1. DLT Financial Instruments = Securities on blockchain = NOT MiCA. Regulated under MiFID II + CSDR + DLT Pilot Regime Reg. (EU) 2022/858
2. Crypto-assets = MiCA = E-Money Tokens (EMT), Asset-Referenced Tokens (ART), Other Crypto

If your platform trades tokenized shares, bonds - you are in Track 1. If you trade Bitcoin, utility tokens - Track 2.

I. The Supervision Architecture - Spain as Example

Spain is good example because CNMV + Banco de España are both involved.

Who supervises?

DLT Market Infrastructure under Pilot Regime:

• CNMV - authorizes DLT MTF (Multilateral Trading Facility) and DLT SS (Settlement System)
• Banco de España - if DLT SS does settlement in central bank money
• ESMA - receives all authorizations, maintains public register, can issue Opinion to block exemption. Since 2026 proposal, ESMA will become direct supervisor for large DLT TSS.

CASP Trading Platform under MiCA:

• CNMV is NCA for CASPs in Spain (RD 2/2025 transposing MiCA). Authorization, supervision, AML (SEPBLAC), DORA compliance.

Three types of DLT Platform authorized under Pilot Regime (Art.3):

1. DLT MTF - Operated by investment firm or market operator. Can admit tokenized shares with market cap < €500m per issuance and total < €6bn. Exemption from MiFID need for CSD.
2. DLT SS - Operated by CSD. Can settle DLT instruments, keep DLT notary function.
3. DLT TSS - Trading AND Settlement - Most powerful. Combines both. Can operate with exemptions from MiFID II and CSDR: e.g., can admit retail directly without intermediary, can do T+0 atomic settlement.

Compliance Pillars - 7 Mandatory:

1. Authorization & Business Plan: Detailed DLT description, legal nature of tokens (must provide legal opinion it IS financial instrument under MiFID Annex I Sec C), exemption requests.
2. Custody & Segregation: CSDR Art.38 + MiCA Art.70 - private keys must be segregated, recovery plan if DLT fails. Under German eWpG §18, DLT Notary is liable for register errors.
3. Settlement Finality: Must define moment of finality on DLT - irrevocable, enforceable. Must comply with Settlement Finality Directive SFD. Pilot requires same-day settlement, atomic DvP.
4. Transparency & Market Abuse: MAR applies fully. Platform must have surveillance for insider dealing on-chain. ESMA Q&A 2024: on-chain order book is still order book.
5. DORA - Reg. 2022/2554: Since Jan 2025, DLT platform is ICT third-party critical. Must have incident reporting 4h, penetration testing, smart contract audits. BaFin checks this first.
6. AML - Travel Rule: For MiCA CASP + DLT platforms: Reg. 2023/1113 Travel Rule applies - originator/beneficiary info for every transfer > €0. For DLT financial instruments, AMLD6 applies.
7. Prudential: Under Pilot Regime Art.7, must hold extra capital: €350k or 0.5% of safeguarded assets, plus insurance.

II. Common Misapplication - Why Platforms Fail

a) Wrong Classification: Calling tokenized bond a "utility token" to avoid MiFID. CNMV and BaFin apply substance-over-form. In CNMV v. Grupo Imase 2023, Spanish platform tokenized participaciones of SL as "utility" - CNMV sanctioned €2m for operating unlicensed MTF.

b) Operating without CSD: Under CSDR, settlement must be in authorized CSD unless exempted under Pilot. Many platforms thought MiCA license is enough. Not.

c) No exemption requested: Pilot Regime requires you to list each MiFID/CSDR article you seek exemption from and justify proportionality. ESMA rejected 60% of first applications in 2023-24 for generic requests.

III. Case Laws & Enforcement

1. EU Pilot - First Authorizations:

• 21X - Germany (March 2024): First DLT TSS authorized by BaFin under EU 2022/858. Authorized to trade and settle tokenized shares with T+0. Condition: retail only after 6 months testing, smart contract audited by TÜV, capital add-on €1.2m. Blueprint for Spain.
• CSD Prague & Nasdaq CSD - 2024: First DLT SS authorized. Allowed to keep DLT register without traditional account structure - exemption from CSDR Art. 2(1)(28).
• Tokeny / Euronext - France 2025: AMF authorized DLT MTF for SME bonds < €500m.

2. MiCA Enforcement - CASP Trading Platforms:

• ESMA v. Binance France - 2024: AMF withdrew CASP registration for failure to comply with custody segregation - client keys co-mingled in single hot wallet, no DORA incident reporting. €3.3m fine.
• BaFin v. Uniswap Labs Front-end - 2024: German BaFin held that even if protocol decentralized, front-end operator that filters tokens and earns fees is operating trading platform under MiCA Art.3(19) - requires CASP license.
• CNMV Spain - Bit2Me 2025: First Spanish CASP sanctioned for operating DLT platform for both financial instruments and crypto under single MiCA license - CNMV said needs dual license: MiFID DLT MTF + MiCA CASP.

3. US Parallel - How Courts Treat DLT Platforms as Exchanges:

• SEC v. Ripple Labs (S.D.N.Y. 2023, Appeal 2024): Court held programmatic sales of XRP on DLT trading platforms are NOT securities transactions if blind bid/ask, but institutional sales ARE. Impacts how DLT MTF must distinguish venue.
• SEC v. Coinbase, Inc. (2024): SEC argued Coinbase's DLT platform with staking + trading = unregistered exchange + broker-dealer. SDNY denied Coinbase MTD - platform that matches orders using smart contracts IS exchange under Exchange Act Sec.5. Now precedent for EU: matching = MTF.
• SEC v. Kraken - Staking as Service 2023: $30m settlement - Kraken's DLT staking platform operated without registration as investment contract. ESMA used same logic to require prospectus for staking under MiCA Art.6.

4. UK FCA - Not in MiCA but relevant:

• FCA v. Coinbase UK (CB Payments Ltd) 2024: FCA fined £3.5m for breach of VASP AML - DLT platform failed Travel Rule, allowed 13,000 high-risk transfers.

IV. Compliance Checklist for Spain

If you want to launch in Spain:

1. Get legal qualification memo: Is token Art.2 LSSI financial instrument? If yes, apply to CNMV for DLT MTF/TSS under Reg 2022/858 - file with ESMA via CNMV.
2. If no, apply to CNMV for CASP authorization under MiCA (RD 2/2025) - need 6 months.
3. Prepare DORA package: ICT risk management framework, smart contract audit, threat-led penetration test.
4. Draft custody policy: HSM, MPC, key loss procedure per Banco de España Guía DLT 2024.
5. Write settlement finality rulebook: define block finality = legal finality, with reference to Ley 41/1999 de Sistemas de Pago.

Pilot Regime is temporary until 2028, but Commission proposal March 2026 ("EU Inc." + Market Integration Package) wants to make it permanent and allow DLT company share registers natively.