Core Custody Obligations and Capital Requirements
Published 7/9/2026, 2:01:05 AM
The Markets in Crypto-Assets Regulation (MiCA) has fundamentally reshaped European crypto operations, transitioning the market from a fragmented landscape of over 3,000 national registrations to a unified regime of approximately 227 authorized entities as of July 2026 [Source: https://www.esma.europa.eu/check-casp-register]. The full enforcement of MiCA on July 1, 2026, marked the end of all transitional "grandfathering" periods, forcing unauthorized providers to cease EU operations [Source: https://www.esma.europa.eu/sites/default/files/2024-06/ESMA75-113276571-1510_MiCA_Level_2_and_3_table.pdf].
Core Custody Obligations and Capital Requirements
Under MiCA Article 75, custody providers are subject to strict operational and financial mandates designed to protect client assets:
| Requirement | Detail |
|---|---|
| Minimum Capital | €125,000 for entities providing custody and exchange services [Source: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32023R1114]. |
| Asset Segregation | Mandatory on-chain and off-chain segregation of client assets from the firm's own holdings [Source: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32023R1114]. |
| Strict Liability | CASPs are liable for the loss of crypto-assets resulting from operational incidents, such as hacks [Source: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32023R1114]. |
| Fiat Safeguarding | Client fiat funds must be deposited with an EU credit institution by the end of the next business day [Source: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32023R1114]. |
The 2026 Review: Expanding the Perimeter
The European Commission is currently conducting a targeted review (consultation closing August 31, 2026) to address emerging risks and regulatory gaps [Source: https://finance.ec.europa.eu/publications/targeted-consultation-review-regulation-markets-crypto-assets-mica_en]:
- Staking Services: The review is evaluating whether staking, currently treated as an ancillary custody service, requires a standalone regulatory framework with explicit client consent and risk disclosures.
- Stablecoin Reserves: Regulators are assessing if the requirement for Asset-Referenced Token (ART) issuers to hold 30% of reserves in EU credit institutions should be increased to ensure stability.
- DeFi and Lending: The Commission is exploring the inclusion of crypto-lending and decentralized finance (DeFi) protocols within the MiCA perimeter, potentially requiring certification for protocols that are not "fully decentralized."
Operational and Business Impact
The implementation has led to a significant market consolidation. Major institutions like Coinbase (Ireland), Kraken (Ireland/Luxembourg), and Revolut (Cyprus) have successfully secured licenses to operate across the EEA [Source: https://www.esma.europa.eu/check-casp-register]. Conversely, firms that failed to meet the July 2026 deadline must wind down operations and are prohibited from onboarding new EU clients [Source: https://www.esma.europa.eu/sites/default/files/2024-06/ESMA75-113276571-1510_MiCA_Level_2_and_3_table.pdf].
Implementation Timeline
- January 17, 2025: Digital Operational Resilience Act (DORA) became mandatory for all CASPs, setting high standards for IT security.
- January 1, 2026: Crypto-Asset Reporting Framework (CARF) for tax data collection became effective.
- July 1, 2026: Full MiCA enforcement; end of all transitional periods.
- August 31, 2026: Deadline for stakeholders to submit comments on the MiCA custody and staking review [Source: https://finance.ec.europa.eu/publications/targeted-consultation-review-regulation-markets-crypto-assets-mica_en].
In conclusion, ESMA's oversight and the ongoing MiCA review have professionalized the European crypto custody sector, though the high cost of compliance has resulted in a massive reduction in the number of active service providers. The upcoming August 2026 review will likely determine if staking and DeFi will face the same level of rigorous oversight as centralized custody.