A European Central Bank working paper reveals the top 100 token holders control over 80% of governance power in major DeFi protocols, challenging claims of decentralisation ahead of MiCA's July deadline.
The European Central Bank has published a working paper that poses a direct challenge to the decentralisation claims of major decentralised finance protocols, finding that governance power in the sector is concentrated among a small number of holders to a degree that may bring these platforms within the scope of European regulation. Working Paper No. 3208, titled 'Who to regulate? Identifying actors within DeFi's governance,' examined on-chain governance data from Aave, MakerDAO, Ampleforth and Uniswap and concluded that the top 100 governance-token holders controlled more than 80 per cent of supply in each case.
The findings carry significant regulatory implications. The EU's Markets in Crypto-Assets regulation, known as MiCA, which entered full force in December 2024, explicitly exempts fully decentralised services from its licensing and compliance requirements. The ECB paper argues that most major DeFi protocols fail to meet any meaningful standard of decentralisation, potentially exposing them to the same regulatory obligations as centralised crypto-asset service providers when MiCA's final authorisation deadline arrives on 1 July 2026.
The paper, while not binding policy, feeds directly into the European Commission's DeFi assessment report expected by mid-2026, a document that will shape how EU regulators interpret and enforce the decentralisation exemption in practice.
How Concentrated Is DeFi Governance in Practice?
The ECB researchers analysed two snapshots of governance data, from November 2022 and May 2023, across the four protocols. The concentration figures are striking even by the standards of traditional corporate governance. For Aave and Uniswap, the top five holders alone captured nearly half of all governance tokens. Across all four protocols, roughly half or more of total holdings traced back to either the protocol itself, through treasuries, founder allocations and developer grants, or to centralised and decentralised crypto exchanges.
The concentration becomes more pronounced when measured by actual voting power rather than token holdings. The top 20 voters in Ampleforth controlled 96 per cent of delegated voting power. In MakerDAO, the top 10 voters held 66 per cent of delegated votes. In Uniswap, the top 18 voters controlled 52 per cent. The paper identifies venture capital firm Andreessen Horowitz, known as a16z, as Uniswap's single most influential voter, a finding that underscores how institutional capital shapes ostensibly decentralised governance.
Binance held the largest share of governance tokens among centralised exchanges across all four protocols, ranging from 2 per cent to 15 per cent depending on the platform. The paper notes that exchange-held tokens represent a particular governance anomaly, as it remains unclear whether exchanges vote on behalf of their users, in their own commercial interest or not at all.
The Anonymity Problem That Complicates Regulation
Perhaps the most challenging finding for regulators is that approximately one-third of influential governance participants across the four protocols could not be identified. Blockchain transparency allows observers to track transactions and token balances, but wallet addresses do not inherently reveal the identity of their controllers. The ECB researchers found that this opacity creates a fundamental obstacle for any regulatory framework that relies on identifying responsible parties.
The anonymity issue compounds the concentration problem. Without knowing who controls governance tokens, regulators cannot determine whether a voting bloc represents a single actor, a coordinated group or an exchange acting as custodian for thousands of users. The paper cites instances where seemingly independent wallets exhibited voting patterns consistent with coordinated behaviour, though the researchers stopped short of making definitive attribution claims.
This stands in contrast to traditional financial governance, where beneficial ownership disclosure requirements, mandatory shareholder registers and regulatory reporting create a clear map of who controls corporate decision-making. The ECB paper argues that DeFi's governance opacity represents not a feature of decentralisation but a gap in accountability that regulators will need to address.
What It Means for MiCA Enforcement and the July Deadline
MiCA's decentralisation exemption was designed to avoid imposing traditional financial regulation on genuinely peer-to-peer systems. But the ECB's findings suggest that the protocols most commonly cited as examples of decentralised governance, including Aave and Uniswap, which together account for more than $15 billion in total value locked according to DefiLlama data, may not qualify for that exemption.
The European Securities and Markets Authority, or ESMA, is responsible for developing the technical standards that will define the boundaries of the exemption. The ECB paper's data provides ammunition for a narrow interpretation that would require protocols to demonstrate genuine distribution of governance power, not merely the existence of a DAO structure, to qualify as fully decentralised.
The timing is pointed. MiCA's final authorisation deadline for crypto-asset service providers falls on 1 July 2026, approximately three months away. Protocols that have operated on the assumption that decentralised governance structures shield them from European regulation may need to reassess their compliance strategies. CoinTelegraph reported that legal advisers to several major DeFi protocols have begun reviewing their governance structures in light of the ECB findings.
A Global Regulatory Pattern Emerges Around DeFi Governance
The ECB paper does not exist in isolation. It reflects a broader pattern among global regulators who are increasingly sceptical of decentralisation claims in crypto markets. The Bank of Canada published a study in April 2026 finding that DeFi lending on Aave was 'viable but fragile,' while the US SEC's enforcement actions against various DeFi protocols have consistently argued that the presence of identifiable development teams and governance structures undermines claims of full decentralisation.
The paper's authors acknowledge that their data covers a specific time period and four specific protocols, and that governance structures vary significantly across the DeFi ecosystem. However, they argue that the concentration patterns they identified are likely to be structural rather than transient, noting that governance concentration 'remains stable over time' in their sample.
For the DeFi industry, the challenge is practical as well as regulatory. Protocols that wish to claim decentralisation under MiCA or other frameworks may need to demonstrate not just formal governance mechanisms but actual distribution of voting power across a diverse set of independent actors. Achieving that standard while maintaining effective protocol governance, the ability to upgrade smart contracts, respond to exploits and manage treasury assets, represents one of the defining design challenges for the next generation of decentralised finance. The ECB paper, whatever its limitations, has laid down a quantitative marker against which those claims will now be measured.
