French authorities have floated a rule that would make centralized crypto exchanges check the DeFi protocols they give customers access to, and hold those exchanges liable when the protocols cause harm. Cointelegraph reported the proposal on October 21, 2026, citing French regulatory authorities who want platforms to run due diligence on third-party decentralized protocols rather than passing them through untouched.
The idea cuts against a defense the industry has leaned on for years. An exchange that embeds a swap, a lending market, or a yield product built by someone else has usually argued it is a neutral conduit, not the operator. The French proposal treats that framing as insufficient. If a platform surfaces a DeFi protocol to its users, under this approach it inherits responsibility for vetting what it is surfacing.
A conduit defense under pressure
Most large exchanges now bundle DeFi access directly into their apps. A user taps a button, signs a transaction, and ends up interacting with a protocol the exchange did not build and does not control. The commercial logic is obvious: the exchange keeps the user inside its product and takes a cut of the activity. The legal logic has been that the protocol, not the exchange, is the actor.
France's regulators want to close that gap. Requiring exchanges to conduct checks on DeFi protocols means a platform would need to assess smart-contract risk, custody arrangements, and the track record of whatever it plugs into before offering it. Carrying liability means that if the protocol is exploited, drained, or turns out to be fraudulent, the exchange is on the hook rather than able to point downstream.
That is a heavier burden than it sounds. DeFi protocols change through governance votes and contract upgrades, so a platform could not vet something once and move on. Due diligence would have to be continuous, which is expensive and slow, and some exchanges may decide the cleanest answer is to stop offering third-party DeFi access in France at all.
A possible template for the EU's next phase
The timing matters because France has been among the more active European jurisdictions on crypto rules this year. The National Assembly already moved to tax crypto-to-stablecoin swaps, and the broader bloc is still working through how the Markets in Crypto-Assets framework handles decentralized finance, which MiCA largely left for a later phase.
A national liability standard for exchange-offered DeFi could become a reference point for that later phase. EU regulators tend to watch what large member states do when the central framework is silent, and a workable French model could get copied rather than reinvented. The reverse is also true: if the rule proves unenforceable or pushes activity offshore, it becomes a cautionary example.
For now this is a proposal, not an enacted law. The mechanics that decide its real weight are still open: how "offering access" gets defined, what counts as adequate due diligence, and whether liability is capped or open-ended. Each of those lines determines whether this is a manageable compliance cost or a reason to pull DeFi features out of the product entirely.
Reading the signal for everyday users
The direct effect falls on platforms, not on individuals using self-custody wallets to spend their own crypto. If you connect your own wallet to a DeFi protocol directly, nothing here changes your risk. What changes is the convenience layer: the in-app DeFi shortcuts that exchanges have made standard could get narrower, slower, or region-locked for French users if the rule lands.
There is a second-order read worth noting. Liability for protocol failures is, in effect, a push for exchanges to curate. Platforms that already run tight risk teams may treat this as an advantage over rivals that bolt on DeFi access indiscriminately. Curation has a cost, but it also doubles as a filter against the kind of exploit that wipes out user funds, and recent incidents across DeFi lending vaults show why regulators are focused on the question.
The near-term market reaction was muted. As of October 21, 2026, Bitcoin traded around $83,333, up 2.3% on the day, with Ether near $2,455, up 3.0%, and the Fear and Greed Index at a neutral 53. A single country's draft rule does not move prices, but the precedent it could set across the EU is the part worth tracking.
Overview
France's markets regulator has proposed requiring crypto exchanges to vet the DeFi protocols they give customers access to and to bear liability when those protocols fail. The rule challenges the long-standing "we only provide access" defense and would force continuous due diligence on third-party code. It is still a proposal, with key definitions unsettled, but it could become a template for how the EU eventually regulates exchange-offered DeFi under MiCA's next phase. Individual self-custody users are not directly affected; the pressure lands on the in-app DeFi convenience layer.
