Crypto Regulation Has Shifted From Debate To Enforcement, But Fragmentation Persists
WalletConnect has published its inaugural “State of Compliance, Policy, and Regulation Report,” offering a comprehensive cross-jurisdictional overview of how digital asset regulation has shifted from legislative proposal to live enforcement in 2026. The report covers stablecoin frameworks, anti-money laundering requirements, the Travel Rule, DeFi governance, and compliance across payments, trading, custody, and tokenization.
The study’s central finding is that the debate over whether digital assets belong inside the regulated financial system is now largely over. The European Union’s Markets in Crypto-Assets Regulation (MiCA) has been fully applicable since December 2024, with the maximum national transitional period closing on 1 July 2026 — meaning more than 1,000 firms that failed to obtain MiCA authorisation by that deadline can no longer rely on its grandfathering provision.
In the United States, the GENIUS Act — the country’s first comprehensive federal framework for payment stablecoins — was signed into law in July 2025, though it does not take full effect until January 2027 pending final implementing rules. Hong Kong issued its first stablecoin-issuer licences in April 2026, and Japan’s amended Payment Services Act entered into force in June 2026. The UK has finalised its regulatory framework, with full activation scheduled for October 2027.
Despite this momentum, cross-border fragmentation remains substantial: an approach compliant in one jurisdiction still requires jurisdiction-specific analysis of entity structure, licensing, reserves, and data-sharing arrangements in others.
Self-Custody, DeFi, and the Unresolved Frontier
Across all reviewed jurisdictions, the report identifies a recurring structural principle it terms “regulated-touchpoint accountability”: regulatory obligations attach to licensed intermediaries at the point where value enters or exits the regulated financial system, not to individuals exercising self-custody.
When a regulated firm interacts with a self-custodial wallet, that firm remains responsible for its own customer due diligence, sanctions screening, transaction monitoring, and Travel Rule compliance. Self-custody does not transfer those obligations to the wallet holder, nor does it exempt individuals from sanctions rules that may apply directly to them.
DeFi remains the most legally unsettled area. The report notes that total value locked in DeFi protocols grew from approximately $45 billion in 2023 to around $150 billion by mid-2025, yet no major jurisdiction has fully resolved whether and how to regulate decentralised protocols and immutable smart contracts.
The Tornado Cash litigation in the United States illustrates the difficulty: a federal circuit court held that certain immutable contracts were not property subject to sanctions designation, while a separate criminal prosecution turned on whether operating the protocol constituted unlicensed money transmission. MiCA sidesteps the question by excluding services provided in a genuinely decentralised manner.
The report is notably constructive about the compatibility of compliance and self-custody. Tools including programmable token standards, cryptographic address-verification, reusable identity credentials, blockchain analytics, and Travel Rule data-exchange protocols are already in production use within regulated workflows. Emerging wallet architectures — including multi-party computation wallets and smart-account delegation — increasingly allow compliance logic to run at the wallet layer itself.
The study cautions, however, that these tools’ legal sufficiency remains specific to each jurisdiction, activity, and regulated party, and that unresolved gaps — including classification of new wallet architectures, residual address-poisoning risks, and the absence of mutual recognition between major regimes — still constitute a substantive agenda for the next regulatory phase.
Disclaimer
In line with the Trust Project guidelines, please note that the information provided on this page is not intended to be and should not be interpreted as legal, tax, investment, financial, or any other form of advice. It is important to only invest what you can afford to lose and to seek independent financial advice if you have any doubts. For further information, we suggest referring to the terms and conditions as well as the help and support pages provided by the issuer or advertiser. MetaversePost is committed to accurate, unbiased reporting, but market conditions are subject to change without notice.
About The Author
Alisa, a dedicated journalist at the MPost, specializes in crypto, AI, investments, and the expansive realm of Web3. With a keen eye for emerging trends and technologies, she delivers comprehensive coverage to inform and engage readers in the ever-evolving landscape of digital finance.
More articles
Alisa, a dedicated journalist at the MPost, specializes in crypto, AI, investments, and the expansive realm of Web3. With a keen eye for emerging trends and technologies, she delivers comprehensive coverage to inform and engage readers in the ever-evolving landscape of digital finance.
