Galaxy Digital is building a KYC/AML framework designed to help institutions actually use DeFi without running afoul of regulators.

Here’s the thing about DeFi: it was built to be permissionless. Anyone with a wallet can swap tokens, provide liquidity, or take out a loan. But for a pension fund or a bank, “anyone can use it” is less a feature and more a compliance nightmare.

The institutional DeFi paradox

Galaxy has identified compliance challenges as a primary barrier preventing institutions from participating in decentralized protocols.

Traditional finance operates on a “know your customer” basis. Every counterparty gets vetted. Every transaction gets monitored. Suspicious activity gets flagged and reported. DeFi, by design, does none of that.

Galaxy’s research suggests this friction is pushing the industry toward hybrid models that blend centralized and decentralized finance, sometimes called CeDeFi.

The Financial Action Task Force (FATF) has published guidance that effectively extends traditional due diligence requirements into the DeFi space. Galaxy’s own publications have discussed how this FATF guidance creates additional compliance obligations that most decentralized protocols simply aren’t built to handle.

What Galaxy is actually building

The specifics of Galaxy’s framework remain under wraps. No technical architecture has been disclosed, no launch timeline has been set, and no partnership announcements have been made.

What we do know is the problem they’re trying to solve. Institutions need a way to verify counterparties in DeFi transactions without destroying the efficiency gains that make DeFi attractive in the first place.

Galaxy, as one of the more prominent crypto-native financial firms, is arguably well-positioned to attempt this. The company has operated at the intersection of traditional finance and crypto markets for years, giving it relationships on both sides of the divide.

Why this matters for investors

Right now, most DeFi liquidity comes from crypto-native participants: retail traders, DAOs, and crypto funds. Institutional capital, the kind managed by asset managers, insurance companies, and sovereign wealth funds, has largely stayed away. The compliance gap is a major reason why.

But there’s a tension here that investors should watch carefully. A KYC/AML framework necessarily creates tiered access. Some pools might be open only to verified participants, while others remain permissionless. This could fragment liquidity rather than consolidate it, creating a two-speed DeFi ecosystem where compliant pools operate alongside unrestricted ones.

The broader signal from Galaxy’s initiative is directional: the industry is moving toward accommodation with regulators rather than defiance.