On-Chain Governance

On-chain governance is a system where a DeFi protocol’s decisions — fee changes, parameter updates, smart contract upgrades, treasury deployments — are made through a trustless process encoded entirely in smart contracts: token holders submit proposals, vote with their governance tokens (or delegated tokens), and if the vote passes quorum and a majority threshold, the proposal automatically executes on-chain after a mandatory timelock delay, with no human intermediary able to block or modify the outcome. The “on-chain” distinction is critical: unlike off-chain governance (where a team implements the community’s will based on a Snapshot poll), on-chain governance is enforced by code. A passed proposal will execute automatically; the team cannot override it. This makes on-chain governance simultaneously more trustless and more dangerous — a malicious or poorly-written proposal that passes a vote is an irreversible on-chain action.

The Governance Stack

Most on-chain governance systems share a similar architecture:

“`

Governance Token (e.g., COMP, UNI, AAVE)

└── Required to submit / vote on proposals

Governor Contract (e.g., Governor Bravo, OpenZeppelin Governor)

├── Proposal submission (requires minimum token threshold)

├── Voting period (e.g., 3–7 days)

├── Quorum check (minimum % of token supply must vote)

└── Majority check (>50% of votes in favor)

Timelock Contract

└── Mandatory delay between vote passing and execution (24h–7 days)

Protocol Contracts

└── Receive and execute the action (e.g., setFee(0.003))

“`

Proposal Lifecycle

Step 1: Proposal Threshold

Compound: 25,000 COMP (~$2M at mid-market prices)
Uniswap: 2.5M UNI (~$10M+)
Aave: 80,000 AAVE ($9M+)

This threshold is designed to ensure proposers have meaningful stake — but also means that in practice, only whales, foundations, and VC firms can submit proposals without accumulating delegation.

Step 2: Voting Delay

Step 3: Voting Period

Step 4: Quorum Check

Example (Uniswap): Quorum = 40M UNI must vote FOR. If only 39M vote FOR (even with 95% approval), proposal fails.

Step 5: Timelock Queue

Step 6: Execution

Delegation

Most on-chain governance systems use delegation — the ability for token holders to assign their voting power to another address without transferring tokens:

Holder A has 10,000 COMP but doesn’t follow governance → delegates to Expert B
Expert B now votes with 10,000 additional COMP in their name
Expert B never holds Holder A’s tokens; only their voting power

Why delegation matters:

Most token holders are passive — they don’t vote. Without delegation, quorum is nearly impossible to reach.
Professional delegates (VCs, protocol teams, community delegates) accumulate large delegations and become the de facto governance participants.
Some protocols incentivize delegation (Gitcoin Stewards, Optimism delegates) with social recognition or direct rewards.

Governor Bravo: The Standard

Compound Finance’s Governor Bravo (and its predecessor Governor Alpha) became the canonical on-chain governance implementation, with forks used across dozens of protocols:

Uniswap: Uses Governor Bravo fork
Compound: Original implementation
Aave: Uses custom Aave Governance V2 with executor tiers

OpenZeppelin Governor is the modern audited reference implementation, used as the base for newer protocols. Features modular extensions (token module, quorum module, timelock module) that can be configured per protocol.

Key Governance Parameters

Parameter	Typical Range	Determines
Proposal threshold	0.01%–1% of supply	Who can submit proposals
Voting delay	0–2 days	Time between proposal creation and voting start
Voting period	3–7 days	How long voting is open
Quorum	1–10% of circulating supply	Minimum participation required
Execution delay (timelock)	24h–14 days	Time between passing and execution
Grace period	2–30 days	Window during which passed proposal can execute before expiring

These parameters are themselves governance-controlled (changing them requires a governance vote, which goes through the timelock).

Weaknesses and Attack Vectors

Low Voter Turnout

Whale Dominance

Governance Attacks

Flash loan attacks: Borrow tokens, vote, return tokens in one block. Mitigated by vote checkpointing (snapshot at proposal creation block).
Governance acquisition: Slowly accumulate governance tokens on the open market, then pass a treasury-draining proposal. Example: Build Finance’s BILD governance attack (2022) — attacker voted to pass a proposal granting themselves the entire treasury.
Voter apathy attacks: Attacker acquires 5% of supply; only 4% of supply votes normally; attacker now represents a majority of active voters.

Plutocracy Criticism

On-Chain vs. Off-Chain Governance

	On-Chain	Off-Chain (Snapshot)
Binding	Yes — code executes automatically	No — team implements manually
Cost	Gas per vote	Free (off-chain signatures)
Speed	Days (voting + timelock)	Days (voting only)
Attack surface	Governance attack is an exploit	Governance attack requires team complicity
Examples	Compound, Uniswap, Aave	Gitcoin, many smaller DAOs

Many protocols use a hybrid model: off-chain Snapshot polls for signal and rough consensus; on-chain execution for actual parameter changes.

History

2018 — MakerDAO introduces early on-chain governance (Executive Votes) for Dai parameters; voters stake MKR to pass changes
2020 (Feb) — Compound launches Governor Alpha with COMP delegation and automated execution; sets the standard for DeFi governance
2020 (Sep) — “DeFi Summer” — governance token launches proliferate; Uniswap, Aave, Yearn, Sushiswap all adopt on-chain governance
2021 — Governance attacks emerge: Beanstalk $182M governance attack (Apr 2022) demonstrates catastrophic risk of no governance attack protection
2022 (Apr) — Beanstalk Protocol: attacker uses flash loan to acquire 79% of governance tokens in a single block, passes a proposal draining $182M. Case study for governance security.
2022–2024 — “Governance fatigue” is widely documented; participation declines; professional delegate ecosystems emerge (Optimism, Uniswap, Arbitrum)
2025 — On-chain governance standard for major protocols; off-chain Snapshot used for social consensus; many protocols exploring reputation-weighted or conviction voting alternatives