A decentralized autonomous organization, or DAO, works by running its rules on smart contracts deployed to a blockchain: members hold governance tokens in a digital wallet, use those tokens to vote on proposals, and the code automatically carries out whatever the vote approves. There is no CEO, no board, and no office. The bylaws are public code, votes happen through wallet signatures, and treasury funds move only when the community authorizes them.
The Smart Contracts That Run the Organization
Every DAO sits on top of smart contracts, which are programs deployed to a blockchain like Ethereum that execute automatically when specific conditions are met. They function as self-enforcing bylaws. If a proposal collects enough votes, the contract releases the funds. If a contributor hits a milestone defined in the contract, the contract pays them. The approval logic is baked in, so no administrator has to sign off.
Once deployed, the contracts are visible to anyone with an internet connection. Any member can read the code and verify what the rules actually are, which removes the “trust me” problem of traditional organizations. The contract handles work that would otherwise require accountants, administrators, and lawyers: tracking who owns what, counting votes, releasing payments, and recording every transaction on a permanent public ledger. The organization runs around the clock regardless of where its members live.
Deploying and interacting with these contracts costs a small network fee, called gas on Ethereum, that compensates the computers processing the transaction. The fee rises and falls with network demand, so a single vote might cost a few cents during quiet periods or several dollars when the network is busy. That cost shapes the whole governance process, and it’s why most DAOs push early-stage discussion to free off-chain tools and reserve on-chain votes for final decisions.
Governance Tokens and How Membership Works
Membership in a DAO is represented by governance tokens held in a digital wallet. These tokens grant the right to vote on proposals, and in most DAOs the weight of your vote scales with how many tokens you hold. You can acquire them by purchasing on a decentralized exchange, earning them as compensation for work, or receiving them through an airdrop to early users. Some DAOs also require holding a minimum number of tokens before you can submit a proposal, which filters out noise but concentrates proposal power among larger holders.
Proportional voting creates an obvious problem: wealthy participants, often called whales, can dominate decisions. This is the governance version of a controlling shareholder, and it’s why many DAOs allow delegation. Token holders can assign their voting power to a delegate they trust — someone who follows proposals closely and votes on their behalf. You can revoke that delegation at any time and vote directly on any individual proposal. Across 18 Ethereum DAOs studied from 2021 through 2023, roughly 17 percent of voting power was delegated, which suggests most holders either vote directly or, more commonly, don’t vote at all.
One response to the whale problem is quadratic voting, which changes the cost of casting votes. Under standard linear voting, 100 tokens equal 100 votes. Under quadratic voting, each additional vote costs more than the last: 1 vote costs 1 token, 2 votes cost 4 tokens, 10 votes cost 100 tokens. The formula is n² tokens for n votes. This makes it progressively more expensive for any one holder to dominate a decision. Adoption is still limited, but it has gained traction in grant allocation and community funding rounds.
How a Proposal Becomes an Action
Changing anything in a DAO follows a structured path that typically moves through three stages: informal discussion, off-chain signaling, and a binding on-chain vote.
The process starts in a community forum, often on a platform like Discourse, where a member posts a draft proposal. Other members poke holes, suggest revisions, and debate in public threads. This stage has no formal rules. It’s a conversation, and most weak ideas get filtered out before anyone spends money on a transaction fee.
If the idea survives discussion, it moves to a temperature check. This usually happens on Snapshot, an off-chain voting tool where members sign a message with their wallet to record a preference. Because Snapshot votes are signed messages rather than blockchain transactions, they cost nothing in gas. The results aren’t binding, but they reveal whether the proposal has enough support to justify an on-chain vote. A proposal that gets 80 percent approval on Snapshot will almost certainly pass on-chain. One that scrapes by at 52 percent often goes back for revision.
The final stage is the on-chain vote, where members interact directly with the governance smart contract through their wallets. Each vote is a real blockchain transaction that costs gas and gets recorded permanently. To pass, a proposal typically has to clear two thresholds written into the contract: a quorum (the minimum amount of voting power that must participate) and a majority (the percentage of participating votes in favor). If both conditions are met, the contract automatically executes what the proposal authorized: releasing treasury funds, updating a parameter, or deploying new code. No one can override or delay the result unless the contract was built with a timelock or veto mechanism.
The Treasury and How Funds Actually Move
A DAO’s treasury is the pool of digital assets, including stablecoins, the organization’s own governance tokens, and sometimes other cryptocurrencies, that funds its operations. Some of the largest DAO treasuries hold billions of dollars.
The standard tool for securing those assets is a multi-signature wallet, or multi-sig, most commonly built on Safe (formerly Gnosis Safe). A multi-sig requires a set number of designated signers to approve any transaction. A 3-of-5 setup, for example, means three out of five keyholders must sign before funds move. No single person can drain the treasury unilaterally. Safe wallets collectively secure roughly $50 billion in assets across the ecosystem, with approximately $7 billion held in DAO treasuries on Ethereum alone. Survey data shows that most DAO multi-sigs use a threshold of 1 to 3 required signers, which some security researchers consider dangerously low for the sums involved.
Funds leave the treasury only after a proposal clears the full governance process. A successful vote might authorize payment for software development, fund a marketing initiative, or issue grants to community members. The smart contract acts as the final gatekeeper, releasing the exact amount specified and nothing more. Every outgoing transaction is visible on the public ledger.
Most DAOs don’t start fully decentralized. A common approach is progressive decentralization, where the founding team keeps significant control during the early building phase, gradually transfers decision-making to the community as the product matures, and eventually cedes majority ownership through broad token distribution. That final stage is where the treasury formally comes under community governance.
What Can Go Wrong: Bugs and Governance Attacks
The permanence that makes smart contracts trustworthy also makes them dangerous when the code contains flaws. The most infamous example is the 2016 hack of “The DAO,” an early decentralized investment fund built on Ethereum. An attacker exploited a reentrancy vulnerability, a bug that let them repeatedly withdraw funds before the contract updated its balance, and drained roughly 3.6 million ETH, worth about $60 million at the time. The Ethereum community ultimately reversed the damage through a hard fork that split the network into Ethereum and Ethereum Classic, but the incident proved that “code is law” cuts both ways. A third-party security audit before launch is now considered standard practice for any serious DAO.
Governance itself can also be weaponized. In April 2022, an attacker used flash loans, borrowing over $1 billion in assets from multiple lending protocols within a single transaction, to temporarily acquire enough voting power to pass a malicious proposal on Beanstalk Farms. The proposal drained approximately $181 million. Because the governance contract allowed immediate execution after a vote, the attacker borrowed the tokens, voted, executed, and repaid the loan in one transaction. The entire attack took seconds.
Beanstalk exposed a design flaw that many DAOs have since patched. The primary defenses include:
- Timelocks: a mandatory delay between when a proposal passes and when it executes, typically 24 to 48 hours, giving the community time to detect malicious proposals and respond.
- Snapshot-based voting power: instead of counting tokens held at the moment of the vote, the contract measures holdings at a block height before the proposal was submitted, which makes flash-loan attacks useless because the borrowed tokens weren’t in the voter’s wallet at the snapshot.
- Multi-day voting windows: extending the voting period across several days prevents an attacker from pushing a proposal through before anyone notices.
- Security councils: a small elected group with veto power over proposals that appear malicious, serving as a last line of defense when the code alone isn’t enough.
No single defense is bulletproof. The strongest DAOs layer all of these together.
The Participation Problem
The democratic structure looks elegant on paper, but participation rates tell a different story. Research across more than 3,000 DAOs found that fewer than 3 percent of members vote on proposals. Uniswap, one of the largest and most visible DAOs in existence, averages roughly 0.33 percent voter turnout. A small, engaged minority typically makes decisions that affect everyone, while most token holders stay passive. Low turnout also creates a security risk, because quorum thresholds become easier to manipulate when most people aren’t watching.
Personal Liability for DAO Members
Here’s the part most participants don’t think about until it’s too late. If your DAO has no formal legal entity, courts in most states will treat it as a general partnership by default. Under the Revised Uniform Partnership Act, adopted in the majority of states, a partnership is created whenever two or more people associate to carry on a business for profit, regardless of whether they intended to form one. In a general partnership, every member is jointly and severally liable for the organization’s debts and legal judgments. A creditor or regulator can go after your personal assets.
This isn’t theoretical. In 2022, a federal court ruled that Ooki DAO could be sued as an unincorporated association under California procedure rules. The court noted that in states without specific rules for unincorporated associations, a DAO defaults to general partnership treatment, and members lose any liability shield. If the DAO gets sued, every token holder participating in governance could be on the hook personally.
A handful of states have created legal frameworks specifically for DAOs, allowing them to register as a specialized form of limited liability company. Registration typically costs between $70 and $300 in filing fees and gives members the same liability protection that LLC members get in any other context, meaning personal exposure is generally limited to what you invested. For any DAO handling meaningful amounts of money or interacting with third parties, registering as a legal entity is the difference between risking your token balance and risking your house.
Taxes on DAO Income
The IRS treats cryptocurrency received as payment for services as ordinary income, valued at the fair market value in U.S. dollars on the date you receive it.1Internal Revenue Service. Frequently Asked Questions on Virtual Currency Transactions If a DAO treasury pays you in tokens or stablecoins for development work, content creation, or any other service, that payment is taxable income. It doesn’t matter that it came from a smart contract instead of a payroll department.
Starting in 2026, organizations paying $2,000 or more in nonemployee compensation during the calendar year are required to report those payments on Form 1099-NEC. The threshold was $600 in prior years.2Internal Revenue Service. Form 1099-NEC and Independent Contractors Whether a DAO actually sends you a 1099 depends on whether it has the infrastructure to do so, and many don’t, but you owe the tax regardless. If your net earnings from self-employment hit $400 or more, you also owe self-employment tax at 15.3 percent, which covers both Social Security and Medicare.3Internal Revenue Service. Self-Employment Tax (Social Security and Medicare Taxes)
The DAO’s own tax classification depends on how it’s structured. Under the IRS check-the-box regulations, a domestic entity with two or more owners that doesn’t file an election defaults to partnership treatment. The DAO itself files Form 1065 and issues Schedule K-1 to each member reporting their share of income, deductions, and credits. An entity that registers as an LLC can elect to be taxed as a corporation by filing Form 8832. In practice, most unregistered DAOs aren’t filing anything, which creates real exposure for members if the IRS decides to look.
One other area to watch: if the DAO facilitates the exchange of digital assets for fiat currency or transfers value on behalf of others, it could meet the definition of a money services business. Entities that qualify must register with FinCEN regardless of whether they hold a state license.4eCFR. 31 CFR 1022.380 – Registration of Money Services Businesses Most governance-only DAOs won’t trigger this requirement, but DAOs that manage lending, swaps, or payment functions could.