
Malta's MFSA proposes legal category for DAOs, using governance token distribution and admin keys to distinguish genuine decentralization from controlled projects. Consultation open until July 10.
Malta's financial regulator has opened a consultation on creating a legal category for software-based organizations, a move that could bring DAOs and certain DeFi protocols under formal oversight. The Malta Financial Services Authority wants to separate projects that are genuinely decentralized from those that retain human control behind their smart contracts.
The European Union's MiCA regulation covers crypto-asset issuers and service providers. Services provided in a fully decentralized manner can remain outside its scope. That exception has created a gray area. Many projects present themselves as autonomous while a team retains the ability to modify code, halt transactions, or control the user-facing interface.
The MFSA's proposal examines facts rather than self-descriptions. Using a blockchain is not enough to prove decentralization. The regulator plans to analyze the distribution of governance tokens and the powers granted to specific wallets. When a few addresses hold the majority of voting rights, governance is decentralized in name only.
Administrative keys offer another signal. If a team can modify a smart contract, freeze funds, or pause the protocol, it has identifiable technical authority. In that case, the project may need to comply with obligations similar to those imposed on traditional organizations.
Legal recognition could allow DAOs to sign contracts, manage accounts, and clarify member liability. Without it, DAOs often rely on informal structures or incorporate in jurisdictions like Wyoming or the Marshall Islands. Clear rules in Malta would simplify relationships with institutional investors and banks.
The risk is a framework that holds every participant responsible for collective decisions. If a governance token holder faces liability for a contested proposal, participation in DAOs could drop. Projects might relocate to jurisdictions with lighter oversight. Singapore, Dubai, and Switzerland already compete for crypto-native business.
The regulator must balance user protection with the advantages of onchain governance. Too little oversight leaves investors exposed. Excessive regulation could push innovation elsewhere.
The public consultation remains open until July 10, 2026. Its outcome will be watched beyond Malta. The country already faces criticism over its application of the MiCA framework. It now wants to become a European laboratory for crypto regulation. The real challenge will be drawing the line between software and human responsibility.
Prepared with AlphaScala editorial tooling from the source reporting linked above. Indexable analysis may include a cited Alpha Score value. Publishing checks screen each story before release. Educational coverage, not personalized advice.