Voting in a DAO is how token holders in a decentralized autonomous organization collectively decide code changes, treasury spending, and protocol rules. Each participant’s influence is tied to the governance tokens they hold or have been delegated to them, and proposals pass or fail based on numerical rules written into the governance contract rather than a decision by any board or executive. The mechanics differ across protocols, but the core structure is consistent: hold the token, cast a vote (or delegate it), and the smart contract tallies the result.
What You Need Before You Can Vote
You need the project’s governance token, held in a wallet you control. These tokens are typically built on the ERC-20 standard, a widely used format for fungible tokens on Ethereum.1ethereum.org. ERC-20 Token Standard The governance contract reads token balances to decide who can vote and how much weight each vote carries. OpenZeppelin’s widely adopted Governor framework uses an ERC20Votes extension that records historical balances, so voting power comes from a past snapshot rather than your live balance; this prevents the same tokens from voting twice.2OpenZeppelin. OpenZeppelin Contracts 4.x – Governance
Hold the tokens in a self-custody wallet like MetaMask or a hardware device like Ledger. You keep the private keys, and no intermediary votes on your behalf unless you explicitly delegate.
Before buying any governance token on a decentralized exchange, confirm you have the right one. Scam tokens that mimic legitimate projects circulate on open marketplaces. Check the smart contract address against the project’s official documentation, or verify it on Etherscan, which lets you confirm the deployed contract’s source code matches what the project published.3Etherscan. Verify and Publish Contract Source Code Getting this wrong leaves you with tokens that are worthless for governance and possibly worthless entirely.
How Voting Power Is Counted
Different DAOs count votes differently, and the method shapes who actually has influence.
Token-Weighted Voting
The most common model is one token, one vote. Hold 1,000 governance tokens and you cast 1,000 votes. It mirrors corporate shareholder voting and is simple to implement. The tradeoff is that wealthy participants can buy outsized influence, and a single whale can overpower thousands of smaller holders.
Quadratic Voting
Quadratic voting makes each additional vote progressively more expensive. You pay the square of the number of votes you want to cast: one vote costs one token, two votes cost four, three votes cost nine, four votes cost sixteen.4American Economic Association. Quadratic Voting – How Mechanism Design Can Radicalize Democracy The math makes it prohibitively expensive for any single holder to dominate while keeping each individual’s first few votes cheap, so broad coalitions of small holders carry more weight relative to a handful of large ones.
Conviction Voting
Conviction voting treats governance as a continuous process rather than a time-boxed election. Token holders stake their tokens on proposals they support, and their voting power (called conviction) accumulates gradually over time toward an asymptotic maximum. Withdrawing or redirecting your stake causes conviction to decay at the same rate.5Gitcoin. Conviction Voting Each proposal has a dynamic passing threshold tied to the treasury funding it requests, so larger asks require proportionally more accumulated conviction. The system rewards sustained commitment and makes it nearly impossible for someone who just bought tokens to swing an outcome.
How a Vote Actually Happens
Voting happens through a governance interface, and the two most widely used platforms serve different purposes. Snapshot handles off-chain voting: participants sign a message with their wallet rather than submitting an on-chain transaction, which costs zero gas and is commonly used for temperature checks and preliminary polls.6Snapshot. Snapshot Help Center Tally and similar platforms handle on-chain voting, where the vote is recorded directly on the blockchain and can trigger automated execution.
On-chain voting requires a network gas fee for each transaction. As of early 2026, Ethereum mainnet gas prices have dropped substantially. A typical governance interaction now costs well under $1, with most smart contract calls running between $0.01 and $0.10 at current gas levels.7Etherscan. Ethereum Gas Tracker Fees can spike during extreme congestion, but routinely paying double-digit gas for a vote is largely behind us on mainnet, and Layer 2 networks are cheaper still.
Some protocols lock your tokens for the duration of the voting period, preventing transfers until the vote closes. Others impose no lock at all. If you need liquidity, check the specific governance contract before casting.
Quorum and Approval Thresholds
Two numerical gates decide whether a proposal passes. Quorum is the minimum number of tokens that must participate for the result to count. These vary widely: Compound requires at least 400,000 COMP votes in support of a proposal,8Compound. Governance – Compound v2 Docs while Arbitrum recently adjusted its constitutional quorum from 5% to 4.5% of total votable tokens.9Arbitrum. Constitutional AIP – Constitutional Quorum Threshold Reduction The approval threshold is the percentage of cast votes that must favor the change, commonly a simple majority or a supermajority such as two-thirds. Failing either gate rejects the proposal automatically regardless of sentiment.
Timelock and Execution
After a proposal passes, most protocols enforce a mandatory delay before changes take effect. Uniswap’s governance timelock contract sets a minimum delay of two days,10GitHub. governance/contracts/Timelock.sol and Compound uses the same two-day window.8Compound. Governance – Compound v2 Docs The delay exists so users who disagree with the outcome can exit the protocol before the new rules go live. Higher-risk changes sometimes get longer delays.
Delegating Your Votes
If you hold governance tokens but don’t want to evaluate every proposal, you can assign your voting power to someone who does. Delegation runs through the governance contract. In OpenZeppelin’s implementation, your tokens don’t count as votes at all until you delegate them, even if you intend to vote yourself: you have to either delegate to another address or self-delegate to activate your own voting power.11OpenZeppelin. Governance – OpenZeppelin Docs
The delegate receives your voting weight but never gains control of your tokens. You can revoke or change your delegate at any time, and many implementations let you override a delegation and vote directly on a specific proposal when it matters to you.
Security Risks in the Voting Mechanism Itself
Governance systems are high-value targets because they control treasuries and protocol rules. The most devastating attacks exploit the voting mechanism itself rather than breaking the underlying code.
Flash Loan Attacks
In a flash loan governance attack, someone borrows a massive amount of governance tokens, votes on a malicious proposal, and returns the tokens, all within a single blockchain transaction. The Beanstalk DAO lost $182 million in April 2022 when an attacker used a $1 billion flash loan to temporarily acquire 80% of the project’s voting power and pushed through a proposal that drained the treasury in one transaction.12arXiv. A Time-Weighted Snapshot Framework for DAO Governance Voting XToken governance was similarly exploited in 2024 when attackers borrowed tokens to approve a proposal transferring funds directly to their wallet.
Effective defenses include enforcing a non-zero delay between when tokens are acquired and when they can be used to vote, using historical balance snapshots rather than live balances to calculate voting power, and maintaining timelock delays between vote passage and execution. Higher quorum requirements raise the cost of an attack beyond what a flash loan can practically deliver. Before you vote, it’s worth knowing which of these protections the DAO has in place.
Wallet and Phishing Risk
Connecting a wallet to a governance platform means approving a smart contract interaction. Phishing sites that impersonate legitimate governance portals can trick you into signing a malicious transaction that drains your wallet. Verify the URL before connecting, and read what the transaction signature actually requests. A legitimate governance vote should not ask for unlimited token approvals. A hardware wallet adds a physical confirmation step so you can review each transaction before it executes.
Legal Liability for Voting
Voting in a DAO is not a legally neutral act. If the DAO has no formal legal structure, participants who vote on governance proposals can face personal liability for the organization’s actions. This is the most underappreciated risk in DAO governance, and it has already played out in court.
The Ooki DAO Precedent
In 2022, the CFTC sued Ooki DAO for operating an illegal trading platform. The court held that the DAO qualified as an unincorporated association under California law and was a “person” under the Commodity Exchange Act. The court also found that token holders who voted on governance proposals were “actively participating in the business of the association,” which could expose them to liability beyond simply holding tokens.13Davis Wright Tremaine. CFTC v. Ooki DAO, No. 3:22-cv-05416-WHO (N.D. Cal. Dec. 20, 2022) The final judgment included a $643,542 civil penalty and permanent trading bans against the DAO. The CFTC did not pursue individual token holders in that case, but the reasoning leaves the door open for future enforcement actions that do.
Default Partnership Classification
Without a formal legal entity, the IRS generally treats multi-member unincorporated organizations that share profits as partnerships by default under federal tax classification rules. Most DAOs with revenue-generating treasuries fit this description, which can leave participants with partnership tax reporting obligations they never signed up for. If a DAO’s tokens trade actively and generate significant income, the entity might even qualify as a publicly traded partnership taxed as a corporation.
Entity Wrappers That Limit Exposure
Some states have built legal frameworks specifically for DAOs. Wyoming enacted a DAO LLC statute in 2021 that lets a DAO organize as a limited liability company, giving members the liability protections of that structure.14Wyoming Legislature. 2021 SF0038 Under Wyoming law, DAO members owe no fiduciary duty to the organization or to other members beyond the implied covenant of good faith, and information that’s publicly available on the blockchain satisfies the organization’s disclosure obligations. Tennessee and a handful of other states have passed similar legislation. Wrapping a DAO in a recognized legal entity doesn’t eliminate every risk, but it draws a line between the organization’s liabilities and your personal assets.
Tax Consequences of Holding Governance Tokens
Receiving governance tokens through an airdrop creates a taxable event. The IRS treats airdropped cryptocurrency as ordinary income equal to the fair market value at the time you gain dominion and control over the tokens, meaning when you can transfer, sell, or otherwise use them.15Internal Revenue Service. Frequently Asked Questions on Virtual Currency Transactions You report this on your federal income tax return, and the fair market value at receipt becomes your cost basis for calculating capital gains or losses when you later sell.
Casting votes or delegating doesn’t trigger additional tax events on its own. If a DAO distributes treasury funds to token holders as rewards, those distributions are likely taxable as ordinary income or dividends depending on the DAO’s structure. The tax landscape for DAOs is still evolving, and record-keeping matters: track the date, fair market value, and circumstances of every token you receive. Reconstructing that information years later during an audit is painful.
How Regulators Classify Governance Tokens
Whether a governance token qualifies as a security determines how it can be legally issued, traded, and held. On March 17, 2026, the SEC issued an interpretive release establishing a five-category taxonomy for digital assets: digital commodities, digital collectibles, digital tools, stablecoins, and digital securities. Only digital securities are inherently treated as securities under federal law.16U.S. Securities and Exchange Commission. Application of the Federal Securities Laws to Certain Types of Crypto Assets
A governance token outside the digital securities category can still be sold as part of an investment contract if the issuer’s marketing creates a reasonable expectation of profit from the team’s efforts, satisfying the longstanding Howey test. The 2026 guidance identifies specific red flags: explicit promises about what the team will build, emphasis on the team’s credentials, and explanations of how the team’s work will generate returns for token buyers. Where those elements are present, the token sale carries securities obligations regardless of how the token is labeled.
The guidance also introduced a concept that matters for mature DAOs: investment contract status is not permanent. Once an issuer has delivered on the promises made at launch, or can no longer reasonably be expected to drive profits through its own efforts, later token sales no longer carry the original investment contract baggage.16U.S. Securities and Exchange Commission. Application of the Federal Securities Laws to Certain Types of Crypto Assets For a sufficiently decentralized DAO where no central team controls outcomes, that carve-out could eventually remove securities classification. What counts as “sufficiently decentralized” remains a judgment call with no bright-line test.