Is crypto staking regulated in the EU? What MiCA covers in 2026

No, not as a service of its own. MiCA, the EU’s Markets in Crypto-Assets Regulation, has been fully in force since December 2024 and has no dedicated license for staking. Staking is treated as ancillary to custody, covered only when a licensed provider holds your crypto-assets and stakes them for you. The European Commission’s targeted consultation on that gap closed on 30 September 2026.

What MiCA actually regulates today: custody, not staking

MiCA is the EU’s rulebook for crypto-asset issuers and service providers. It licenses activities like running an exchange, issuing a stablecoin, or custodying crypto-assets on behalf of clients. A firm that wants to do any of those needs to become an authorized crypto-asset service provider (CASP, the official term for a firm licensed to provide crypto services under MiCA) and follow the obligations that come with the license.

Staking is not on that list. There is no “staking service” category in MiCA, and no separate authorization to offer it. Instead, staking only enters the picture through the back door: when a CASP that is already licensed for custody also stakes the assets it holds for clients, that staking activity is treated as ancillary to the custody it is already regulated for. In the words of the European Securities and Markets Authority’s Q&A 2067, “MiCA does not contain provisions specific to staking” and “the provision of staking services is ancillary to custody services which are fully covered under MiCA.” The staking piece rides on the custody license, authorized under Article 75 of MiCA, rather than standing on its own.

In practice, this means a provider that takes custody of your ETH, SOL, ATOM, or any other asset and then stakes it on your behalf is bound by MiCA’s existing custody and safeguarding obligations: segregating your assets from its own, being clear about the terms, and carrying liability if it loses what it was holding. A provider that never takes custody of your assets in the first place, because you keep your own keys and only delegate (you give someone the right to stake with your assets while keeping the keys yourself), sits outside that specific licensing trigger altogether.

The gap: why staking has no license of its own

That “ancillary” framing was written for a world where staking was mostly something exchanges bolted onto their custody product. It does not map cleanly onto the staking landscape of 2026: dedicated staking-as-a-service platforms, liquid staking tokens, restaking, and non-custodial delegation models where the provider never holds your keys at all.

The result is a regulatory blind spot. Two staking arrangements that look completely different in risk, one where a centralized platform holds your keys and stakes for you, another where you delegate directly from your own wallet and never give up custody, can end up governed by the same “it depends whether custody happens” logic, or by none of MiCA’s rules at all if no custody is involved. Lending and borrowing sit in a similar gap. The Commission’s own consultation document describes “staking, lending and borrowing of crypto-assets, currently not addressed in MiCA regulation,” and asked the market directly: “Do you think the current approach whereby staking services are not separately regulated is adequate?”

What’s changing: the Commission’s review after the 30 September deadline

On 20 May 2026, the European Commission launched a targeted consultation on the review of MiCA. The word “targeted” did real work there: this was not a general public consultation. The Commission said it was “intended for a more specialised audience, such as digital assets industry representatives (crypto-asset service providers, crypto-asset issuers) and public authorities (e.g. national or European supervisors, central banks, Ministries of finance).” It was not a proposal for new rules, but the fact-finding stage that comes before any. Among the key issues it examined was whether staking, lending, and borrowing should receive dedicated regulatory treatment matched to their risk profiles, instead of being folded into custody rules that were never designed for them.

Responses closed on 30 September 2026, 23:59 CEST. Under Article 140 of MiCA, the Commission must present a report on how the regulation is working to the European Parliament and the Council by 30 June 2027, “accompanied, where appropriate, by a legislative proposal.” Any actual rule change would still have to go through the EU’s normal legislative process.

On the day the consultation closed, ESMA published its own response. It recommends that “staking services provided by authorised CASPs should be subject to targeted conduct, disclosure and safeguarding requirements,” with disclosure covering rewards, lock-up and unbonding periods, slashing risk, validator selection and fees, through a proportionate approach “rather than introducing a new heavy authorisation regime.” That is the EU supervisor’s advice to the Commission, not a rule: what, if anything, gets proposed is the Commission’s call.

You can check the dates and status yourself on the Commission’s official consultation page, read the full targeted consultation PDF, or see ESMA’s announcement of its response.

What this means if you delegate your crypto to a staking service

If you stake ETH, SOL, ATOM, RUNE, or anything else through a third party without running your own node, here is what the current gap means for you today:

• “Regulated” and “custody-licensed” are not the same claim. A platform can be a MiCA-licensed CASP for custody and still be offering staking under a rulebook that was never written for staking. Ask what, exactly, is licensed: the custody, or the staking itself. Right now, it can only be the custody.
• Your keys decide which protections apply. Giving up your keys triggers MiCA’s custody safeguarding obligations. Keeping your own keys (non-custodial delegation) leaves you outside that regime, for better or worse: there is no custody to safeguard, so MiCA’s custody safeguards do not cover you either.
• No new rule exists yet. Nothing proposed so far changes what applies to a position you hold today. The Commission’s report is due by 30 June 2027 and may come with a legislative proposal; how any such rule would treat positions already open is not known.
• Regulatory status does not replace your provider’s terms. MiCA sets what a regulator requires of a firm. Your provider’s terms still decide your lock-up periods, fees, slashing liabilities and exit conditions, and those need to be checked directly, on any chain.

Where RUNEBond fits

If you have not come across THORChain before: it is a decentralized cross-chain protocol that lets people swap assets directly between different blockchains, without a centralized exchange or other intermediary. It is secured by node operators (the validators that run the network’s software), who must lock up RUNE, the network’s native token, as a security deposit, a mechanism called bonding. If a node signs an unauthorized transaction moving funds out of the network, its deposit is confiscated outright. That penalty is what turns the lockup into a real financial guarantee.

Running a node yourself takes technical skill and a large amount of RUNE. RUNEBond removes both barriers: you delegate RUNE to a vetted, whitelisted node operator as a bond provider and earn a share of what that node earns, without operating any infrastructure yourself. Two things are worth being precise about, given everything above:

RUNEBond does not hold your bond. You delegate directly from your own wallet and keep your private keys, unlike with a centralized exchange or custodian: the bond moves from your wallet to the node and back. Node access is also permissioned: operators must clear a vetting process and join a whitelist before bond providers can delegate to them.

We are not telling you RUNEBond, or THORChain bonding generally, is “MiCA-regulated” or “MiCA-compliant.” That is not a claim we can make, and no credible source can make it for a decentralized protocol today. THORChain is not an EU-licensed entity, and the custody-triggered obligations described earlier in this article are aimed at centralized intermediaries that hold your keys, not at non-custodial delegation. How the Commission’s review will treat non-custodial, decentralized delegation, if at all, is an open question that nobody can answer in advance.

What we can tell you is the mechanism itself, plainly: what you keep control of, what you are trusting an operator with, and what can go wrong.

• You cannot unbond on demand. Under THORChain’s rules, a bond can only be withdrawn while the node is on standby, outside the active set. The timing depends on the operator you picked opening its next unbonding window, not on your own.
• Everyday faults cost rewards, not your deposit. According to THORChain’s node documentation, operational failures like missing an observation cost the node slash points, and “rewards slashing reduces earned rewards and does not affect a validator’s bond.”
• The deposit is cut only for serious faults. “Bond slashing takes directly from the bond” in two cases: an unauthorized outbound transaction, penalized at 1.5x the value of the funds moved, or double-signing blocks (running two nodes on the same account), penalized at 5% of the minimum bond.

Either way it is a real cost you take on as a bond provider. We cover the two tiers in how node penalties keep the network honest and the exit mechanics in risks, lock-ups, and why easy bonding matters; the broader real-yield-versus-inflation framing that staking and bonding both sit inside is covered in best crypto passive income 2026.

For institutions or large holders evaluating where and how to deploy capital, and who need the regulatory and mechanism picture straight before moving anything, our team walks through this directly: talk to RUNEBond about institutional bonding.

---

This article explains a regulatory process and a delegation mechanism. It is not financial or legal advice, and it is not a prediction of how the EU’s review will unfold. Regulatory status can change; verify current terms directly with any provider, and consult a qualified advisor for your own situation.