The 2022 crypto winter was not important to regulators simply because prices fell. Markets fall. The harder lesson was that leverage, interconnectedness, concentration, custody and conflicts could turn individual failures into an ecosystem-wide operating problem, with retail users absorbing disproportionate damage.
That is the distinction worth preserving from December 2022.
Key takeaways
- Volatility was not the whole mechanism. Leverage, composability and interconnected positions could transmit stress across products and institutions.
- Centralisation mattered inside a supposedly decentralised sector. Concentrated intermediaries, custody and related-party structures created failure points that technology alone did not remove.
- The winter accelerated regulation; it did not invent it. Major policy projects such as the EU’s MiCA proposal predated the 2022 failures, so causation should not be rewritten after the fact.
The OECD’s 14 December 2022 diagnosis
On 14 December 2022, the OECD published Lessons from the Crypto Winter: DeFi versus CeFi. The timing matters because the paper captured the policy debate while the 2022 turmoil was still fresh rather than reconstructing it years later.
The OECD highlighted several mechanisms:
- high interconnectedness inside the crypto ecosystem;
- elaborate financial engineering using leverage;
- composability in decentralised finance;
- increasing market concentration; and
- disproportionate effects on retail participants.
Those categories are more durable than the headline price moves because they describe how losses can travel.
A regulator does not need to prevent every loss to care about those mechanisms. It needs to understand where risk is concentrated, how obligations are transmitted and whether customers understand who controls the assets and liabilities they rely on.
Interconnectedness changes the failure surface
A token or protocol can look self-contained until it becomes collateral somewhere else.
Leverage creates claims on claims. Composability allows one product to depend on another. Centralised firms borrow from each other, hold each other’s tokens, provide liquidity and share counterparties. A price shock can therefore move through liquidations, margin calls, insolvencies and withdrawal pressure.
The lesson is not unique to crypto. Financial systems have always contained contagion channels.
What was distinctive in 2022 was the combination of fast-moving digital markets, opaque or lightly governed entities, novel collateral, retail access and structures whose interdependencies were not always obvious to users.
The practical risk question changed from “can this asset fall?” to “what else fails if it does?”
Leverage can hide inside product design
Leverage is not always presented as a margin loan.
It can appear through borrowing against volatile collateral, recursive positions, derivatives, yield strategies or chains of claims across protocols and intermediaries. The user can see a yield while the underlying system contains multiple layers of liquidity and counterparty risk.
That is why return should be analysed through mechanism rather than headline percentage.
The Terra episode belongs in a separate case study because its peg and incentive design deserve their own explanation. The wider winter article should not turn every failure into Terra, just as it should not turn every governance failure into FTX.
The common regulatory lesson is narrower: products should be understood through the risks they create and transmit, not the label attached to them.
Concentration survived decentralisation
One of the striking lessons of the period was that crypto could be technologically decentralised in parts and institutionally concentrated in others.
Users could interact with blockchains while still depending on centralised exchanges, custodians, lenders, stablecoin issuers, market makers or a small number of infrastructure providers.
This matters because decentralisation claims can obscure an ordinary governance question: who has control at the point that matters?
A protocol may be decentralised while access is concentrated. A token may move on-chain while custody is centralised. A firm may serve a global customer base while key decisions sit with a small management group.
Regulation increasingly follows those functions and control points rather than accepting “decentralised” as a complete answer.
Custody and governance became inseparable from market structure
The 2022 failures also made customer-asset questions difficult to treat as back-office detail.
Who holds the keys? Who owns the legal claim? Can customer assets be reused? How are balances reconciled? What happens in insolvency? Can an affiliate receive preferential access? What restrictions exist on movement of assets?
Those are simultaneously operational, legal and governance questions.
The FTX case later supplied an extreme example of why internal permissions and related-party controls matter. But the regulatory lesson extends beyond one company: a customer who believes an asset is “on an exchange” needs to understand what that statement means legally and operationally.
The best objection: this was ordinary fraud and bad risk management
Partly.
Some 2022 failures involved conduct that traditional financial regulation has confronted for decades: misuse of customer assets, conflicts, excessive leverage, poor governance and misleading representations.
That is an argument against crypto exceptionalism, not against learning from the episode.
The strongest regulatory response is not to invent a unique rule for every token. It is to identify familiar risk mechanisms when they reappear through new technology and to determine which functions genuinely require new treatment.
The existence of fraud also does not explain every loss. Market risk, protocol design, leverage and liquidity can damage participants without criminal conduct.
A durable framework has to distinguish those mechanisms rather than collapsing them into “crypto failed”.
Regulation was already moving before the winter
A common retrospective shortcut is to say that Terra or FTX caused MiCA.
The chronology does not support that claim.
The European Commission adopted its Digital Finance Package and presented the legislative proposal for MiCA on 24 September 2020, well before the 2022 crypto winter. The political and technical work on crypto regulation was already under way.
The failures of 2022 changed urgency, evidence and emphasis. They did not create the entire regulatory agenda from nothing.
That distinction matters because regulation is often path-dependent. A crisis can accelerate or reshape a framework whose basic direction was already established.
Bankability follows risk transmission too
Financial institutions look at many of the same risk mechanisms through a different mandate.
A bank servicing a crypto business may care about customers, counterparties, transaction patterns, jurisdictions, source of funds and controls because those factors influence its own AML and risk exposure. A failure elsewhere in the crypto ecosystem can therefore change risk appetite even when the bank’s customer has not broken a rule.
This is de-risking and counterparty analysis, not sector regulation.
Once again, the categories should not be collapsed: regulated status can matter to a bank, but the bank still makes an independent relationship decision.
Tax and reporting were a different policy track
The crypto winter also should not be used to explain every later transparency initiative.
Tax information exchange, CARF, DAC8 and domestic taxation answer different questions from custody, leverage and market conduct. Reporting can increase visibility into ownership and transactions, but it does not itself solve solvency, segregation or governance problems. Nor does reporting determine the tax due.
For an international user or business, the practical result is that multiple systems now overlap:
- market and conduct regulation;
- operational and prudential requirements;
- AML and banking controls; and
- tax and information reporting.
Understanding which system is asking which question is part of modern crypto due diligence.
What regulators actually learned
The durable post-2022 framework is not “crypto is risky”. That is too vague to be useful.
The more useful questions are:
- Where is leverage created and who bears it?
- Which assets or institutions are interconnected?
- Where is custody legally and technically located?
- Who can change or override controls?
- Which related parties create hidden exposures?
- What happens to customers if a central intermediary fails?
- Which risks are market risks, which are governance failures and which are fraud?
Those questions travel well across technologies and jurisdictions.
The crypto winter mattered because it forced them out of white papers and into loss events that regulators, banks, founders and customers could no longer treat as theoretical.
Sources
- OECD — Lessons from the Crypto Winter: DeFi versus CeFi, 14 December 2022
- European Commission — Digital Finance Package, 24 September 2020
- European Commission — Crypto-assets and MiCA timeline
- U.S. SEC — SEC Charges Samuel Bankman-Fried with Defrauding Investors in FTX, 13 December 2022
Disclaimer
This article is general historical and regulatory commentary. It is not legal, investment, tax, banking or financial advice. Crypto-asset products and regulatory frameworks differ materially, and the article does not imply that all 2022 failures shared the same mechanism or that any single regulatory model can eliminate market, operational or fraud risk.
