Challenges and Regulatory Landscape in DeFi BFC Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A DeFi protocol is incorporated in the Cayman Islands but has developers in the EU, users in the US, and a governance token traded globally. A regulator in the EU claims the protocol must comply with EU AML rules. Which factor most strongly supports the EU regulator's claim of jurisdiction?

   • AThe governance token is traded on global exchanges, so the EU can regulate all token holders.
   • BThe protocol's developers are located in the EU, making the development team subject to EU regulations.
   • CThe protocol's incorporation in the Cayman Islands means it is subject to EU law because the EU has extraterritorial reach.
   • DThe protocol's smart contracts are deployed on a public blockchain, which the EU considers its territory.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the purpose of a regulatory sandbox in the context of DeFi?

   • ATo provide a forum for DeFi developers to discuss regulatory issues without any legal effect.
   • BTo allow DeFi projects to test innovative products under a relaxed regulatory environment for a limited time.
   • CTo permanently exempt DeFi projects from all financial regulations.
   • DTo create a physical testing environment for blockchain hardware.
   Reveal Solution Discussion Select an answer first
4. 8application · hard

   A cross-chain DeFi aggregator allows users to swap tokens across multiple blockchains. The protocol has no KYC and no central operator. A national regulator demands that the protocol implement transaction monitoring and report suspicious activity. The protocol's developers are considering how to respond without making the protocol a regulated financial institution. Which response is most aligned with the concept of 'compliance without centralization'?

   • ACreate a decentralized compliance layer using zero-knowledge proofs that lets users prove they are not on a sanctions list without revealing their identity.
   • BShut down the protocol's front end and move all operations to a peer-to-peer mesh network that is harder to regulate.
   • CAsk the regulator to issue a no-action letter and continue operating unchanged until a court orders otherwise.
   • DDeploy a smart-contract-level whitelist that only allows transactions from addresses that have completed a third-party KYC check.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A DeFi lending protocol operates with a governance token and no formal legal entity. Users from multiple jurisdictions can lend and borrow without identity verification. Regulators in several countries have begun issuing guidance that treats the protocol's governance token holders as jointly responsible for compliance. The protocol team wants to reduce regulatory exposure while preserving the protocol's permissionless access. Which approach best addresses the regulators' concerns without fully abandoning decentralization?

   • AAdd a geographic IP block that prevents users from jurisdictions with strict licensing requirements from accessing the front end.
   • BDisable the governance token and convert the protocol to a fully automated, immutable smart contract with no admin functions.
   • CEstablish a legal entity that holds the protocol's administrative keys and registers as a money services business in one jurisdiction.
   • DImplement a decentralized identity layer that allows users to verify themselves once and then interact pseudonymously, with the protocol enforcing jurisdiction-specific access rules.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is a common method for DeFi protocols to integrate identity verification without fully compromising decentralization?

   • ABanning all anonymous transactions and making all addresses publicly linked to real identities.
   • BUsing decentralized identity solutions that allow users to verify credentials without revealing unnecessary personal data.
   • CRequiring all users to submit government-issued IDs to the protocol's central server.
   • DUsing a third-party KYC provider that stores all user data on behalf of the protocol.
   Reveal Solution Discussion Select an answer first