WalletConnect has published its inaugural “State of Compliance, Policy, and Regulation Report,” offering a comprehensive cross-jurisdictional overview of how digital asset regulation has shifted from legislative proposal to live enforcement in 2026. The report covers stablecoin frameworks, anti-money laundering requirements, the Travel Rule, DeFi governance, and compliance across payments, trading, custody, and tokenization.
The study’s central finding is that the debate over whether digital assets belong inside the regulated financial system is now largely over. The European Union’s Markets in Crypto-Assets Regulation (MiCA) has been fully applicable since December 2024, with the maximum national transitional period closing on 1 July 2026 — meaning more than 1,000 firms that failed to obtain MiCA authorisation by that deadline can no longer rely on its grandfathering provision.
In the United States, the GENIUS Act — the country’s first comprehensive federal framework for payment stablecoins — was signed into law in July 2025, though it does not take full effect until January 2027 pending final implementing rules. Hong Kong issued its first stablecoin-issuer licences in April 2026, and Japan’s amended Payment Services Act entered into force in June 2026. The UK has finalised its regulatory framework, with full activation scheduled for October 2027.
Despite this momentum, cross-border fragmentation remains substantial: an approach compliant in one jurisdiction still requires jurisdiction-specific analysis of entity structure, licensing, reserves, and data-sharing arrangements in others.
Across all reviewed jurisdictions, the report identifies a recurring structural principle it terms “regulated-touchpoint accountability”: regulatory obligations attach to licensed intermediaries at the point where value enters or exits the regulated financial system, not to individuals exercising self-custody.
When a regulated firm interacts with a self-custodial wallet, that firm remains responsible for its own customer due diligence, sanctions screening, transaction monitoring, and Travel Rule compliance. Self-custody does not transfer those obligations to the wallet holder, nor does it exempt individuals from sanctions rules that may apply directly to them.
DeFi remains the most legally unsettled area. The report notes that total value locked in DeFi protocols grew from approximately $45 billion in 2023 to around $150 billion by mid-2025, yet no major jurisdiction has fully resolved whether and how to regulate decentralised protocols and immutable smart contracts.
The Tornado Cash litigation in the United States illustrates the difficulty: a federal circuit court held that certain immutable contracts were not property subject to sanctions designation, while a separate criminal prosecution turned on whether operating the protocol constituted unlicensed money transmission. MiCA sidesteps the question by excluding services provided in a genuinely decentralised manner.
The report is notably constructive about the compatibility of compliance and self-custody. Tools including programmable token standards, cryptographic address-verification, reusable identity credentials, blockchain analytics, and Travel Rule data-exchange protocols are already in production use within regulated workflows. Emerging wallet architectures — including multi-party computation wallets and smart-account delegation — increasingly allow compliance logic to run at the wallet layer itself.
The study cautions, however, that these tools’ legal sufficiency remains specific to each jurisdiction, activity, and regulated party, and that unresolved gaps — including classification of new wallet architectures, residual address-poisoning risks, and the absence of mutual recognition between major regimes — still constitute a substantive agenda for the next regulatory phase.
The post Crypto Regulation Has Shifted From Debate To Enforcement, But Fragmentation Persists appeared first on Metaverse Post.
