Decentralized finance has long marketed itself on a simple premise: no gatekeepers, no central authority, just code and community. A new working paper from the European Central Bank puts that premise under pressure.
The ECB’s analysis of governance structures across major DeFi protocols, including Aave, MakerDAO, and Uniswap, found that the top 100 addresses control more than 80% of voting power. That figure alone warrants attention. But the composition of those top holders makes it more complicated.
A significant share of the dominant voting addresses are not independent retail participants. They are protocol treasuries, centralized exchanges, and institutional actors who have aggregated tokens over time. Roughly one-third of influential voters remain unidentified, which sits awkwardly against the transparency argument that has always underpinned blockchain’s appeal.
Token Voting Has a Structural Problem
The core issue is not fraud or malice. It is structural. Token-based governance was designed to give stakeholders a voice proportional to their commitment to a protocol. In practice, it gives a voice proportional to capital. Early participants, venture-backed foundations, and large liquidity providers accumulate tokens, and those tokens translate directly into governance influence.
This creates a self-reinforcing dynamic. Those with the most votes shape fee structures, treasury allocations, and protocol upgrades in ways that tend to benefit large holders. Smaller participants either follow along, abstain, or delegate to the same concentrated entities.
The ECB report describes this as mirroring traditional shareholder capitalism more than any alternative model. That framing will frustrate DeFi advocates, but it is difficult to dispute mathematically.
Why Regulators Are Paying Attention
European policymakers have been cautious about DeFi from the start, partly because the regulatory arbitrage argument, that DeFi falls outside existing financial rules because no identifiable entity controls it, has always been legally fragile.
If a small group of token holders can alter protocol terms, direct treasury funds, or pause contracts, then the question of who bears regulatory responsibility becomes much clearer. The ECB’s findings give regulators an empirical basis for treating major DeFi protocols less like open infrastructure and more like financial firms with identifiable decision-makers.
This aligns with the broader direction of travel in both the EU and U.S. The Markets in Crypto-Assets regulation already treats certain protocol activities as requiring registration depending on governance structure. A paper confirming that governance is concentrated gives enforcement-focused agencies more to work with.
The Counterarguments
It would be unfair to present this as a settled debate. DeFi advocates have legitimate responses.
First, on-chain governance is often one layer of a larger system. Many protocols have multisigs, circuit breakers, and time-locked upgrades that distribute risk even if token voting is concentrated. The formal vote count does not capture the full picture.
Second, concentration today does not mean concentration forever. Token distributions tend to spread over time as protocols mature, communities grow, and initial allocations vest and circulate. Snapshot data from the current crop of protocols reflects an early-stage industry.
Third, the alternative to token governance is often less transparent, not more. A foundation making decisions behind closed doors carries its own risks. At least on-chain votes create an auditable record.
What It Means for the Sector
The ECB report is unlikely to trigger immediate regulatory action on its own. But it contributes to a growing body of evidence that the decentralization claim, applied to governance, needs more precision.
Protocols that want to operate in regulated markets will face increasing pressure to either demonstrate genuine distribution of control or acknowledge that they function more like managed financial products. Both paths are workable, but they require different compliance frameworks.
For retail participants evaluating DeFi protocols, the takeaway is practical: check the governance token distribution before assuming your vote matters. In most major protocols right now, the math suggests it probably does not.
Total value locked across DeFi sits around $84 billion as of late March 2026. That is real capital operating under governance structures that, according to the ECB, look a lot more like traditional finance than the sector’s branding implies.