive ~90% of Brazil's crypto transaction volume; BCB Resolution 561 (April 30, 2026) bans regulated eFX providers from settling cross-border remittances in stablecoins/crypto (effective October 1, 2026)
• No DeFi-specific enforcement; the October 30, 2026 prohibition on transacting with non-authorized VASPs could trigger enforcement against unregistered DeFi front-ends
• No DAO legislation; unincorporated DAOs risk classification as sociedade em comum (de facto partnership) with unlimited liability
• DeCripto reporting (CARF-aligned, effective July 2026) covers DeFi, RWA, and self-hosted wallets; capital gains progressive 15%-22.5% (the proposed flat MP 1303 rate lapsed October 8, 2025)

Strengths: Comprehensive legislative foundation; dual-regulator model (BCB/CVM) leveraging existing expertise; CARF-aligned DeCripto reporting covering DeFi.

Weaknesses: High capital requirements exclude DeFi operators; no framework for truly decentralized protocols; staking jurisdiction unresolved; no DAO legal framework.

Australia

Regulatory mechanism: ASIC applies the Corporations Act on a substance-over-form basis. Australia has now enacted the Corporations Amendment (Digital Assets Framework) Act 2026 (Royal Assent April 8, 2026; commences April 9, 2027), extending AFSL licensing to Digital Asset Platforms (DAPs) and Tokenised Custody Platforms (TCPs) platform-wide while carving out core token infrastructure, custodial staking, and low-value operators.

Outcome data:

• ASIC v. Block Earner: the leading DeFi-adjacent case; High Court heard the appeal March 12, 2026, judgment reserved
• ASIC v. BPS Financial (Qoin): AUD 14 million penalty + 10-year AFSL ban (January 27, 2026)
• ASIC class no-action position expires June 30, 2026 (AFSL application deadline); tranche 2 AML/CTF reforms and the FATF Travel Rule commence July 1, 2026
• AFSL min AUD 50,000 net tangible assets (higher for custody/dealing); statutory 150-day timeline (6-12 months actual)
• ATO treats LP deposits as CGT events and staking deposits as disposals -- among the most aggressive positions globally; 50% CGT discount proposed to be replaced from July 2027 (announced, not legislated)

Strengths: Block Earner precedent suggests pure access intermediaries may avoid AFSL; the enacted Act creates explicit DAP/TCP licensing categories with sensible infrastructure carve-outs; detailed ATO DeFi tax guidance.

Weaknesses: Extended transition (commencement April 2027); aggressive ATO staking/LP positions may drive activity offshore; DAO status NOT VERIFIED in the matrix (no DAO legislation described).

Malta

Regulatory mechanism: MiCA via the Markets in Crypto-Assets Act (Chapter 647, Act XXXVI of 2024) under a dual MFSA/FIAU architecture. Fully decentralised services without an intermediary are out of scope (MiCA Recital 22); centralised "DeFi" front-ends and operators are CASPs requiring authorisation. Malta's legacy VFA/ITAS/MDIA trio (2018) is being sunset into the MiCA regime.

Outcome data:

• ~12 CASPs + 2 EMT issuers authorised as of May 2026 (trade-press figure); CASP authorisation passports across all 27 EU member states; capital EUR 50,000-150,000 by class
• ESMA fast-track peer review (July 10, 2025) found material issues in MFSA CASP authorisation not fully resolved at the point of authorisation
• Reported Malta-EU tension over an ESMA proposal to centralise supervision of cross-border crypto firms (April 2026), which the MFSA publicly opposes
• VFA-to-CASP grandfathering ends July 1, 2026; the Virtual Financial Assets Act (Chapter 590) is scheduled for repeal July 3, 2026
• 35% headline corporate rate reduced via full-imputation refunds; no CGT on isolated investor disposals of coins held as a store of value; DAC8/CARF first reporting generally due 2027 re 2026 data

Strengths: Early-mover credibility (2018 VFA trio); full MiCA implementation with EU passporting; optional ITAS/MDIA certification of smart contracts and DAOs.

Weaknesses: ESMA peer-review findings dent authorisation credibility; the "fully decentralised" carve-out leaves genuine DeFi out of scope; no DAO legal personality (default reliance on company/foundation/association wrappers); LP-reward tax treatment NO DATA FOUND.

Thailand

Regulatory mechanism: A comprehensive, licensing-led regime under the Emergency Decree on Digital Asset Businesses B.E. 2561 (2018), extraterritorial since April 13, 2025. The SEC channels activity into seven licensed categories while excluding permissionless DeFi: exchange-offered staking and lending yield products are prohibited, and crypto-as-payment is discouraged or banned. Genuine DeFi is channelled into licensed venues via sandboxes and a tax exemption.

Outcome data:

• As of February 14, 2025: 12 Exchanges, 13 Brokers, 3 Dealers, 9 ICO Portals, 2 Custodial, 2 Fund Managers, 2 Advisors; THB 50,000,000 (~USD 1.4M) capital for an exchange
• Aggressive extraterritorial enforcement: SEC named Bybit, 1000X, CoinEx, OKX, XT.COM illegal for Thai users (May 29, 2025, all blocked by June 28, 2025); criminal complaints against a licensed broker + offshore platform + executives (February 2026)
• Capital gains PIT exempt 2025-2029 via licensed operators (Ministerial Reg No. 399); DeFi/on-chain gains fall outside the exemption
• No DAO legal-personality regime; no Thai wrapper analogous to the Swiss or Cayman foundation
• BOT programmable-payment/stablecoin sandbox (1:1 THB-backed reserve) carried into 2026

Strengths: Comprehensive licensing taxonomy; aggressive, effective extraterritorial enforcement; an attractive 2025-2029 capital-gains exemption channelling activity into licensed venues; active sandbox experimentation.

Weaknesses: The staking/lending prohibition and payment ban foreclose centralized DeFi-as-a-service; no DeFi or DAO framework; no Revenue Department guidance on DeFi yield/LP mechanics; DeFi gains excluded from the tax exemption.

British Virgin Islands

Regulatory mechanism: A facilitative activity-based VASP regime under the VASP Act 2022 (in force February 1, 2023), with SIBA 2010 in parallel for investment-type tokens. The FSC has expressly confirmed that the sole act of issuing or selling a virtual asset is not a VASP activity (Industry Circular 43 of 2025), underpinning the BVI token-launch industry, while custodial/exchange/transfer chokepoints are captured.

Outcome data:

• 14 registered VASPs with the FSC as at July 30, 2025; application fees of US$10,000 (custody/exchange) or US$5,000 (other VAS); FSC targets ~6 months processing
• Unhosted/non-custodial wallet providers are expressly excluded from VASP scope; non-custodial DeFi sits outside the AML regime unless a registrable activity is present
• No DeFi-specific enforcement (NO DATA FOUND on action against a protocol, DAO, or orphan/purpose-trust wrapper as of June 4, 2026)
• No dedicated DAO statute; DAOs are wrapped using BVI Business Companies in orphan structures or companies limited by guarantee, often paired with a Cayman foundation (the "catamaran")
• 0% tax (no income, corporate, capital gains, or wealth tax); CRS 2.0 from January 1, 2026 (first filing May 2027); CARF legislation expected 2026, effective 2027

Strengths: Clear statutory carve-out for token issuance, software development, and unhosted wallets; tax neutrality; a mature offshore-structuring toolkit feeding the token-launch industry; AML obligations limited to genuine chokepoints.

Weaknesses: No bespoke DAO statute (reliance on imported wrappers); no DeFi-specific guidance for borderline custodial models; thin enforcement track record limits predictability.

Nigeria

Regulatory mechanism: A comprehensive securities-based statutory regime via the Investments and Securities Act 2025 (signed March 25, 2025) and SEC Rules, under which digital assets are statutorily classified as securities. The framework is built around licensed, locally incorporated VASPs; genuinely decentralized, non-custodial protocols are unaddressed and effectively carved out (no bespoke DeFi/DAO category).

Outcome data:

• SEC categories: VASP (umbrella), DAOP, DAX, DAC, DAI, plus interim ARIP Approval-in-Principle; first ARIPs August 29, 2024; Busha and Quidax received first provisional VASP licences; SEC slowing new approvals
• VASP minimum paid-up capital ₦500,000,000; registration fee ₦30,000,000; local incorporation and a resident director/CEO required
• Aggressive chokepoint enforcement: Binance (2024-2025, executives detained, money-laundering/tax-evasion allegations; EFCC froze 105 accounts, April 2024); no DeFi-specific action (NO DATA FOUND)
• Nigeria Tax Act 2025 effective January 1, 2026: progressive taxation of digital-asset gains (0%-25%, replacing the prior flat 10% CGT); mandatory VASP transaction-level reporting per user; FIRS reconstituted as the NRS
• No DAO legislation; only CAMA 2020 vehicles available

Strengths: Clear statutory footing (digital assets as securities); defined VASP licensing categories; transaction-level reporting infrastructure; progressive tax replacing the flat CGT.

Weaknesses: Very high capital and registration costs (₦500M / ₦30M); coercive enforcement posture; no DeFi or DAO framework; non-custodial protocols unaddressed; FATF grey-list status as of June 2026 NOT VERIFIED.

Position 5: DeFi-Specific Licensing

Jurisdictions:

UAE (see Position 6 below for matrix classification),

El Salvador (LEAD issuer/DASP regime), Seychelles (VASP Act 2024)

This position captures jurisdictions that created licensing categories purpose-built to reach DeFi-style activity -- whether a dedicated issuer/service-provider regime (El Salvador) or a substance-demanding mandatory VASP regime that reaches DeFi conducted by an identifiable operator (Seychelles). In each case regulation still channels to an identifiable issuer or operator; genuinely decentralized, controllerless DeFi remains permissive-by-omission. (The UAE created the world's first DeFi-specific operating licence but the matrix classifies its overall posture as innovation-first/sandbox -- it is profiled under Position 6.)

El Salvador

Regulatory mechanism: A purpose-built, issuance- and service-provider-centric regime under the Digital Assets Issuance Law (LEAD, in force 2023), administered by a single specialised regulator, CNAD. Regulation attaches to registered issuers and DASPs (plus certifier/structurer/stablecoin-issuer categories); genuinely decentralised DeFi is permissive-by-omission. The Bitcoin Law (2021) runs on a separate track.

Outcome data:

• Registered participants include Tether (DASP + stablecoin issuer), Bitfinex Derivatives, and Freedx; a ~84% rejection rate (~16% approval) is reported, with leverage concentrated at the entry gate
• Statutory minimum share capital USD 2,000 (5% deposited locally); practitioners advise ~USD 70,000; registration fee USD 5,475; statutory 20-business-day maximum (actual 2-5 months)
• 0% income, capital gains, VAT, and municipal tax for registered qualifying activity; DeFi-specific yield/LP guidance NOT VERIFIED
• No enforcement track record (NO DATA FOUND for any CNAD public order, fine, or revocation against a DeFi protocol/DASP)
• No DAO recognition; entities must adopt a hybrid SA/SRL company or foundation to interface with CNAD
• December 2025: IMF softened its stance, no longer recommending a halt to Bitcoin accumulation; a discrepancy persists between Bukele's "1 BTC/day" narrative and the IMF-reported no-purchase position

Strengths: Single specialised regulator reduces fragmentation; a purpose-built registration pathway with a fast statutory clock; 0% tax for registered activity; affirmative state encouragement.

Weaknesses: High effective entry friction (~84% rejection rate); no decentralisation test or DEX/lending-specific treatment; no DAO wrapper; no enforcement track record to gauge predictability; macro/IMF overhang.

Seychelles

Regulatory mechanism: A substance-demanding, mandatory activity-based VASP licensing regime under the VASP Act 2024 (commenced September 1, 2024), under which offering VA services in or from Seychelles without an FSA licence is a criminal offence. There is no "decentralized = exempt" carve-out: the Act regulates persons, so an identifiable operator with a Seychelles nexus is in scope, reaching DeFi-style exchange, lending, and borrowing activity. Mining and mixers are banned.

Outcome data:

• Four VASP categories (Wallet, Exchange, Broking, Investment Provider) plus ICO/NFT registration; annual licence base SCR 75,000 plus per-category fees (Wallet 300,000 / Exchange 375,000 / Broking 150,000 / Investment 75,000)
• First cohort approved May-October 2025 (MATCH2PAY, Bequant Prime, Bybit, eToro, OKX, Bitmex, etc.); BTG Technology approved March 9, 2026; as of June 2026 the entire first cohort remains in "Assessment" status, with few if any fully granted licences visible
• Active supervision over passive registration: FSA criticised low-quality/AI-generated/paper-only applications (Circular 14/2025); company strike-off for post-deadline unlicensed operators
• Substance requirements (resident director 183+ days, local presence); no CGT. (The 1.5% rate is the SRC presumptive-tax rate on TURNOVER for businesses below SCR 1,000,000 turnover, NOT a VASP-specific assessable-income concession — the earlier VASP-specific framing is NOT VERIFIED; the 15%/25% band and territorial principle are SRC-confirmed.)
• No DAO legal-personality regime; traditional IBC/CSL/Foundation vehicles only; CARF commencement NO DATA FOUND

Strengths: Mandatory, substance-demanding licensing closes the prior light-touch loophole; reaches DeFi-style activity where an identifiable operator exists; active, quality-focused supervision; no CGT.

Weaknesses: Heavy substance demands and a stalled "Assessment"-status pipeline create practical uncertainty; controllerless protocols NOT VERIFIED within scope; no DAO wrapper; per-category capital figures NOT VERIFIED against primary sources; no confirmed CARF timeline.

Position 6: Innovation-First / Sandbox Approach

Jurisdictions:

Singapore (Project Guardian),

Switzerland (DLT Act + substance-over-form),

UAE (VARA/ADGM DeFi licensing),

Cayman Islands (Foundation Company + VASP gatekeeping),

Bermuda (DABA sandbox + DerivaDEX), Marshall Islands (DAO LLC),

Liechtenstein (TVTG / Token Container Model)

These jurisdictions prioritize DeFi experimentation and facilitation -- through institutional sandboxes, technology-neutral statutes, purpose-built DAO wrappers, and permissive treatment of genuinely decentralized activity. They lead the spectrum on accommodation.

Singapore (Project Guardian)

Regulatory mechanism: MAS pairs technology-neutral, activity-based regulation (Payment Services Act, SFA, FSMA Part 9) with an institutional sandbox strategy -- Project Guardian, Global Layer 1 (GL1), and Sandbox Express/Plus -- positioning Singapore as the hub for regulated institutional DeFi. April 2024 PS Act amendments extended scope to DEX operations, and licensed DPTSPs are prohibited from facilitating retail staking or lending.

Outcome data:

• Project Guardian: over 40 financial institutions (JPMorgan, DBS, Standard Chartered, HSBC, Citi, BNY Mellon, Apollo, Schroders, Franklin Templeton); 15+ industry trials across 6 currencies; the Guardian Wholesale Network commercialising tokenisation
• DigiFT graduated from the sandbox to a CMS licence for on-chain RWA trading; Franklin Templeton launched the first MAS-approved tokenised fund (minimum S$20)
• ~33 MPI licences (early 2025); FSMA Part 9 (effective June 30, 2025) left only ~15-20 firms fully compliant; ~29 active DPT MPI licences reported (May 2026)
• MAS revoked the MPI licence of Bsquared Technology (May 14, 2026) -- the first publicly disclosed crypto/DPT MPI revocation; June 2025 composition penalties of S$960,000 on five MPIs
• Single-currency stablecoin framework finalised (draft legislation expected 2026, not yet enacted); no CGT; no DAO framework (partnership default)

Strengths: No comparable institutional coalition globally; a demonstrated sandbox-to-licence pathway (DigiFT); the trust-anchor model offers a credible route to compliant institutional DeFi; no CGT.

Weaknesses: Focused on institutional DeFi -- retail staking/lending restricted; does not address permissionless protocol regulation; no DAO wrapper (general-partnership default with unlimited liability).

Switzerland (DLT Act + Substance-Over-Form)

Regulatory mechanism: The DLT Act (effective 2021) amended ten federal laws to accommodate blockchain finance. FINMA applies "same business, same risks, same rules" -- genuinely decentralized protocols with no identifiable operator face no licensing requirement -- making Switzerland the most accommodating of the innovation-first cohort. The DLT trading facility licence enables integrated trading, custody, and settlement with retail participation.

Outcome data:

• BX Digital AG received the first DLT trading facility licence (March 12, 2025) after a multi-year process; five FinTech licences as of December 31, 2024; FINMA approved the merger of SIX Digital Exchange into SIX SIS (May 5, 2026)
• The Swiss Foundation (Stiftung) is the leading DAO wrapper globally -- used by Ethereum, Cardano, Solana, Polkadot, Aave, dYdX, Tezos, NEAR, and Cosmos; the lighter Verein is an alternative
• No CGT on privately held crypto; cantonal income tax ~11.2% (Zug) to over 40%; CARF/AEOI domestic framework in force January 1, 2026 but the Federal Council decided crypto provisions will not apply in 2026 (first exchange 2027 at earliest)
• FINMA enforcement: Dohrnii Foundation cease-and-desist; 235 investigations for unauthorized deposit-taking in 2024; proposed payment- and crypto-institution licences (consultation closed February 2026)

Strengths: Technology-neutral framework integrated into existing law; statutory bankruptcy protection for custodied digital assets (Art. 242a DEBA) -- a global rarity; the well-tested Swiss Foundation DAO wrapper; no individual CGT; the deep Crypto Valley cluster.

Weaknesses: No formal FINMA DeFi-specific guidance (case-by-case uncertainty); DeFi taxation lacks explicit Federal Tax Administration guidance; no EU passporting; professional-trader classification is fact-intensive.

UAE (VARA / ADGM DeFi Licensing)

Regulatory mechanism: The UAE created the world's first DeFi-specific operating licence (VARA, February 2025) and brought DeFi protocol operators into scope at ADGM (September 2025). The matrix classifies the UAE's overall posture as innovation-first/sandbox: a multi-regulator, tax-free environment (VARA, ADGM FSRA, DIFC DFSA, the new federal CMA, and CBUAE) that makes it the most proactive DeFi regulator globally.

Outcome data:

• MANTRA Finance FZE received the first VARA DeFi Limited License (February 2025); VARA capital AED 2-5 million; eight VARA and eight CMA activity categories; "Lending and Borrowing" is a licensed VARA category
• VARA Exchange Services Rulebook v2.1 (March 31, 2026): permanent VA derivatives regime (5:1 retail leverage, 20% margin, mandatory insurance fund)
• CMA issued a comprehensive federal Virtual Assets Framework (April 13, 2026), expanding regulated activities from 3 to 8 (excluding DIFC and ADGM); ADGM finalised a VA staking framework (April 29, 2026); CBUAE compliance deadline September 2026
• VARA penalised 19 firms (October 7, 2025) for unlicensed activity (AED 100,000-600,000); max VARA fine AED 10,000,000
• 0% personal income tax; 9% corporate tax above AED 375,000 (0% in qualifying free zones); no CGT; privacy tokens and algorithmic stablecoins prohibited

Strengths: The only jurisdiction with a dedicated DeFi operating licence; tax-free environment as a fundamental pull factor; regulatory competition across five zones driving innovation in design; explicit lending/borrowing and staking frameworks.

Weaknesses: Five overlapping regulators create compliance complexity; high capital requirements may exclude smaller projects; AML/KYC licensing is in tension with permissionless DeFi; nascent enforcement track record (VARA ~4 years old); DAO status NOT VERIFIED.

Cayman Islands (Foundation Company + VASP Gatekeeping)

Regulatory mechanism: A permissive, facilitative regime that regulates only custodial chokepoints under the VASP Act 2020 while offering the Foundation Company (Foundation Companies Act 2017) as the global-standard DAO wrapper. DeFi is defined by exclusion -- private sales, airdrops, non-custodial P2P, and virtual service tokens fall outside the VASP Act -- and the jurisdiction adds tax neutrality and TechCayman.

Outcome data:

• The Cayman Foundation Company is the global standard DAO wrapper: 1,300+ registered by end-2024 (70% up), 400+ more in 2025, ~USD 10B in assets; foundation limited liability shields token holders
• VASP licensing (Phase 2 from April 1, 2025 for custody and trading platforms); 19 VASPs registered as of February 4, 2026; non-custodial P2P generally exempt; VASP Phase 2 minimum paid-up capital USD 100,000
• Permissive enforcement: a Gate.io public notice (April 2025) and 8 VASP cancellations (unpaid fees, 2025); no DeFi/foundation-wrapper enforcement
• March 24, 2026: tokenised-funds amendments brought tokenised funds under the existing CIMA funds framework, outside the VASP Act
• 0% tax (no income, corporate, capital gains, or withholding tax); OECD CARF in force January 1, 2026 (RCASP registration deadline extended to January 31, 2027)

Strengths: The leading DAO legal wrapper with separate legal personality and limited liability; tax neutrality; regulation confined to genuine custodial chokepoints; mature funds and structuring infrastructure.

Weaknesses: Limited, largely administrative enforcement track record; supervisory reviews flag director-composition and custody-policy gaps; reliance on the exclusion-based perimeter leaves borderline custodial models uncertain.

Bermuda

Regulatory mechanism: An early bespoke, activity- and risk-based regime under the Digital Asset Business Act 2018 (DABA) and the Digital Asset Issuance Act 2020 (DAIA), supervised by the Bermuda Monetary Authority. A graduated Test → Modified → Full (T/M/F) licensing on-ramp functions as a sandbox, and Bermuda has brought DeFi inside a supervised perimeter through the world-first DAO-governed exchange licence (DerivaDEX) and an Embedded Supervision DeFi pilot.

Outcome data:

• Over 40 digital asset firms licensed or in sandbox/test (Chambers 2025); DerivaDEX (Class T) and STS Digital (Full "F" licence, April 30, 2026)
• DerivaDEX launched its licensed non-custodial derivatives platform (BTC/ETH perpetuals for verified institutional traders, February 17, 2026), allocating regulatory responsibility to the licensed structure rather than to individual governance-token holders
• Minimum net assets US$100,000 for Class M/F; principle-based capital adequacy; Class T ~2-4 months, Class F ~4-9 months
• Engagement-led toward DeFi rather than enforcement-led; enforcement to date on centralised entities (Bittrex Global received a substantial civil penalty; Lai v BMA upheld DABA/BMA authority)
• 0% income/CGT for most (15% Corporate Income Tax only for in-scope MNE groups from January 1, 2025); no bespoke DAO statute (law-reform proposals at proposal stage as of June 2026)

Strengths: Early bespoke regime with a genuine graduated sandbox on-ramp; world-first DAO-governed exchange licence and an Embedded Supervision pilot bring DeFi into a supervised perimeter; tax neutrality for most.

Weaknesses: No enacted DAO statute (conventional vehicles only); thin DeFi-specific enforcement record; CRS/CARF crypto-reporting detail NOT VERIFIED; member-liability and code/developer safe-harbour questions left to general common law.

Marshall Islands

Regulatory mechanism: The world-first statutory DAO LLC wrapper -- the DAO Act of 2022 (effective November 25, 2022, with 2023 and 2024 amendments) -- confers full corporate personhood, smart-contract recognition, and a member liability shield, administered via MIDAO. A parallel financial-supervision track (Monetary Authority Act 2025 / Banking Act 1987, supervised by the new MIMA from September 23, 2025) covers VASP-type activity.

Outcome data:

• DAO LLCs have full personhood (own property, contract, sue/be sued) and a statutory member liability shield -- a deliberate contrast to the Samuels v. Lido DAO general-partnership outcome; governance tokens conferring no economic rights are not deemed securities
• No minimum capital for a DAO LLC; MIDAO incorporation from USD 9,500; statutory 30-day maximum (commonly ~3 weeks); the number of registered DAO LLCs is NOT VERIFIED
• For-profit DAO LLCs pay a 3% Gross Revenue Tax (excluding capital gains and dividends); non-profit DAO LLCs are tax-exempt; no income/corporate/CGT
• No firm-specific enforcement (NO DATA FOUND); the dominant pressure is external/macro-prudential (the FATF/APG 2024 evaluation rated 0/11 effectiveness outcomes substantially/highly effective; the IMF reiterated financial-integrity concerns, December 2025)
• November 26, 2025: first ENRA UBI distributions executed on-chain via the Lomalo wallet using USDM1; CARF adoption NOT VERIFIED

Strengths: The world's first purpose-built DAO LLC with statutory personhood, smart-contract governance, and a member liability shield; no minimum capital and a fast statutory clock; low/zero tax.

Weaknesses: Pioneering on entity law but lagging on AML/CFT effectiveness (FATF/APG concerns); the member-liability shield remains judicially untested; VASP licensing parameters and CARF adoption NOT VERIFIED; heavy external (IMF/FATF) scrutiny.

Liechtenstein

Regulatory mechanism: A dual regime: the TVTG (Blockchain Act, in force January 1, 2020 -- the first comprehensive blockchain law) with its token-type-agnostic Token Container Model, plus MiCAR via domestic implementation (from February 1, 2025) for EEA access. The FMA applies light-touch, event-driven supervision to TT service providers (persons, not protocols or code).

Outcome data:

• 29 companies held at least one TVTG registration (5 banks) as at November 4, 2025; the first MiCAR CASP -- RULEMATCH Europe AG -- became effective June 1, 2026
• TVTG capital varies by role (Key/Token Depositary CHF 100,000; Token Issuer CHF 50,000-250,000; Exchange CHF 30,000-100,000); FMA decides within 3 months of a complete application
• PGR wrappers (Foundation/Stiftung min CHF 30,000; Establishment/Anstalt) used to shield governance participants; unwrapped DAOs risk simple-partnership treatment
• No publicly reported FMA enforcement against a DeFi protocol, TT provider, or DAO wrapper through June 2026; event-driven supervision plus SPG AML
• Corporate flat 12.5% on net profit; no separate CGT (holdings enter the wealth-tax base); MiCAR transitional period extended to July 1, 2026 (Art. 143(3) maximum), after which TVTG providers performing MiCAR services must hold MiCAR authorisation

Strengths: Pioneered comprehensive blockchain law (TVTG) with the flexible Token Container Model; light-touch, event-driven supervision; PGR foundation/establishment wrappers for liability shielding; MiCAR EEA passporting once authorised.

Weaknesses: No bespoke DAO form (reliance on PGR wrappers); no DeFi-specific guidance and NO DATA FOUND on LP/yield tax mechanics; DAC8/CARF crypto reporting NOT VERIFIED; a small, registration-gated provider population.

Jurisdictions Spanning Multiple Positions

Several jurisdictions occupy more than one position on the spectrum. Their primary position below reflects the matrix's spectrum_position field; the secondary position captures a meaningful parallel posture.

Comparative Outcomes Matrix

The Optimal Zone

The evidence suggests that Positions 3, 4, and 6 produce the best outcomes across the measured metrics, with the specific optimal approach depending on what a jurisdiction prioritizes. Across all 27 jurisdictions, the clearest correlation is not the position per se but the presence of three enablers: a DAO legal wrapper, neutral or favourable tax, and engagement before regulation.

Best for Institutional DeFi Adoption

Singapore (Position 6) produces the strongest institutional DeFi outcomes. Project Guardian has assembled the most significant coalition of major financial institutions testing DeFi use cases under regulatory supervision, and the sandbox-to-licence pathway (DigiFT) provides a replicable model. However, retail DeFi is restricted.

Best for Legal Certainty and DAO Infrastructure

Switzerland (Position 6) and the Cayman Islands (Position 6) offer the strongest combination of legal infrastructure and permissive regulation. The Swiss Foundation and the Cayman Foundation Company are the two dominant DAO wrappers globally (Cayman alone has 1,300+ foundation companies holding ~USD 10B), while the Marshall Islands (Position 6) pioneered the only statutory DAO LLC with a member liability shield. Switzerland adds statutory bankruptcy protection for custodied assets and zero individual CGT; Crypto Valley reached USD 584 billion in combined valuation.

Best for DeFi-Specific Regulatory Clarity

UAE (Position 6, with dedicated DeFi licensing) remains the only jurisdiction offering a dedicated DeFi operating licence (VARA), now joined by explicit lending/borrowing and staking frameworks and a federal CMA regime. Combined with zero personal income tax, the UAE has the strongest pull factor for DeFi businesses seeking certainty. Seychelles (Position 5) and El Salvador (Position 5) also reach DeFi-style activity through purpose-built licensing, but channel regulation to identifiable operators or issuers and have thin or non-existent enforcement records.

Best for Comprehensive Framework

EU MiCA (Position 4) provides the most comprehensive harmonised framework, with passporting across 27 member states. The UK (Position 4) is arguably more comprehensive on DeFi specifically, explicitly capturing staking, lending, and custody with a controlling-person carve-out -- though its regime does not commence until October 2027. Australia (Position 4) has now enacted its Digital Assets Framework Act, and Brazil, Thailand, Malta, BVI, and Nigeria round out a crowded comprehensive-with-carve-out cohort -- the single most populated position, with eight jurisdictions. In every case the framework captures identifiable providers well but leaves genuinely decentralized protocols in an explicit gap.

Worst Outcomes

Position 1 (regulatory vacuum) and Position 2 (enforcement-first) consistently produce the weakest DeFi-development outcomes:

• South Korea's absence of any DeFi licensing pathway has suppressed domestic DeFi innovation entirely, despite one of the world's largest crypto-holding populations.
• India's punitive 30%/1% VDA tax and PMLA-only posture drive users and developers offshore, with no affirmative DeFi framework.
• Estonia's swing from VASP haven to a ~95% licence contraction illustrates how an AML-driven crackdown can hollow out a once-permissive ecosystem.
• Germany's assertive "compliance-first" enforcement (Ethena) leaves DeFi protocols in a grey zone despite the EU's largest CASP population.

The Key Insight

The jurisdictions producing the best DeFi outcomes share three features, now visible across all 27:

1. Clear legal treatment of DAOs -- whether through the Swiss Foundation, the Cayman Foundation Company, the Marshall Islands' statutory DAO LLC, Japan's LLC-type DAO, or the UAE's licensed-entity approach. The absence of DAO legal frameworks (South Korea, Canada, India, Brazil, Singapore, Thailand, Nigeria, South Africa, and most EU member states) correlates with lower or offshore-displaced DeFi activity.

2. Favourable or neutral tax treatment -- the Cayman Islands, BVI, UAE, Bermuda, Singapore, Hong Kong, Switzerland (0% individual CGT), El Salvador (0% on registered activity), and Seychelles (no CGT) all rank higher on DeFi facilitation than jurisdictions with punitive treatment (India at 30% flat, Japan at ~55% for DeFi yields, Australia's staking/LP-as-disposal positions).

3. Engagement before regulation -- Singapore (Project Guardian), Switzerland (DLT Act consultation), Bermuda (Embedded Supervision pilot), France (AMF DeFi paper), the EU (Article 142 review), and the UK (Law Commission reports) all pursued research and industry consultation before legislating. Jurisdictions that regulated reactively (US enforcement era, Germany, Estonia, India) or not at all (South Korea) produced worse DeFi-development outcomes.

The regulatory sweet spot is a framework that provides legal certainty through existing-framework extension or dedicated licensing, combined with innovation sandboxes for novel DeFi use cases, DAO legal wrappers, and competitive tax treatment -- without attempting to regulate the technology itself. No jurisdiction has yet solved the core problem: every regime, across all six positions, still attaches to an identifiable person, leaving genuinely controllerless protocols either exempt, in a gap, or simply unaddressed.

Verification Notes

This analysis synthesizes data exclusively from the canonical fact-matrix (.claude/defi-fact-matrix.json), which is itself extracted from the verified jurisdiction files in this repository's defi-regulation/regulations/ directory. All data points cited are verified and sourced in those underlying files. No new claims are introduced; aggregate counts (e.g. "eight jurisdictions in Position 4") are derived from the matrix for N=27.

Key data dependencies:

• CASP/VASP/licence counts are approximate and change as new authorisations are granted (several are trade-press or aggregator figures noted as such in the source files)
• Spectrum positions mirror each jurisdiction's matrix spectrum_position field as of the matrix's verification date; several differ from earlier drafts (US now Position 3; Australia and Brazil now Position 4; Germany and Estonia Position 2; Singapore and UAE Position 6)
• The US regulatory position rests substantially on 2025-26 executive policy rather than enacted legislation and could reverse
• Several frameworks are pending or newly enacted but not yet in force (UK October 2027, Australia April 2027, EU Article 142 follow-up, Brazil/Thailand/Nigeria transition deadlines through 2026) and outcomes may differ from proposals

Limitations:

• No standardised "DeFi activity index" exists across jurisdictions, making direct quantitative comparison impossible; activity levels are qualitative assessments based on enforcement, licensing, institutional participation, and protocol domicile
• Tax competitiveness assessments are simplified; effective rates depend on individual circumstances and treaty networks
• Several matrix cells are marked "NOT VERIFIED" or "NO DATA FOUND" (e.g. Marshall Islands DAO LLC count and CARF status; Liechtenstein and Bermuda crypto cross-border reporting); these are reflected honestly above rather than filled with inferred values. (Seychelles per-category capital is now primary-confirmed via SI 72 of 2024.)