A governance token is a crypto token that gives its holder voting power over a protocol or a decentralised autonomous organisation (DAO). Holders, or the people they delegate to, vote on proposals that can change smart-contract parameters, upgrade code or spend the treasury. Voting power usually follows token balance, so whoever controls the most tokens controls the most votes. That makes these tokens useful for coordination, and it also creates their main weakness.
How governance tokens work
ethereum.org describes token-based membership this way: "simply holding the token grants access to voting." Decisions are made through proposals and votes. For DAOs that run fully on-chain, the outcome of a vote can be carried out by code without a trusted intermediary.
A typical on-chain process has four steps:
- Proposal. An address with enough voting power submits a proposal. The proposal contains the actual transactions that will run if it passes.
- Review delay. There is a waiting period before voting opens. Voting weights are recorded when voting begins.
- Vote. Votes are cast during a fixed window. To pass, a proposal needs a majority and has to clear a minimum participation or approval threshold.
- Timelock and execution. A passed proposal waits in a timelock before it runs. During that time, users who object can withdraw their funds.
A worked example: Compound v2
Compound is a lending protocol, and its v2 governance documentation publishes exact parameters. All of them can be changed by governance:
| Parameter | Value in Compound v2 docs |
|---|---|
| Token | COMP (an ERC-20 token) |
| Proposal threshold | 25,000 COMP delegated to the proposing address |
| Review period | 2 days, after which voting weights are recorded |
| Voting period | 3 days |
| Passing condition | Majority, with at least 400,000 votes cast in favour |
| Timelock | Passed proposals can be implemented 2 days later |
Voting weight in Compound comes from delegated COMP. A holder can delegate to their own address or to one other address at a time.
Delegation
Most holders do not vote on every proposal, so many systems let them delegate. ethereum.org calls this "the DAO version of representative democracy." Holders assign their votes to delegates who say they will follow the protocol and vote on its behalf. ethereum.org gives the Ethereum Name Service (ENS) as an example: ENS holders can delegate their votes to active community members.
On-chain and off-chain voting
Some projects run votes entirely through smart contracts, and the result executes automatically. Others hold signalling votes off-chain, for example on Snapshot, and then a multisig or core team carries out the result. Off-chain voting costs nothing to take part in, but it brings back trust in whoever executes the outcome.
What holders can actually decide
The scope depends on each protocol's contracts. It commonly includes:
- risk and fee parameters, such as collateral factors and interest-rate models in lending protocols
- contract upgrades and new markets
- treasury spending, grants and contributor payments
- changes to the governance rules themselves, including thresholds and delays
A governance token does not automatically entitle holders to fees, revenue or any other payout. Whether a particular token does is decided by that protocol's rules, which governance can change.
What to check before relying on a governance token
Answer four questions from the article's checklist to see which governance risk applies to the token you are looking at.
Looking at the top holders and delegates on a block explorer, could a handful of addresses decide any vote on their own?
- Yes, a few addresses hold or are delegated most of the votes → Concentrated voting power
- No, voting power is spread out → next question
- I have not checked yet → Find this out first
How is voting power measured when a vote opens?
- A snapshot at a past block, or tokens that must be locked → next question
- The live token balance at the moment of voting → Open to borrowed votes
- The documentation does not say → Find this out first
Does a passed proposal wait in a timelock before it runs?
- Yes, there is a delay before execution → next question
- No, it runs as soon as it passes → No window to exit
- The documentation does not say → Find this out first
Is the vote binding on-chain, or an off-chain signal that someone else carries out?
- On-chain: the result executes through smart contracts → These checks are covered
- Off-chain signal, then a multisig or core team executes it → You also trust the executors
A small group can pass proposals, including treasury transfers, within the rules. Compound Proposal 289 in July 2024 shows how large holders can win a vote when most holders do not take part.
If voting power follows a live balance, tokens borrowed for a single transaction can count as votes. That is how Beanstalk's governance was attacked on 17 April 2022.
Without a timelock, users who object to a passed proposal cannot withdraw their funds before the change takes effect.
Off-chain voting costs nothing to join, but the outcome depends on a multisig or core team carrying it out. Check who signs and how many signatures are needed.
Voting power is spread out, measured in a way that resists flash loans, delayed by a timelock and executed on-chain. Low turnout can still let a motivated minority clear a quorum, and none of this means the token grants anything beyond votes.
Look up the holder and delegate distribution on a block explorer and the proposal threshold, quorum, voting period and timelock in the protocol's documentation before relying on the token.
This walks through the article's checklist only: it does not rate any specific token, cover legal treatment outside the two US cases, or tell you whether to buy, hold or vote.
Where token voting breaks
Borrowed voting power: April 2022
On 17 April 2022, Beanstalk, a stablecoin protocol, was attacked through its on-chain governance. In its own disclosures, Beanstalk says the attacker "used a flash loan to compromise the governance mechanism." A flash loan is borrowed and repaid within a single transaction. With that borrowed voting power, the attacker passed a proposal that took the assets deposited in the protocol. Beanstalk puts the loss at "all ~$77M in non-Beanstalk user assets". Early press reports used a higher figure of about $182 million, which included the protocol's own tokens.
After the attack, Beanstalk was paused and its on-chain governance was removed. Votes moved to Snapshot. Contract changes now need the signatures of 5 of the 9 members of a community multisig, which the project describes as a temporary arrangement.
The lesson is about timing. Measure voting power at a past block, or require tokens to be locked before a vote, and borrowed tokens cannot decide the outcome. Compound's design of recording weights when voting opens, two days after a proposal is made, is one example.
Concentrated holders: July 2024
Large holders who buy or accumulate tokens in the open market can also win a vote. Compound Proposal 289, titled "Trust Setup for DAO investment into GoldCOMP," was submitted on 24 July 2024. It asked to move COMP from the treasury into a vault controlled by a group of large holders. According to a post-incident write-up by rekt.news, the amount was 499,000 COMP, worth about $24 million at the time. The same write-up says the proposal passed on 28 July by 682,191 votes to 633,636.
The proposal was then cancelled; the Tally governance record shows its status as "Canceled." Reports say the cancellation was part of a deal to give staked COMP holders 30% of market reserves. The proposal was within the DAO's rules, and whether to call it an attack is disputed. The vote count and amount are confirmed only by secondary reporting; the 682.19K votes shown on the Tally record are consistent with it.
Low turnout
The two cases have one thing in common. Quorums are set in absolute token numbers, so when most holders do not vote, a motivated minority can clear them. Delegation, timelocks and higher thresholds reduce this risk but do not remove it.
The legal side
Holding a governance token can carry legal consequences beyond voting.
- Securities law (US). On 25 July 2017, the SEC published an investigative report on "The DAO." It concluded that DAO Tokens were securities, so federal securities laws applied to them. The SEC brought no charges and issued the report as a warning to the industry.
- Commodities law (US). On 8 June 2023, US District Judge William H. Orrick entered a default judgment in a CFTC case against a DAO that governed a leveraged trading protocol. The DAO had to pay a $643,542 civil monetary penalty. The CFTC called it a precedent-setting decision because the court held that a DAO is a "person" under the Commodity Exchange Act. A related administrative order had earlier found the protocol's founders liable "as members of" the DAO.
These are US cases. Other jurisdictions treat DAOs and governance tokens differently.
How to read a governance token before relying on it
- Who holds the supply? Check the top holders and delegates on a block explorer. A handful of addresses may be able to decide any vote.
- What are the thresholds? Find the proposal threshold, quorum and voting period in the protocol's documentation.
- Is there a timelock? Without a delay, users cannot exit before a harmful change takes effect.
- How is voting power measured? A snapshot at a past block or locked tokens resists flash loans. A live balance does not.
- Is the vote binding? On-chain execution and an off-chain signal followed by a multisig carry different trust assumptions.
- What does the token actually grant? Read whether it gives anything beyond votes. Do not assume it does.
Limitations: parameters and holder distributions change through governance; the figures here are as published in the cited sources, and the Compound Proposal 289 amounts rest on secondary reporting.
