Connect with us
DAPA Banner

Crypto World

ECB Study Concludes DeFi DAOs Aren’t as Decentralized as They Claim

Published

on

ECB Study Concludes DeFi DAOs Aren't as Decentralized as They Claim

A new working paper from the European Central Bank examined four major protocols and found that a small number of actors control the bulk of governance token holdings.

A European Central Bank working paper challenges the notion that decentralized autonomous organizations (DAOs) deliver on their promise of distributed governance, finding that token holdings and voting power across four major DeFi protocols are heavily concentrated among a handful of actors.

The study examined governance structures at Aave, MakerDAO, Ampleforth, and Uniswap using data from late 2022 and mid-2023. The researchers analyzed the top 100 token holders and top 20 voters for each protocol, reviewed 248 governance proposals, and attempted to trace the real-world identities behind pseudonymous blockchain addresses.

The findings land at a moment when governance disputes are roiling some of the very protocols examined in the study, and DeFi projects more broadly are grappling with whether the Labs-plus-DAO structure is fit for purpose.

Advertisement

Top 100 Holders Command Over 80% of Supply

Across all four protocols, the top 100 holders controlled more than 80% of the total governance token supply during both snapshot periods. At Aave and Uniswap, the top five accounted for roughly half of all holdings. MakerDAO was the relative outlier, with the top five holding around 36%.

The concentration proved sticky over time, with distributions remaining largely unchanged between October 2022 and May 2023.

When the researchers dug into who sits behind the top addresses, they found that for most protocols, roughly half or more of holdings traced to addresses associated with the protocols themselves — encompassing treasuries, founders, and developer allocations — or to centralized and decentralized exchanges.

Protocol-associated addresses held 43% of Uniswap’s UNI supply. Centralized exchange holdings were particularly notable at Aave (16%) and Ampleforth (19%). Binance emerged as the dominant exchange holder across all four protocols, with holdings ranging from 2% to 15% of total supply.

Advertisement

The researchers cautioned that available data doesn’t distinguish between tokens held by exchanges on their own behalf versus those held in custody for customers.

Delegates Dominate Voting

The most active voters on governance proposals turned out to be predominantly delegates — entities to whom smaller token holders assign their voting power. This dynamic has long been a known issue in DAO governance, where low voter turnout and outsized whale participation leave a small group of recurring participants shaping protocol decisions.

The top voter at Uniswap in both snapshots was a16z, the venture capital firm, which saw its delegator count grow from 100 to 125 over the study period. At Aave, the protocol’s own smart contracts held the top-voter position.

Of the 68 top voters identified across all protocols, the researchers could not determine the identities of roughly one-third to nearly half of them. Among those they could identify, individuals made up about 21%, followed by Web3 companies at 19%, university blockchain societies, and VC firms.

Advertisement

Uniswap had the highest delegation rate at 27%, with its top 18 voters holding more than half the delegated power.

The ECB team also systematically categorized the 248 proposals and found that “risk parameters” — covering loan-to-value ratios, liquidation thresholds, borrowing rates, and debt ceilings — were the most common, accounting for 28%. Asset listing proposals made up 23%.

Implications for Regulation

The findings carry direct implications for the ongoing policy debate over how to regulate DeFi. The EU’s Markets in Crypto-Assets regulation exempts services provided in a “fully decentralized manner,” but the ECB researchers argue the protocols they studied fall well short of that standard.

Governance token holders, protocol developers, and centralized exchanges have frequently been proposed as potential regulatory entry points. However, the researchers concluded that the ambiguity surrounding who actually controls governance makes all three difficult to use in practice.

Advertisement

“It is not always clear who in the end is responsible or can be held accountable based on publicly available data,” the authors wrote.

The paper also drew parallels between DeFi governance and traditional corporate shareholder governance, noting that both systems suffer from low voter turnout and outsized influence by a small number of recurring participants.

But DeFi lacks the institutional safeguards — proxy voting rules, stewardship codes, disclosure requirements, and fiduciary obligations — that help mitigate those dynamics in public companies. As DAOs increasingly adopt formal legal structures, the researchers suggested that hybrid models integrating traditional legal frameworks with blockchain-based governance may ultimately be needed.

This article was written with the assistance of AI workflows. All our stories are curated, edited and fact-checked by a human.

Advertisement

Source link

Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Aave’s TVL Falls $8B After $293M Kelp DAO Hack

Published

on

Aave’s TVL Falls $8B After $293M Kelp DAO Hack

Total value locked on decentralized lending protocol Aave dropped by nearly $8 billion over the weekend after hackers behind the $293 million Kelp DAO exploit borrowed funds on Aave, leaving roughly $195 million in “bad debt” on the protocol and triggering withdrawals.

Data from DeFiLlama shows that Aave’s TVL fell from about $26.4 billion to $18.6 billion by Sunday, losing the top spot as the largest DeFi protocol. 

Aave v3’s lending pools for USDt (USDT) and USDC (USDC) are now at 100% utilization, meaning that more than $5.1 billion worth of stablecoins cannot be withdrawn until new liquidity arrives or borrows are repaid. 

$2,540 is available to be withdrawn from the $2.87 billion USDT pool on Aave v3 at the time of writing. Source: Aave

Aave’s TVL fall shows how rapidly risk from a single security incident can spread throughout the broader, interconnected DeFi lending market, potentially leading to a severe liquidity crisis.

The incident began on Saturday when hackers stole 116,500 Kelp DAO Restaked ETH (rsETH) tokens worth about $293 million from Kelp DAO’s LayerZero-powered bridge and used them as collateral on Aave v3 to borrow wrapped Ether (wETH).

Advertisement

Crypto analytics platform Lookonchain said the move created about $195 million in “bad debt” on Aave, which contributed to the Aave (AAVE) token tanking nearly 20% from $112 on Saturday at 6:00 pm UTC to $89.5 about 25 hours later. 

Lookonchain noted that some of the largest crypto whales to withdraw funds from Aave were the MEXC crypto exchange and Abraxas Capital at $431 million and $392 million, respectively.

Source: Grvt

Several crypto networks and protocols tied to rsETH or the LayerZero bridge have paused use of the bridge until the problem is resolved, including DeFi platform Curve Finance, stablecoin issuer Ethena and BitGo’s Wrapped Bitcoin (WBTC).

Aave has frozen several rsETH, wETH markets

Shortly after the Kelp DAO exploit, Aave said it froze the rsETH markets on both Aave v3 and v4 to prevent any suspicious borrowing and later stated that rsETH on Ethereum mainnet remains fully backed by underlying assets.

WETH reserves also remain frozen on Ethereum, Arbitrum, Base, Mantle and Linea, Aave said.

Advertisement

This incident marks the first significant stress test of Aave’s “Umbrella” security model, which was introduced in June 2025 to provide automated protection against protocol bad debt while enabling users to earn rewards.

Related: Aave DAO backs V4 mainnet plan in near-unanimous vote

Earlier this month, the Bank of Canada found that Aave avoided bad debt in its v3 market by using overcollateralization, automated liquidations and other strategies that shifted risk to borrowers.

In comments to Cointelegraph, Aave defended its liquidation-based model, framing it as a core safety mechanism that protects lenders while limiting downside for borrowers.

Advertisement

It comes as Aave parted ways with its longest-standing DeFi risk service provider, Chaos Labs, on April 6, following disagreements over the direction of Aave v4 and budget constraints.

Magazine: Are DeFi devs liable for the illegal activity of others on their platforms?