European Union regulators are investigating OKX’s Web3 platform, which was allegedly used to launder cryptocurrencies stolen during the ByBit attack. The incident highlighted the transfer of predominantly Ethereum 
$2,273-based assets through decentralized platforms and cross-chain bridges.
Examining Web3 Services
EU authorities are discussing whether OKX’s Web3 service falls under MiCA regulations. Some regulators argue that the platform’s integration with the main exchange should be subject to rules, while others suggest exemptions may exist for fully decentralized structures. This situation has led to differing opinions on the scope of application and may pave the way for another legal expansion concerning MiCA, as new complex incidents present opportunities for rule development.
Malta and License Review
In January, OKX received preliminary MiCA authorization through its European operations in Malta. However, the Maltese financial regulatory authority is evaluating the possibility of revoking this license due to the incident linked to the ByBit attack. There is a potential for sanctions to be implemented if violations are detected, creating an interesting scenario as the independent nature of Web3 could contradict the principle of decentralization.
In March, regulators from EU member states discussed the issue under the European Securities and Markets Authority (ESMA). Representatives from Austria and Croatia indicated that the platform’s connection to the main site should fall under MiCA. The discussions focused on centralization and regulatory enforcement.
Diverse opinions exist regarding the impact and feasibility of regulations in the cryptocurrency sector. Ongoing reviews are anticipated to significantly influence future applications in the industry.
Mark Uyeda, the acting SEC chair, stated, “We will evaluate the non-enforcement of the proposed rule. Expanded regulation could impose unnecessary burdens on the sector.”
Authorities express that penal actions could be enforced in case of MiCA rule violations. The regulatory review process will be further detailed in the future, with decisions likely to impact other practices within the sector.
