The European Central Bank published Working Paper No. 3208 on March 26, 2026, titled "Who to Regulate? Identifying Actors Within DeFi's Governance." The paper analyzed on-chain governance data for Aave, MakerDAO, Uniswap, and Ampleforth from November 2022 to May 2023. Its central finding: the top...
"The findings challenge the perception that DAOs are inherently decentralised. While these tokens are technically distributed across a large number of unique blockchain addresses, a small number of entities holds a majority of the supply." — Alexandra Born, Zakaria Gati, Claudia Lambert, Mahvish Naeem & Antonella Pellicani, ECB Working Paper No. 3208
The European Central Bank published Working Paper No. 3208 on March 26, 2026, titled "Who to Regulate? Identifying Actors Within DeFi's Governance." The paper analyzed on-chain governance data for Aave, MakerDAO, Uniswap, and Ampleforth from November 2022 to May 2023. Its central finding: the top 100 wallet addresses control more than 80% of governance token supply across all four protocols studied. Roughly 50% of total voting power traces back to the protocols themselves — founders, core developers, and DAO treasuries. One-third of the most influential governance voters could not be publicly identified.
The paper arrives 56 days before the July 1, 2026 MiCA transitional deadline, after which any crypto-asset service provider operating in the EU without authorization must cease operations. MiCA's Recital 22 exempts services "provided in a fully decentralised manner without any intermediary," but the ECB data suggests that few, if any, major DeFi protocols meet that threshold. Simultaneously, traditional finance firms — Apollo Global Management, BlackRock, and others — are accumulating DeFi governance tokens at scale, compressing decision-making power further. The report amounts to a regulatory blueprint: if DeFi protocols cannot prove decentralization, they are subject to the same licensing, capital reserve, and compliance requirements as any centralized exchange.
ECB economists Alexandra Born, Zakaria Gati, Claudia Lambert, Mahvish Naeem, and Antonella Pellicani constructed an on-chain dataset spanning November 2022 to May 2023 across four DeFi protocols: Aave, MakerDAO (now Sky), Uniswap, and Ampleforth. The paper mapped token holder addresses, tracked delegation patterns, and cross-referenced wallet identities with known entities including centralized exchanges, venture capital firms, university blockchain societies, and protocol-affiliated treasuries.
The headline number: the top 100 addresses in each protocol hold more than 80% of all governance tokens. Governance tokens are technically distributed across tens of thousands of unique addresses, but this distribution masks extreme concentration at the top. Centralized exchanges — notably Binance — hold between 3% and 22% of governance tokens across the four protocols, aggregating voting power without necessarily reflecting the preferences of individual depositors whose tokens sit in exchange custody.
Approximately half of total voting power traced back to the protocols themselves: DAO treasuries, founding teams, and development entities. The paper describes a governance structure that, according to the ECB authors, "mirrors traditional shareholder capitalism more than decentralized democracy."
The concentration pattern varies by protocol, but the direction is consistent.
Ampleforth exhibited the most extreme concentration. The top 20 voters controlled 96% of all delegated voting power. This level of concentration means that a quorum of fewer than two dozen entities can determine virtually any protocol outcome.
MakerDAO showed the top 10 voters holding 66% of delegated voting power. Given MakerDAO's role as the issuer of DAI (now USDS under Sky) — a stablecoin with roughly $5 billion in circulation — governance concentration carries direct monetary policy implications for billions in assets.
Uniswap registered its top 18 voters controlling 52% of delegated voting power. Uniswap processes hundreds of millions of dollars in daily trading volume; governance determines fee structures, treasury allocations, and chain deployment decisions.
Aave, the largest DeFi lending protocol by cumulative volume (crossing $1 trillion in early 2026), also showed top-100 wallet concentration above 80%, though the ECB paper provided less granular voting delegation data for Aave than for the other three protocols.
A structural pattern emerged across all four: the top voters were predominantly delegates — entities wielding voting power delegated from smaller token holders — rather than direct token holders voting independently. This delegation structure amplifies concentration because a single delegate can accumulate voting authority from hundreds or thousands of smaller addresses.
One-third of key governance participants in the studied protocols could not be definitively identified. The ECB paper flagged this as a fundamental barrier to regulatory enforcement. If regulators cannot determine who controls governance, they cannot determine who is responsible for compliance.
The paper noted that pseudonymity compounds the concentration issue. When a hypothetical DAO has 50,000 token holders but three unidentified wallets controlling 60% of votes, no functional accountability mechanism exists. The ECB authors stated: "This lack of transparency complicates efforts to assess accountability and reinforces concerns about the concentration of power."
Protocol pause controls, upgrade keys, and multi-signature treasury management were identified as additional centralization vectors. When a small, identifiable group of individuals can pause a protocol or execute an upgrade, the protocol exhibits operational centralization regardless of how widely its governance tokens are distributed.
MiCA Recital 22 provides that crypto-asset services delivered "in a fully decentralised manner without any intermediary" fall outside the regulation's scope. The European Securities and Markets Authority (ESMA) published a "spectrum of decentralization" assessment framework but set no hard quantitative thresholds for what constitutes "fully decentralized."
The ECB paper functions as an empirical stress test of that exemption. Its data implies that none of the four studied protocols would pass a strict decentralization test. If top-100 addresses control 80%+ of governance tokens, and half of voting power traces to protocol-affiliated entities, the "no intermediary" condition appears unmet.
The practical stakes are significant. July 1, 2026 marks the end of all MiCA transitional arrangements. After that date, any entity classified as a Crypto-Asset Service Provider (CASP) operating in the EU requires full MiCA authorization. Only 13 of 27 EU member states have completed full MiCA transposition. Applications submitted in March 2026 face 6–12 month processing timelines, according to regulatory advisors, meaning firms without applications already filed are unlikely to receive authorization before the deadline.
Enforcement has been active: EU regulators have issued more than €540 million in fines and executed 50+ license revocations through early 2025, according to compliance data tracked by Unit21. The July deadline will likely trigger a second wave of enforcement actions, particularly targeting protocols that claim decentralization exemptions without supporting evidence.
The ECB paper's policy recommendations include improving on-chain transparency for token holdings, clarifying legal structures for DAOs, and adopting hybrid regulatory models. The underlying message: if a DAO is not truly decentralized, it needs a license.
While the ECB quantifies existing concentration, a parallel trend is compressing DeFi governance power further. Traditional finance institutions began systematically acquiring governance tokens in 2025–2026.
Apollo Global Management agreed to acquire up to 90 million MORPHO tokens — 9% of total supply — over a 48-month period with transfer restrictions. Apollo manages approximately $940 billion in assets. Morpho, the second-largest DeFi lending protocol by TVL at roughly $7.7 billion, now counts Apollo as a significant governance stakeholder.
BlackRock acquired an estimated $100–$200 million in UNI tokens, representing 1–2% of circulating supply, integrated with its $2.2 billion BUIDL tokenized fund. BlackRock manages $11.6 trillion in total assets.
Morpho's institutional integration extends to Coinbase, Bitwise Asset Management, Société Générale, Crypto.com, and Swiss custody provider Taurus. According to FinanceFeeds analysis, a consortium of 3–5 traditional finance firms collectively holding 15–20% of a major lending protocol's governance token supply could "carry or block most proposals" given that typical retail DAO participation rates fall below 10%.
This pattern mirrors, according to FinanceFeeds, the playbook that large sell-side banks executed on electronic equity exchanges between 2005 and 2008 — acquiring strategic stakes in exchange governance to influence market structure. DeFi lending TVL crossed $55 billion in early 2026; the economic incentive for governance control is substantial.
The Uniswap Foundation disputed the ECB's findings in a statement to Cointelegraph, citing three objections. First, the data covers November 2022 to May 2023 and does not reflect current governance dynamics. Second, one of the "largest holders" identified is the Uniswap DAO Treasury — the governance contract itself — not a traditional token holder exercising discretionary voting. Third, exchange cold storage wallets (Binance, OKX) hold UNI for custody and liquidity purposes but do not participate in governance or delegations. Removing these wallets, the Foundation stated, drops concentration to "no more than 43%."
The rebuttal raises a methodological point: not all token holdings translate to active governance power. Exchange cold storage and DAO treasury locks represent dormant supply that inflates concentration metrics without corresponding to exercised voting. However, the ECB's counter-argument is implicit: dormant tokens can be activated at any time. Exchange-held tokens could be voted if exchanges chose to exercise governance. Treasury tokens can be deployed by protocol insiders. Potential concentration matters for regulatory assessment, not just realized concentration.
The governance concentration problem has generated technical responses. Decision markets — requiring participants to stake capital on governance convictions rather than simply vote with tokens — are in active development. A UC Berkeley study from March 2026 found that decision market mechanisms could improve governance participation rates by up to 20%.
The DAO Research Collective launched a decision market pilot on April 1, 2026, with results expected in Q3 2026. Aragon announced a decision market toolkit with a beta release targeted for end of 2026. Snapshot, the most widely used off-chain governance platform, announced integration plans on April 2, 2026.
These alternatives remain pre-production. Current DeFi governance participation rates sit below 10%, a level that the Currency Analytics described as "basically collapsed under the weight of whale dominance and voter apathy." Whether decision markets can materially alter the concentration dynamic before MiCA enforcement accelerates remains an open question.
The ECB's Working Paper No. 3208 provides the most comprehensive empirical mapping of DeFi governance concentration to date. The data describes a sector where power distribution resembles early-stage corporate equity structures more than the permissionless, distributed systems described in protocol documentation. The paper's timing — published weeks before the MiCA transitional deadline — signals that European regulators are building an evidentiary case against broad application of the decentralization exemption.
The simultaneous accumulation of governance tokens by Apollo, BlackRock, and other traditional finance firms adds a second compression vector. Protocols designed to distribute governance are experiencing reconcentration through institutional acquisition, reproducing the same intermediary structures that DeFi was ostensibly built to eliminate.
Whether protocols respond with structural governance reforms, seek MiCA authorization, or restrict EU access remains to be determined. The data, however, is clear: decentralization in DeFi governance is, at present, more architectural aspiration than empirical reality.