ECB Paper: DeFi Governance Is Highly Concentrated, Posing Regulatory Risks

The European Central Bank has published a working paper finding that governance power across major decentralized finance protocols is heavily concentrated among a small number of token holders, warning that the results could complicate efforts to identify "regulatory anchor points" for DeFi oversight under MiCA.

ECB Working Paper No. 3208, titled "Who to regulate? Identifying actors within DeFi's governance," analyzed governance token distribution and voting behavior across four protocols: Aave, MakerDAO, Ampleforth, and Uniswap. The findings paint a stark picture of centralization beneath the surface of ostensibly decentralized systems.

A Small Minority Controls DeFi Governance Across Four Major Protocols

Across all four protocols studied, the top 100 holders control over 80% of governance token supply. In Aave and Uniswap, the top five holders alone control nearly 50% of supply. In Ampleforth, that figure rises to approximately 60%.

Voting power is even more concentrated than raw token ownership. Ampleforth's top 20 voters control 96% of delegated voting power. MakerDAO's top 10 voters hold 66% of delegated votes, and Uniswap's top 18 voters hold 52%.

The gap between formal decentralization claims and on-chain governance reality is further complicated by anonymity. Around one-third of top voters cannot be publicly identified, the paper found. Among identifiable entities, Binance is the largest centralized exchange holder across all four protocols, a finding that may raise questions about exchange influence over DeFi governance.

The venture capital firm a16z is identified as Uniswap's leading voter, with its delegate count rising from 100 to 125. That a single U.S.-based investment firm holds the largest governance position in one of DeFi's most prominent protocols undercuts the narrative that these systems operate without centralized points of control.

Kavi Jain, Senior Research Associate at Bitwise, noted that many large DeFi protocols are not as decentralized in practice as they might appear, especially in the earlier stages, where a small group still has meaningful influence over decisions.

ECB Warns Findings Could Shift Regulatory Anchor Points Under MiCA

The regulatory stakes are significant. MiCA, the EU's Markets in Crypto-Assets Regulation that became fully operational across all 27 member states in 2025, currently exempts "fully decentralised" financial services from its scope. The ECB paper directly challenges whether major DeFi protocols meet that threshold.

If regulators determine that governance concentration disqualifies protocols from the decentralization exemption, those projects could face licensing, capital, and compliance obligations currently applied only to centralized crypto-asset service providers. The paper frames this as a "form over substance" problem: token distribution alone does not equal decentralized control when actual voting power is held by a handful of entities.

The phrase "regulatory anchor points" refers to the identifiable actors, whether individuals, firms, or DAOs, that regulators can hold accountable. When one-third of top voters are anonymous and the rest are dominated by venture capital firms and centralized exchanges, the ECB argues that the premise underpinning lighter-touch DeFi regulation begins to erode.

The scale of the ecosystem under review is substantial. Ethereum DeFi total value locked currently stands at approximately $106.1 billion, representing the financial weight of governance structures the ECB paper scrutinizes.

The paper recommends enhancing governance token transparency, clarifying governance responsibilities across stakeholders, and exploring dedicated legal frameworks for DAOs. The European Banking Authority is separately monitoring DeFi access to e-money tokens and asset-referenced tokens under MiCA, suggesting coordinated regulatory scrutiny is building across EU institutions.

For protocol teams at Aave, Uniswap, and MakerDAO, the findings carry immediate practical weight. Any future MiCA enforcement action could point to this paper's data as evidence that the "fully decentralised" exemption does not apply. Governance participants, from a16z to exchanges operating across jurisdictions, may also find themselves newly visible as potential regulatory targets.

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.