Estonia regulator warns Zondacrypto over missing MiCA white paper

Estonia’s Financial Supervision and Resolution Authority issued an investor warning against BB Trade Estonia OÜ, the company operating the Zondacrypto exchange, for failing to publish a required white paper for the “TeamPL” token listed on its platform, in one of the first public enforcement actions under the European Union’s Markets in Crypto-Assets framework.

The regulator said the exchange violated Article 9, Section 1 of MiCA, which requires crypto-asset white papers to remain publicly accessible on the issuer’s or trading venue’s website for as long as the asset is held by the public. The warning was published on 10 May 2026 and escalated from the transitional guidance that characterised MiCA’s first months in force.

The warning comes as Zondacrypto faces wider operational trouble. In April 2026, chief executive Przemysław Kral disclosed that the company lacked access to a cold wallet containing approximately 4,500 bitcoin because founder and former CEO Sylwester Suszek had never transferred the private keys, according to FinanceFeeds. Suszek has been missing since 2022.

Kral has since stopped posting on social media and travelled to Israel, where he also holds citizenship. Polish authorities have opened an investigation into user reports of difficulty accessing funds and completing withdrawals from the platform. It is not clear whether the withdrawal problems are connected to the inaccessible cold wallet.

MiCA enforcement moves beyond guidance

The Estonian warning shows MiCA enforcement has moved from transitional guidance to active supervision, with national regulators testing the boundaries of their new powers. The framework, which took full effect for crypto-asset service providers across the 27-member bloc in December 2025, imposes transparency, disclosure, custody, and governance obligations on exchanges and token issuers operating in the EU.

“The exchange failed to publish a required white paper for the TeamPL crypto token listed on its platform,” the regulator said in the warning notice. “Under MiCA rules, crypto-asset white papers must remain publicly accessible on the issuer’s or trading venue website.”

Estonia has been among the fastest EU member states to transpose MiCA into national law. After a purge of hundreds of crypto firms from its register between 2020 and 2022, when the country revoked licences from firms that failed to establish genuine local operations, Tallinn established itself as a credible but demanding licensing jurisdiction. The Zondacrypto warning is consistent with that posture.

Poland’s delayed implementation

Zondacrypto has previously cited Poland’s delayed implementation of MiCA rules as a reason for structuring its operations outside the country. Poland missed the December 2025 transposition deadline and has yet to pass comprehensive MiCA-aligned legislation. The company registered BB Trade Estonia OÜ in Tallinn to operate under Estonia’s crypto regulatory regime, which was among the first in the EU to adopt the framework.

That decision exposes the exchange to Estonian enforcement in a jurisdiction it chose for regulatory access. The warning suggests that EU member states with MiCA-compliant regimes are willing to act against non-compliant entities even when the underlying business serves customers primarily in other jurisdictions.

The dynamic creates a compliance risk for other crypto firms that incorporated in MiCA-ready jurisdictions, including Malta, France, and Germany, while their operational centres and customer bases remain in countries that have not yet transposed the rules. Several Central and Eastern European member states, including Hungary and Romania, are also lagging on MiCA transposition, creating further pockets of regulatory asymmetry within the single market.

What the warning means

The warning does not carry an immediate licence revocation or trading halt, but it places Zondacrypto on formal notice. Under MiCA, persistent non-compliance can lead to fines, licence suspension, or revocation. The white paper disclosure lapse compounds the cold-wallet uncertainty and the Polish investigation into withdrawal difficulties.

For the broader European exchange sector, the episode shows disclosure and custody compliance are becoming competitive factors. Exchanges that maintain clean MiCA records will have an advantage in institutional onboarding and banking relationships. Those that attract regulatory warnings face higher due diligence hurdles from counterparties and may find it harder to secure banking partners, particularly in jurisdictions where regulators are seen as proactive enforcers.

What happens next

Estonia’s regulator has not indicated whether it will escalate to formal enforcement proceedings. Zondacrypto has not publicly responded to the warning as of publication. The Polish investigation into withdrawal issues remains open.

The case tests the enforcement reach of individual EU member states under MiCA. If Estonia sanctions a firm that is registered locally but serves customers across the bloc, the practical effect extends well beyond Estonian borders, making each national regulator a bloc-wide enforcer for entities registered in its jurisdiction. That model, if it holds, would give MiCA an enforcement architecture closer to the EU’s General Data Protection Regulation than to traditional financial services directives, where home-state supervision is more contained.