
Most mature crypto protocols have both a DAO treasury and a foundation. They're often announced together, described interchangeably in press releases, and treated as equivalent — but they aren't. They solve different problems, operate through different mechanisms, and fail in different ways.
The confusion is understandable. Both hold resources. Both exist to serve the protocol's long-term health. But the structural differences between them — who can authorize actions, how decisions get executed, and what external accountability looks like — have direct consequences for how governance works and where the real control lives.
A DAO treasury is capital held in a smart contract, governed by token holder votes.
The most common implementation uses a governor contract (Compound's Governor Bravo, OpenZeppelin's Governor, or equivalent) paired with a Gnosis Safe multisig. Proposals are submitted on-chain: any token holder meeting a proposal threshold can put a governance vote to the community. Token holders vote during a set window. If the vote passes — meaning it hits quorum and the required approval threshold — the transaction executes automatically on-chain. No human intermediary signs off.
Uniswap's DAO treasury held approximately $4.5 billion in UNI tokens as of early 2026. Compound's treasury governs a portion of its COMP reserves. MakerDAO (now Sky) maintains on-chain reserves denominated in DAI and other assets. These treasuries can fund grants, adjust protocol parameters, seed new liquidity, or distribute tokens — all via governance votes that anyone holding sufficient tokens can initiate.
The mechanism's properties follow directly from being on-chain: decisions are transparent and auditable, execution is automatic (no trusted administrator), and control is proportional to token holdings. The downside is equally structural: this mechanism cannot sign legal contracts, cannot employ people directly, cannot respond to regulatory inquiries, and cannot act quickly when governance quorum takes days to accumulate.
A foundation is an off-chain legal entity — typically a Swiss nonprofit Stiftung, a Cayman Islands foundation company, or increasingly a Wyoming DAO LLC — with a board of directors and the ability to act as a legal person.
The Ethereum Foundation, Uniswap Foundation, Aave Companies, and Arbitrum Foundation are all examples. A foundation can employ full-time staff, receive and disburse fiat grants, hold IP and trademarks, execute service contracts, engage with regulators, and respond to legal process. It can move faster than a DAO vote because decisions sit with a board of 3-7 people rather than a dispersed token holder population.
Foundations typically receive an initial endowment — either tokens from the protocol treasury or funding from the initial investors — and operate on a budget approved periodically by their own board or, in some structures, by the DAO.
The DAO treasury's binding constraint is governance: decisions require quorum and token holder participation, which means they are slow and subject to voter apathy. Large token holders can dominate votes (plutocracy risk). Governance attacks — where an adversary accumulates tokens specifically to pass a malicious proposal — are not theoretical. The $182 million Beanstalk governance exploit in April 2022 demonstrated this: a flash loan was used to temporarily acquire governance power and drain the treasury in a single block.
The foundation's binding constraint is trust and jurisdiction. Its board can be captured, pressured, or act in ways misaligned with token holders — with no on-chain enforcement mechanism to stop them. The Ethereum Foundation's influence over protocol direction is largely informal but real. Foundations are also legal attack surfaces: the Uniswap Foundation received a Wells Notice from the SEC in April 2024; the Tornado Cash developers faced criminal prosecution in 2023. These are events a DAO smart contract cannot be served with — but a legal entity and its employees can.
The practical result: neither mechanism controls everything. Most protocols split the work. The DAO treasury controls on-chain capital allocation. The foundation handles off-chain operations the DAO mechanism cannot execute.
Two structural shifts are underway.
Legal wrappers are evolving. Wyoming's DAO LLC statute (2021) and the Marshall Islands DAO Act (2022) created legal structures where the DAO itself can be the legal entity — attempting to merge on-chain governance with legal personhood. These remain experimental. Most protocols haven't adopted them, and their treatment by regulators in major jurisdictions is unresolved.
Security councils are creating hybrid governance. Arbitrum and Optimism both have Security Councils — multisig groups with 9 or 12 signers who hold emergency powers to act faster than DAO governance when urgent protocol action is required. This is effectively a foundation-like committee empowered by the DAO. It acknowledges that pure on-chain governance can't respond fast enough to a live exploit. The trade-off is explicit: speed via centralization, with the DAO retaining power to remove council members.
DAO treasury diversification into real-world assets (RWA) is accelerating, with protocols like MakerDAO/Sky allocating substantial treasury capital into US Treasuries and other off-chain instruments — requiring legal entities to hold and manage these positions. This deepens the interdependence between the DAO and its legal wrapper.
Security council structures adopted by additional major protocols (Uniswap, Aave, Compound) as standard governance architecture. DAO LLC legal structures receiving clear regulatory treatment in at least one major jurisdiction (US, UK, EU). On-chain treasury diversification into RWAs becoming the default for protocols above $500M in reserves.
A foundation acting unilaterally against token holder interests with no on-chain recourse — and succeeding — would strengthen the case for foundation-free governance models. A DAO treasury governance attack at scale (similar to Beanstalk) with no mitigation would accelerate the move toward smaller, board-controlled structures. Regulatory prohibition of token-governed treasuries in major jurisdictions would force most protocols toward purely foundation-controlled structures.
Now: Most major DeFi protocols operate with both structures. Understanding which one controls what is relevant for assessing where governance risk actually lives in a specific protocol.
Next (12-24 months): Security council governance architecture likely becomes a standard template. DAO-to-RWA treasury allocation decisions continue requiring legal entity coordination.
Later: DAO LLC structures may mature enough to reduce the need for a separate foundation layer — collapsing both mechanisms into a single legal-plus-on-chain wrapper. This remains contingent on regulatory clarity that does not yet exist.
This post explains the structural difference between these two mechanisms. It does not assess any specific protocol's governance quality, nor does it indicate whether any particular DAO or foundation arrangement is legally compliant in any jurisdiction. Legal treatment of DAOs and foundations varies significantly across jurisdictions and continues to evolve.
The mechanism is described above. How it plays out in any specific protocol depends on governance design choices that sit outside this explanation.




