DAOs collectively govern more than $26 billion in on-chain treasuries as of Q1 2026, according to DeepDAO. Yet the mechanisms designed to protect those assets — token-weighted voting, quorum thresholds, and timelocked execution — have repeatedly failed to prevent extraction, capture, and organiza...
"It is fair to say that Humpy and the Golden Boys are operating in bad faith. Their attempt to push through a proposal to take a large chunk of the Compound treasury without adequate protections appears to be a malicious attempt to steal funds from the protocol." — Michael Lewellen, OpenZeppelin
DAOs collectively govern more than $26 billion in on-chain treasuries as of Q1 2026, according to DeepDAO. Yet the mechanisms designed to protect those assets — token-weighted voting, quorum thresholds, and timelocked execution — have repeatedly failed to prevent extraction, capture, and organizational collapse.
In the first half of 2026 alone, Aave lost two core contributor groups over a revenue-control dispute, Gnosis DAO survived a $223 million treasury redemption bid, Compound formalized professional treasury management after a $24 million governance attack, and Across Protocol faces allegations of $23 million in insider-directed fund transfers. Meanwhile, Decentraland lowered its governance threshold in an attempt to combat voter apathy — a symptom that afflicts virtually every DAO in the ecosystem, where average voter turnout sits at approximately 17%.
This report examines five DAO governance crises from the past twelve months, identifies the structural vulnerabilities they expose, and evaluates the emerging countermeasures — including dual governance, quadratic voting, and professional treasury management — that protocols are deploying in response.
DeepDAO tracks more than 13,000 DAOs. Only 220 of those hold treasuries exceeding $1 million. The top five — Uniswap ($4.8B), Sky/MakerDAO ($3.9B), Optimism ($2.1B), Arbitrum ($1.7B), and Lido ($1.4B) — account for roughly 54% of all DAO-controlled capital.
The governance infrastructure protecting these assets was designed for a different era: smaller treasuries, more engaged communities, and fewer sophisticated adversaries. Three structural realities now define the DAO governance landscape:
Aave, which governs approximately $26 billion in protocol assets, experienced its most severe governance crisis in Q1 2026 after a dispute over revenue control.
The trigger: In December 2025, Aave Labs added CoWSwap to the Aave interface and routed swap fees away from the DAO treasury. Community members argued this reduced revenue accruing to token holders.
The escalation: The conflict widened into a dispute over the "Aave Will Win" proposal, which sought to allocate $42.5 million in stablecoins and 75,000 AAVE tokens to Aave Labs. The Aave Chan Initiative (ACI), led by Marc Zeller, opposed the proposal on grounds of self-voting and insufficient transparency.
The fallout: ACI announced its shutdown in March 2026. BGD Labs, another core contributor group, ceased all contributions effective April 1, 2026, citing similar centralization concerns. Two of Aave's three most active governance participants exited within 11 days of each other, according to CoinDesk.
The resolution: Aave DAO approved a $25 million funding package with 75% support. The "Aave Will Win" framework now directs 100% of revenue from Aave-branded products into the DAO treasury, including an estimated $10-20 million annually from swap activity.
What it reveals: Even successful governance resolution can impose severe costs. Aave retained revenue control but lost institutional knowledge and governance capacity that took years to build.
In May 2026, the group known as "RFV Raiders" — previously involved in treasury redemption campaigns at Aragon, Rook, and FEI/Tribe — targeted Gnosis DAO.
The proposal: GIP-150 offered GNO holders a mechanism to redeem tokens for a pro-rata share of approximately $223 million in treasury reserves, priced at roughly $170 per GNO — a 30% premium over the then-market price of $131.
The vote: 601,848 GNO participated (well above the 75,000 quorum), cast by 95 unique voters between May 25 and June 1, 2026. The proposal was rejected with 71.87% opposed (432,545 GNO), 27.86% in favor (167,692 GNO), and 0.27% abstaining.
The dynamics: Gnosis co-founder Stefan George voted against. A whale wallet holding 67,000 GNO voted in favor, temporarily shifting sentiment. The vote ultimately held because the DAO's founding team retained sufficient voting weight.
Historical context: The RFV Raiders' playbook is well-documented. At Aragon in 2023, a similar campaign forced the dissolution of the Aragon Association and the redistribution of 86,343 ETH. At Nouns, the raiders extracted $27 million. The Gnosis defense succeeded where Aragon's did not, but the pattern — identifying DAOs trading below net asset value and forcing liquidation votes — remains a persistent threat to any protocol with a large treasury and a discounted governance token.
Compound's governance attack by the "Golden Boys" group demonstrated how token-weighted quorum systems can be weaponized.
The mechanism: Five wallets delegated more than 228,000 COMP (approximately $12 million at the time) to a governance delegate associated with Humpy, a known whale. Combined with existing holdings, the delegate controlled over 81% of the 400,000 COMP required for quorum.
The proposal: Proposal 289 approved transferring $24 million in COMP tokens to goldCOMP, a yield-bearing vault controlled by the Golden Boys — not the DAO.
Prior attempts: Proposal 247 (initial attempt) was cancelled after community flagging. Proposal 279 failed with 88% voting against. Proposal 289 succeeded by assembling sufficient delegated tokens to overwhelm opposition.
The settlement: The Golden Boys agreed to restructure the instrument under DAO control, implementing a Trust Setup function. Compound subsequently established a Treasury Management Committee (TMC) and issued an RFP seeking professional managers for a $20-25 million allocation of reserves, with a June 24, 2026 deadline.
What it reveals: A DAO with approximately $120 million in total assets (of which $80-90 million are stablecoins) was forced to professionalize treasury management after a governance attack demonstrated that internal controls were insufficient.
In late June 2026, Across Protocol faced allegations of insider-directed governance manipulation.
The allegations: Glue founder Ogle publicly accused Across's team, including project lead Kevin Chan and CEO Hart Lambur, of using undisclosed wallets to simulate community support for governance proposals that transferred approximately $23 million in ACX tokens from the DAO treasury to Risk Labs, the team's private company.
The defense: Hart Lambur denied the claims, stating team members purchased tokens independently and voted publicly. The dispute remains unresolved as of mid-June 2026.
What it reveals: Unlike the Compound attack — which was at least transparent in its mechanism — the Across allegations concern concealed insider voting. If substantiated, this represents a governance failure that no on-chain mechanism can easily detect, because the attack vector is identity obfuscation rather than vote weight accumulation.
Decentraland's governance crisis is quieter but no less structural. On June 1, 2026, the DAO opened a vote to lower the Voting Power (VP) threshold for passing governance proposals from 6 million to 5 million — a 20% reduction.
The rationale: DAO participation has declined due to depressed token prices, a restructured DAO framework, and declining metaverse engagement. Proposals were failing not because of opposition but because they could not reach quorum.
The risk: Lowering thresholds increases proposal throughput but also increases vulnerability to whale capture. If fewer tokens are needed to pass proposals, fewer tokens are needed to attack.
Decentraland's dilemma illustrates the tension at the core of DAO governance design: systems that require high participation to function legitimately cannot survive in an environment where participation is structurally low.
The five cases above expose four recurring failure modes:
| Failure Mode | Affected DAOs | Mechanism | |---|---|---| | Revenue capture | Aave | Operating entity redirects protocol revenue away from DAO treasury | | Treasury redemption | Gnosis, Aragon, Nouns | Activists force liquidation vote when token trades below NAV | | Quorum manipulation | Compound | Whale accumulates or borrows sufficient tokens to force proposal through | | Insider vote concealment | Across (alleged) | Team uses undisclosed wallets to simulate community support |
A fifth vulnerability — participation decay (Decentraland) — is not an attack vector per se, but it amplifies all four attack types by reducing the number of tokens required for governance capture.
Dual Governance (Lido). Lido's dual governance model, approved in 2026, inserts a timelock between DAO decisions and execution, linked to an escrow where stETH holders can signal exit intent. The dynamic timelock extends from 5 days (at 1% stETH committed) to 45 days (at 10%). This gives stakers — who bear protocol risk but do not hold governance tokens — veto power over LDO holder decisions. Limitation: adds latency to all governance actions, including emergency responses.
Professional Treasury Management (Compound). Compound's post-attack TMC and RFP process introduces professional fiduciary oversight. Limitation: partially re-centralizes treasury control, which conflicts with the decentralization thesis.
Quadratic Voting. Adopted by more than 100 DAOs, including Gitcoin and Optimism-adjacent projects. Reduces whale influence by making marginal votes more expensive. Limitation: requires Sybil resistance, which remains unsolved at scale.
Token Buybacks (Lido, Uniswap). Lido proposed a $20 million LDO buyback after the token fell 95% from highs. Uniswap burned 100 million UNI ($596 million in value) through its fee switch activation. These reduce the NAV premium that attracts RFV raiders. Limitation: depletes treasury reserves and may not sustain price support.
Revenue Sharing Agreements (Aave). The "Aave Will Win" framework mandates 100% of Aave-branded product revenue flows to the DAO. Limitation: enforceability depends on the operating entity's continued compliance.
DAO governance in 2026 operates under a structural paradox: the mechanisms designed to enable decentralized coordination — open token voting, low barriers to proposal submission, and transparent treasuries — are the same mechanisms that enable extraction, capture, and organizational attrition.
The $26 billion in DAO-governed assets sits behind governance systems where 10% voter turnout is considered healthy and 1% of holders control the outcome. The question is not whether more governance crises will occur, but whether the emerging countermeasures — dual governance, professional management, quadratic voting — can mature faster than the adversaries who exploit the current system's weaknesses.
The data suggests the answer is: not yet.