Warsaw, May 15, 2026 — Poland's parliament passed crypto regulation on Thursday bringing the country into compliance with the EU's Markets in Crypto-Assets framework, known as MiCA, even as prosecutors deepen a criminal investigation into Zondacrypto, the country's largest exchange, over estimated losses of at least 350 million złoty (roughly $96 million, or approximately €82.8 million).

The bill designates the Polish Financial Supervision Authority (KNF) as the primary national competent authority for crypto-asset service providers operating in Poland, the role specified under MiCA for national regulators.

MiCA's provisions for crypto-asset service providers became fully applicable across the EU on December 30, 2024. Until today, Poland was the only EU member state without domestic MiCA-compliant legislation in place. Poland had also implemented a shortened transitional period for crypto firms that expired in mid-2025, meaning Polish-domiciled firms were already under compliance pressure well before Thursday's vote. That gap left Polish users exposed and Polish-based firms in legal limbo.

---

Third Time Passing

Thursday's vote was the government's third attempt to get the legislation through. President Karol Nawrocki vetoed Bill 1424 in December 2025, then vetoed the reintroduced Bill 2050 in February 2026. A parliamentary override attempt in April 2026 fell 20 votes short of the required three-fifths majority, with 243 of the 263 votes needed.

When Bill 2050 was reintroduced following the first veto, government spokesman Adam Szłapka said publicly that "not even a comma" had been changed between Bill 1424 and the reintroduced version. Opposition politician Tomasz Mentzen responded that the government had "once again adopted exactly the same bill on cryptoassets" and that critics were dismissed.

Prime Minister Donald Tusk told parliament in April that Zondacrypto had "financially backed politicians who voted against crypto market rules." According to reporting by the Washington Times, Tusk specifically alleged the exchange backed President Nawrocki's presidential campaign, a more pointed claim given that Nawrocki is the same president who twice vetoed the MiCA bill. Tusk also publicly linked the exchange to Russia's Tambov criminal network, a group with alleged Kremlin ties. Zondacrypto CEO Przemysław Kral called the Russia allegation "absurd." Prosecutors have not publicly confirmed that specific link, and Verse Press is treating both allegations as unverified political claims.

The urgency behind the bill is real regardless of the political accusations. Under MiCA rules, only fully licensed entities will be permitted to passport services across the EU after July 1, 2026. Firms operating without a domestic license by that date face losing their ability to serve EU clients legally.

---

Collapse by the Numbers

Zondacrypto, founded in 2014 as BitBay and once Poland's largest exchange with over one million registered users, began showing withdrawal problems in December 2025. Its website went offline in late April 2026. The company's relationship with Polish regulators has been troubled for years. In 2018, the KNF placed BitBay on its public warning list for suspected unauthorized payment services. The exchange subsequently re-registered in Malta and then in Estonia, a sequence that left Polish users relying on a foreign-domiciled platform with no domestic regulatory backstop well before the current crisis.

The company had rebranded from BitBay to Zonda to ZondaCrypto following a 2021 ownership change, when founder Sylwester Suszek sold the exchange to American investors and management passed to Kral.

On-chain forensics firm Recoveris published findings on April 6, 2026, tracing the depletion of Zondacrypto's hot wallet across six blockchains and roughly one million addresses. Recoveris conducted the analysis using seven blockchain analytics providers in combination with a proprietary attribution database.

The numbers are stark. The exchange held approximately 55.7 BTC in its hot wallet in August 2024. By March 2026, that balance had fallen to 0.18 BTC, a decline of 99.7 percent. By April 1, 2026, the balance sat at 0.086 BTC, worth around $9,700. A comparable European exchange holds an average of around 308 BTC.

Between December 18, 2025, and April 2, 2026, Recoveris identified 511 transactions routing funds to a single Kraken deposit address, totaling approximately $21 million across 30 cryptocurrencies and six blockchains, including $4.59 million in BTC specifically.

After the Recoveris report was published, Zondacrypto received 1.15 million USDC routed through eight sequential single-use addresses with consistent two-minute intervals between hops, a pattern Recoveris described as consistent with deliberate obfuscation. Separately, Recoveris documented a 99.8 percent decline in Zondacrypto's ZND native token balance between April 5 and April 26, 2026, a second independent on-chain indicator of collapse.

Polish prosecutors opened a formal criminal investigation under Article 286 §1 (fraud) and Article 299 (money laundering) of the Polish Penal Code. The case was assigned to the Central Bureau for Combating Cybercrime. More than 700 victims have formally registered with prosecutors; the actual affected user base is estimated in the tens of thousands. Among those owed funds: a Polish Olympic athlete whose token-based medal rewards, worth 1.1 million złoty, are locked on the platform.

CEO Kral has reportedly left Poland for Israel, where he holds citizenship, a factor that could complicate any future extradition proceedings.

The situation around exchange founder Suszek is more opaque. He disappeared from public view in March 2022 and has not resurfaced. According to reporting by Disruption Banking and Yahoo Finance, Suszek is the sole holder of private keys to a cold wallet the CEO claimed held 4,500 BTC, worth roughly $330 million at current prices. That claim remains unverified, and the keys remain inaccessible. One board member, Georgi Džaniašvili, stated that despite multiple extraordinary meetings, the board had been "unable to obtain sufficiently clear, verifiable information" about the company's reserve claims.

---

What This Means Beyond Europe

The Zondacrypto case carries direct lessons for users and regulators outside the EU. More than 30 percent of Polish crypto startups had already shifted compliance operations to Lithuania, Estonia, or the Czech Republic because of Poland's regulatory gap, according to estimates cited by AInvest and CCN.

Zondacrypto itself had re-registered first in Malta, then in Estonia, years earlier, meaning Polish users were relying on a foreign-domiciled platform with no domestic regulatory backstop when things went wrong. That structure will be familiar to users in Nigeria, Kenya, India, and Pakistan who access crypto through foreign-licensed or unlicensed platforms. Nigeria faced a comparable situation in 2024 when regulatory disputes led to a Binance withdrawal freeze affecting Nigerian users, a case analysts have cited as an example of what results when large platforms operate without adequate domestic licensing frameworks.

The Recoveris methodology, tracing hot wallet depletion across six blockchains using seven blockchain analytics providers, prompted prosecutors to open a formal criminal investigation within 22 days of publication. That is a replicable model. Nigeria's Securities and Exchange Commission and India's Financial Intelligence Unit are both studying MiCA as a framework reference. Nigeria's March 2025 Investments and Securities Act, which recognizes cryptocurrencies as securities under SEC authority, is broadly comparable to what Poland's bill now achieves under MiCA, according to Chainalysis 2025.

Regulators in those markets now have a detailed case study in what can happen when a licensing framework arrives after users have already lost access to their funds.

Poland's bill still faces potential presidential review before it can take effect. The July 1 deadline does not move.