A decentralized autonomous organization, or DAO, is a group that runs on smart contracts deployed to a blockchain rather than on executives and a board. Members hold governance tokens that let them submit and vote on proposals, every transaction sits on a public ledger anyone can inspect, and approved decisions execute automatically through code. That structure is genuinely different from a corporation, and the differences cut both ways: DAOs offer transparency and automated enforcement that traditional entities can’t match, but participants face personal liability, possible securities regulation, and tax obligations that many don’t see coming.
Code Runs the Organization
The rules governing a DAO live in smart contracts, which are self-executing programs on a blockchain. These contracts use conditional logic to automate decisions a board or management team would normally handle. When a proposal passes with enough votes, the smart contract releases funds or changes a protocol setting on its own. No single person approves the transaction, and no one can block it after the fact.
Because the rules are written into code before launch, they apply equally to everyone. Spending limits, proposal thresholds, and fund allocations execute exactly as programmed. Changing them requires a governance vote through the protocol itself. That structural constraint is what prevents any one member from consolidating control.
Smart contracts on most blockchains are immutable by design: the original code can’t be edited once deployed. Many DAOs work around this with upgrade patterns like proxy contracts, where an unchangeable shell delegates calls to a separate logic contract that members can vote to replace. Upgrades typically require a successful governance vote and a time-delay period so members who disagree can exit before the change takes effect.
Members Vote With Tokens
You get a voice in a DAO by holding its governance tokens. These tokens are both membership credential and voting share. Holding them lets you submit proposals, vote on others’ proposals, and in some DAOs claim a share of revenue or treasury assets. Without tokens, you’re an observer.
Voting power is usually proportional to holdings. Someone with 500 tokens carries ten times the influence of someone with 50. The design aligns incentives, since the people with the most to lose from a bad decision have the largest say, but it also means large holders can dominate governance if nothing checks them.
Quorum Requirements
A proposal passing with three votes out of three isn’t meaningful governance, so DAOs set quorum thresholds: a minimum percentage of total tokens that must participate for a vote to count. Thresholds vary widely. Some DAOs set them as low as 1% of the token supply; others require substantially more. If quorum isn’t met, the proposal fails regardless of how one-sided the votes are.
Delegation
Most token holders don’t vote on every proposal. Many DAOs address low turnout through delegation, where you assign your voting power to a representative you trust. Unlike electing a board member for a fixed term, delegation is revocable at any time. You can reclaim your votes or switch delegates before any individual proposal. Some DAOs allow domain-specific delegation, so you can pick one expert for treasury decisions and another for technical upgrades.
Everything Is Visible on the Blockchain
Every financial movement and governance decision in a DAO is recorded on a public blockchain. Treasury balances, fund transfers, and vote tallies are visible to anyone with an internet connection. You don’t need the organization’s permission to verify how money is being spent or whether a proposal actually passed. The level of transparency goes well beyond what a traditional corporation gives shareholders.
The tradeoff is privacy. Because each vote is tied to a wallet address, observers can track how specific wallets vote over time.
Smart Contracts Can Fail Catastrophically
Code-based governance means code-based risk. In 2016, an attacker exploited a flaw in the original DAO’s smart contract and drained roughly $50 million worth of Ether from its treasury through a reentrancy attack, repeatedly calling the withdrawal function before the contract could update the internal balance. The Ethereum community responded with a controversial hard fork that effectively reversed the theft, but at the cost of splitting the network into Ethereum and Ethereum Classic.
The episode is the standard cautionary example for anyone building or joining a DAO, and it was the catalyst for the SEC’s investigation into whether DAO tokens are securities. Reputable DAOs now commission independent security audits before deploying or upgrading smart contracts, with timelines in 2026 ranging from under a week for a simple token contract to two months or more for a complex cross-chain protocol. An audit doesn’t eliminate the risk; it reduces it.
DAO Tokens Can Be Securities
The SEC has made clear that DAO tokens can qualify as securities. In a 2017 Report of Investigation, the agency concluded that tokens issued by The DAO were investment contracts under the Howey test and therefore subject to federal securities laws.1U.S. Securities and Exchange Commission. Report of Investigation Pursuant to Section 21(a) of the Securities Exchange Act of 1934 – Release No. 81207 The reasoning applies broadly, not just to that one project.
The Howey test asks three questions: did buyers invest money or something of value, in a common enterprise, with a reasonable expectation of profits derived from the efforts of others? When all three are satisfied, the token is an investment contract and must be registered with the SEC or qualify for an exemption. The SEC found that DAO purchasers invested ETH into a pooled fund, expected to profit from projects selected and vetted by the organization’s curators, and had only limited voting power that didn’t give them meaningful control.1U.S. Securities and Exchange Commission. Report of Investigation Pursuant to Section 21(a) of the Securities Exchange Act of 1934 – Release No. 81207
The SEC’s staff framework for digital assets elaborates on what pushes a token toward security status. If a core team drives development, promotes the token, or creates a trading market, purchasers are likely relying on that team’s efforts rather than their own. A token used purely for governance in a fully decentralized network with no central promoter is less likely to meet the Howey test.2U.S. Securities and Exchange Commission. Framework for Investment Contract Analysis of Digital Assets Where any particular token falls on that spectrum depends on the facts, and the safe assumption is that regulators are watching.
Without a Legal Entity, Members Can Be Personally Liable
When a DAO never registers as an entity, the legal system doesn’t just ignore it. Courts and regulators may classify the group as a general partnership or unincorporated association, which carries serious consequences. In a general partnership, every participant faces personal liability for the organization’s debts and legal obligations. A creditor can go after individual members’ savings, property, and other personal assets to satisfy a judgment against the group.
The CFTC’s enforcement action against Ooki DAO in 2022 and 2023 made this risk concrete. A federal court ruled that the DAO qualified as an unincorporated association and was a “person” that could be sued under the Commodity Exchange Act. The court entered a default judgment ordering the DAO to pay $643,542 in civil penalties and permanently shut down its website. The court noted that individual token holder liability was a separate question it didn’t need to reach in that case, but the ruling established that a DAO without a legal wrapper can be hauled into court and held accountable.3Commodity Futures Trading Commission. CFTC Press Release 8715-23
The financial exposure goes beyond civil penalties. If a token is classified as an unregistered security, penalties under the Investment Company Act alone range from $5,000 per violation for an individual to $500,000 per violation for an entity in cases involving fraud or reckless disregard of regulatory requirements.4GovInfo. Investment Company Act of 1940 – Section 42 Selling unregistered securities is separately illegal under the Securities Act, and the SEC has obtained civil penalties exceeding $1 million in enforcement actions for Section 5 violations.
Some States Let a DAO Register as an LLC
A handful of states have enacted legislation allowing DAOs to register as formal legal entities, typically as a specialized type of limited liability company. These laws generally require the organization to file articles of organization with the state, include a statement identifying the entity as a DAO, and explain whether management will be algorithmic, by member vote, or some combination. Filing fees across the states that offer this option generally run between $70 and $310.
Registering gives a DAO a recognized legal identity. It can enter contracts, open bank accounts, own intellectual property, and sue or be sued in court. The LLC structure also provides members with limited liability, so personal assets are shielded from the organization’s debts and legal claims.
Watch for the inactivity trap. Some state laws include automatic dissolution provisions: if the DAO fails to approve any proposal or take any action for a continuous period, typically one year, the entity dissolves by operation of law. A dormant DAO can lose its legal protections without anyone filing paperwork.
Participants Owe Taxes on DAO Income
The IRS treats digital asset income as taxable. If you earn governance tokens, receive DAO treasury distributions, or sell tokens at a profit, you owe taxes on that income. Tokens held more than a year before selling are taxed at long-term capital gains rates; those held a year or less are taxed as short-term gains at ordinary income rates. Tokens received as compensation for work or services are taxed as ordinary income when received.5Internal Revenue Service. Digital Assets
If a DAO is classified as a partnership for tax purposes, it doesn’t pay income tax itself. Income, losses, deductions, and credits pass through to each member. The DAO is responsible for filing Form 1065 with the IRS and issuing a Schedule K-1 to every member reporting their share.6Internal Revenue Service. About Form 1065, U.S. Return of Partnership Income In practice, many unregistered DAOs don’t file these forms, leaving members to figure out their obligations with limited information. That gap creates real audit risk.
Starting in 2026, custodial digital asset brokers are required to report transactions to the IRS on Form 1099-DA, covering proceeds, cost basis, acquisition dates, and holding periods for covered assets.7Internal Revenue Service. About Form 1099-DA, Digital Asset Proceeds From Broker Transactions Decentralized exchanges, self-custody wallets, and smart contract interfaces are excluded from the broker definition, so transactions conducted entirely through those channels won’t generate a 1099-DA. You’re still responsible for reporting the income whether or not you receive a form.