Ten days of MiCA at full force.
On 1 July 2026 the last transitional grace periods under the EU's Markets in Crypto-Assets regulation expired. Every crypto-asset service provider serving the EEA now either holds a CASP licence and its passport — or is out of the market. Ten days is early. It is not too early to see the shape of what changed.
This note extends our pre-enforcement briefing, which set out the mechanics. Here we cover what the mechanics did on contact with the market.
The first-order effect was a sorting event, and it happened faster than the consultation papers predicted. Licensed CASPs woke up on 1 July with a genuine moat: one authorisation, thirty EEA states, no per-country re-registration. Unlicensed venues woke up with a choice between geo-fencing the EEA and operating illegally in a bloc that has now demonstrated it will enforce.
- Exits happened quietly. The pattern of the first ten days was not fines — it was withdrawal. Offshore venues that spent 2025 "evaluating their options" resolved the evaluation by switching off EEA onboarding, often with nothing more than a changelog entry. The enforcement deadline did the enforcing by existing.
- The passport became a sales asset. Licensed venues now lead institutional pitches with the licence number. Compliance moved from the risk annex to the first slide — exactly the inversion the regulation intended.
- Liquidity re-routed, not vanished. EEA institutional flow concentrated onto the licensed rails rather than leaving. For the buy-side, the shortlist got shorter and the diligence got easier: the first filter is now binary.
MiCA's recital 22 carve-out — services provided in a "fully decentralised manner without any intermediary" sit outside the regulation — survived into full enforcement without clarifying guidance. That leaves DeFi protocols exactly where the pre-enforcement briefing predicted, only now with stakes attached: the more a front-end, a token-holder vote, or an operating company looks like an intermediary, the more the protocol looks like an unlicensed CASP.
Our read is unchanged and is the design premise behind ımyo's EU posture: the winning position is not to litigate the carve-out but to make compliance legible — ZK-attested eligibility at the protocol level, so an institution can prove "MiCA-compliant CASP" or "regulated entity" status on-chain without disclosing its book. Regulated capital does not want a venue that argues it is outside the perimeter. It wants a venue that can show its work inside it.
- First enforcement actions. The deterrent so far is the deadline itself. The first public action against a non-exited, non-licensed venue will set the tone — and the fine schedule.
- Stablecoin substitutions. Non-compliant stablecoins have been delisting from EEA venues since 2025; full enforcement accelerates the rotation into e-money tokens and GENIUS-compliant payment stablecoins — the same instruments that sit in imyo's Tier-1 collateral set.
- ESMA guidance on the DeFi carve-out. Any interpretive guidance on "fully decentralised" will move more institutional capital than any single licence grant.
- The tracker. Licence counts and the market-structure numbers live on the tokenisation tracker, updated as primary sources publish.