What Is a DAO? Decentralized Autonomous Organizations Explained

Imagine a club where the bylaws are software, the bank account opens only when members vote, and anyone in the world can join by holding a token. That’s the idea behind a DAO, or decentralized autonomous organization.

DAOs run some of the largest crypto protocols, fund open-source projects and pool money for shared goals. They’ve also been hacked, captured by large holders and sued by regulators. This guide explains how DAOs actually work, how token voting and treasuries are managed, and the governance pitfalls to understand before you join or start one.

This is general information, not legal, tax or investment advice.

What a DAO is in plain English

A DAO is an organization whose rules and money are managed through smart contracts on a blockchain rather than by a traditional management structure. In practice:

• Rules live in code. Smart contracts define who can propose changes, how voting works and what happens when a vote passes.
• Members hold governance rights, usually through tokens. Holding tokens lets you vote, propose or delegate your votes to someone else.
• The treasury is on-chain. Funds sit in a smart contract or multi-signature wallet, and spending requires an approved proposal or authorized signers.
• Activity is transparent. On public blockchains, anyone can see proposals, votes and treasury movements.

“Autonomous” is a bit of an overstatement. Most DAOs still depend on people: core contributors who write code, multisig signers who execute decisions, and delegates who do most of the voting. DAOs are better described as organizations with on-chain governance and shared treasuries.

How DAO voting works

Most DAOs use some version of this proposal lifecycle:

1. Discussion. Someone posts an idea on a forum or chat for feedback.
2. Formal proposal. If there’s support, a member who meets the proposal threshold (often a minimum token holding) submits it on-chain or on an off-chain voting platform.
3. Voting delay. A short waiting period lets holders review it. Voting power is often fixed at a “snapshot” of balances at a specific block.
4. Voting period. Token holders or their delegates vote for, against or abstain.
5. Quorum and result. The proposal passes if enough votes participate (quorum) and a majority, or a required supermajority, votes for it.
6. Timelock and execution. Passed proposals often wait in a timelock before execution, giving members time to react or exit if they disagree.

OpenZeppelin’s widely used Governor contracts follow this model. Its documentation recommends a timelock, uses a snapshot of past balances to prevent double voting, and requires token holders to delegate voting power (to themselves or someone else) before they can vote.

On-chain vs off-chain voting

Common voting models

• Token-weighted voting: one token, one vote. Simple, but large holders dominate.
• Delegated voting: holders assign their votes to delegates who vote on their behalf, similar to representatives.
• Quorum and supermajority thresholds for major changes.
• Alternatives such as one-member-one-vote (common with NFT memberships), quadratic voting and reputation-based voting, which try to reduce the influence of large holders.

Key takeaway: A DAO is only as decentralized as its token distribution and voter participation. Before trusting one, look at who holds the tokens, how many people actually vote, and who controls the treasury keys.

How DAO treasury management works

The treasury is often a DAO’s most important and most vulnerable asset. Common structures:

• Governor plus timelock: The treasury is held by a timelock contract that only executes proposals that passed a vote.
• Multi-signature wallet: A group of elected signers (for example, 5 of 9) must approve each transaction. Faster and simpler, but relies on those signers.
• Hybrid: Off-chain votes decide; a multisig executes.
• Budgets and grants: Members approve funding for working groups, contributors or grant programs, which then spend within limits.

Good treasury practices include diversifying out of the DAO’s own token, publishing regular financial reports, setting spending limits for working groups, and using hardware-secured keys for signers (see hot wallet vs cold wallet).

Known governance pitfalls

DAOs have a decade of hard lessons. These are the ones that come up most often.

Low voter turnout. Many token holders never vote. That makes quorum hard to reach and lets a small, active group make most decisions.

Whale dominance. With token-weighted voting, a few large holders such as early investors, founders or exchanges can decide outcomes. Concentrated ownership undermines the “decentralized” label.

Governance attacks. If voting power is measured at the moment of voting, an attacker can borrow tokens and vote with them. In April 2022, an attacker used flash-loaned funds to gain a supermajority in the Beanstalk protocol’s governance and pass a proposal that drained its funds, with losses reported at more than $180 million. Snapshots of past balances and timelocks are standard defenses.

Smart contract bugs. In 2016, “The DAO,” an early Ethereum-based investment DAO, was exploited through a code flaw; the SEC later noted an attacker took roughly one-third of its assets. The episode led to a controversial Ethereum hard fork.

Key person and multisig risk. If a few signers or developers control upgrades or the treasury, they can make mistakes, lose keys or be targeted by attackers.

Voter apathy and plutocracy feed each other. When small holders feel their vote doesn’t matter, they stop voting, which concentrates power further.

Scams. Fake DAOs and “governance token” schemes are common. Our guide on how to avoid crypto scams covers the warning signs.

The legal side of DAOs in the US

DAOs exist in a legal gray zone, and the consequences can be personal.

• Securities law. In a 2017 report on The DAO, the SEC concluded that its tokens were securities under federal law. Whether a specific governance token is a security still depends on the facts. See our overview of crypto regulation in the US.
• Liability. In June 2023, a federal court in California entered a default judgment in the CFTC’s case against Ooki DAO, finding the DAO was an unincorporated association that could be held liable under the Commodity Exchange Act. Without a legal wrapper, members may face personal liability, similar to partners in a general partnership.
• Legal wrappers. Some states offer structures for DAOs. Wyoming allowed DAOs to form as a type of LLC starting in 2021, and its Decentralized Unincorporated Nonprofit Association (DUNA) Act took effect July 1, 2024 for nonprofit-purpose DAOs with at least 100 members. Other DAOs use foundations or LLCs in various jurisdictions.
• Taxes. Token rewards and DAO distributions can be taxable. See how crypto is taxed in the US.

This is not legal advice. Anyone forming or actively participating in a DAO should get advice from a lawyer who knows crypto.

What DAOs are used for

• Protocol governance: Holders vote on upgrades, fees and risk settings for decentralized finance protocols.
• Grants and public goods: Pooled funds for open-source software and community projects.
• Investment and collector clubs: Members pool money to buy assets, though these raise securities law questions.
• Social and creator communities: Token-gated memberships and shared projects.
• Service collectives: Freelancers coordinating work and pay through a shared treasury.

DAOs are one piece of the broader Web3 idea of user-owned internet services.

Where to start: evaluating or joining a DAO

1. Read the governance docs. How are proposals made, what are the quorum and thresholds, and is there a timelock?
2. Check token distribution. Use a block explorer or the DAO’s dashboards to see how concentrated holdings are.
3. Look at participation. How many addresses vote on typical proposals?
4. Inspect treasury controls. Who are the multisig signers, and how many signatures are required?
5. Look for audits of the smart contracts and a history of how incidents were handled.
6. Check the legal structure. Is there an LLC, DUNA, foundation or nothing at all?
7. Start small. Join forum discussions and vote on a few proposals before committing money or time.

Conclusion

A DAO is a way to run a shared organization and treasury through smart contracts and token voting instead of traditional management. Done well, it offers transparency and global participation. Done poorly, it concentrates power, invites attacks and leaves members exposed legally. Before joining or launching one, look past the “decentralized” label at who holds the tokens, who votes, who controls the keys and what legal protection exists. For related terms, see our glossary.

Sources

• SEC: Report of Investigation on The DAO (Release No. 81207, 2017) — DAO tokens as securities; the 2016 exploit
• CFTC: Statement on the Ooki DAO litigation — 2023 court ruling that a DAO can be held liable as an unincorporated association
• Wyoming Legislature: SF0050 (2024), Decentralized Unincorporated Nonprofit Association Act — DUNA requirements and July 1, 2024 effective date
• Wyoming Secretary of State: DAO FAQs — DAO LLC formation under Wyoming law
• OpenZeppelin Docs: How to set up on-chain governance — proposal lifecycle, voting delay, quorum, delegation and timelocks