DAO Safety 101: The Legal Risks Nobody Reads Until Something Breaks
A DAO without a legal wrapper can be treated as a general partnership. The cases, the questions to ask before you launch, and how to protect founders and contributors.
A DAO feels like a group chat with a treasury. Courts and regulators see something else: a group of people doing business together. When something goes wrong, that gap is where personal liability lives.
This guide covers the cases that proved it, the questions to ask before you launch, and how to protect founders and contributors, whether or not the DAO itself ever gets a wrapper.
Most DAOs that never incorporated were not safe. They were simply never tested. Every real case below started as an ordinary DAO with an ordinary Discord.
The short version
Partnership by default
Without an entity, a group acting together can be treated as a general partnership, with joint and several liability.
Real cases
bZx, Ooki DAO, Lido DAO, Uniswap Labs and Tornado Cash show how the exposure shows up.
Seven questions
Answer them before you launch, not after the first claim.
Your own company
Contributors can sit behind their own company so they are service providers, not partners.
The legal wrapper options
Trust, foundation or Wyoming DUNA: what each solves and what each costs.
The entity stack
Why serious DAOs end up with a foundation, a token entity and an operating company.
Get a structure reviewed
We map your token, team and community to a structure in a free call.
1. When nobody is to blame, everybody is
Responsibility inside a DAO is hard to assign. Decisions are voted by a community, hierarchies are flat or absent, and many DAOs have no legal entity at all. That absence can make contributors feel unaccountable.
The law does not share that feeling. In most places, a group of people acting together for a common goal without an entity is treated as a general partnership. A general partnership has no legal personality separate from its partners. Partners are jointly and severally liable. If the DAO breaks a law, makes a costly mistake or gets sued, the people behind it can be pursued personally.
This matters most for DAOs that hold real money. A product DAO can have smart contracts securing funds from tens of thousands of users, and contributors paid monthly to keep it safe. A social club DAO has little to lose. A treasury or protocol DAO has a lot.
2. The cases that made it real
| Case | What happened | Why it matters |
|---|---|---|
| bZx | A phishing scam exposed a developer's keys and funds were drained. Affected users sued founders, investors and affiliated companies | A DAO with no entity exposes each participant. Voting and community governance did not dilute responsibility |
| Ooki DAO | The CFTC brought a case against the DAO itself. In 2023 a US court ruled the DAO could be sued as a person under the Commodity Exchange Act | Courts will treat a DAO as an entity that can be held accountable even when it has not chosen to be one |
| Lido DAO (Samuels v. Lido DAO) | In November 2024 a federal judge in California held Lido DAO could be treated as a general partnership under California law. Large investors were named as alleged partners, and one was dismissed because the complaint did not adequately allege membership | The most direct statement yet that token holders who govern and share in rewards may be partners. Check the current docket for where the case stands |
| Uniswap Labs | The SEC issued a Wells notice in April 2024 over the exchange model and closed the investigation without action in February 2025 | Even a favourable outcome cost time and money |
| Tornado Cash (Roman Storm) | A developer was convicted on one count in 2025, according to press coverage. Two counts were unresolved, and the retrial has been reset to April 2027 while a motion for acquittal is pending | The open question is whether writing code you cannot control creates liability for what others do with it |
Two lessons run through all of them. First, calling yourself decentralised does not remove responsibility. Second, the cost of defending yourself arrives long before any verdict.
But the SEC and CFTC issued guidance in March 2026. Does that fix it?
It helps with one question, not the other. The joint interpretation clarifies when a token is or is not a security, which affects the "efforts of others" test regulators use. It does not change partnership law, and it does not give an unwrapped DAO limited liability. See our Crypto Regulation in 2026 guide for the full picture.
3. Seven questions to ask before you launch a DAO
1. What exactly are you building? A DeFi protocol, an exchange, a game consensus layer, a developer collective and a social platform need different levels of decentralisation, different voting rules and different legal protection. Write down the mission, the stakeholders and your motivation before you design anything.
2. Do you need a DAO at all? Radical onchain transparency builds accountability, but it also shows your strategy to competitors. Hundreds of thousands of voters can be too slow for a competitive market. Liquid tokens trade, and price swings can destabilise the people running the project. Sometimes a company with a token is a better answer.
3. Who really decides? Voting thresholds, quorums, supermajorities and what is put to a vote all shape the project's future. Governance should be able to evolve. A well known early example is the 2016 Ethereum hard fork: approved by an 89 percent supermajority and still split the community into two chains.
4. What is your wrapper? Without limited liability, token holders and contributors risk being treated as partners. Decide the wrapper before the token exists, not after the first claim. Options are covered in our DAO Governance guide: a trust or foundation, or a Wyoming DUNA. Other options include a Wyoming DAO LLC, a Marshall Islands LLC and the Innovation City DAO Association in the UAE.
5. What is your token, legally? The March 2026 SEC and CFTC taxonomy sorts tokens into digital commodities, collectibles, tools, stablecoins and digital securities. Do not guess. Read Utility Token Legal Structuring before you sell or distribute anything.
6. Who signs, hires and gets sued? A DAO cannot sign a bank account application or a contractor agreement. Someone has to, and that someone needs an entity. See Can a DAO Run Itself Without a Labs Entity? and What Is a "Labs" Company, Actually?.
7. How are contributors protected? If you are paid by a DAO, you can be swept in as a partner. Section 5 explains the single most useful protection you can set up in a week.
4. The entity stack in plain language
A single wrapper rarely solves everything. Operational capacity, governance, legal personality and limited liability pull in different directions. The answer used by serious projects is an entity stack: several entities, each doing one job, often in different jurisdictions.
A typical three-layer version works like this.
| Layer | Job | Example |
|---|---|---|
| Governance entity | Holds the treasury and grants, carries the community's will. Often memberless or member-governed | A Cayman memberless foundation, a Swiss foundation, a Wyoming DUNA |
| Token issuance entity | Issues the token in a jurisdiction suited to it | A BVI company |
| Operating company (OpCo) | Hires staff, signs vendors, builds the product | An LLC or company in the team's jurisdiction |
This creates a chain of accountability: token holders govern the DAO, the DAO directs the foundation, and the foundation funds the OpCo to carry out what holders decided.
Keeping equity and token in separate entities matters too, see Token Pre-Sale and Issuance.
For a side-by-side of foundation jurisdictions, use Best Jurisdiction for a Web3 Foundation. For trust-based designs, see Trusts Demystified.
5. If you work in a DAO without a wrapper, put a company between you and it
If you contribute to a DAO that has no legal entity, you risk being counted as one of its partners. The fix is simple and cheap compared with the risk.
- Form your own company. An LLC or company in a jurisdiction that suits you becomes your contracting party with the DAO.
- Get paid into the company. Payments from the DAO go to a wallet that belongs to your company, not to your personal wallet.
- Keep everything in the company. Do not mix the company's DAO income with personal assets. That separation is what lets you say you are a service provider, not a partner.
- Keep the paper trail. Contracts, invoices and records of what the company did for the DAO.
If something goes wrong, your company may be pursued. Your home, savings and other assets stay outside it.
Otonomos forms and maintains these companies for you, including the registered agent, filings and account openings, so the protection stays valid year after year. Popular choices are the Wyoming LLC and the Delaware LLC.
Wyoming LLC
A popular home for the company that contracts with your DAO.
Delaware LLC
The familiar choice for teams that expect US investors.
6. A pre-launch safety checklist
| Check | Done when |
|---|---|
| Wrapper chosen | You can name the entity that holds the treasury and the entity that signs contracts |
| Token classified | You have a written view on which regulatory category your token falls into in your key markets |
| Control not concentrated | No single person or key can move treasury funds. Multisig signers are independent |
| Security basics | Audits done, monitoring live, incident response plan written and rehearsed |
| Contributors protected | Core contributors are paid through their own companies |
| Banking path | You know where the operating account and the exchange accounts will sit |
| Governance can evolve | There is a written route to change rules and migrate contracts |
❓ Frequently asked questions
Are DAO members personally liable?
They can be. Without a legal wrapper, courts may treat a DAO as a general partnership, in which partners are jointly and severally liable. The Lido DAO ruling in November 2024 is the clearest recent example. A wrapper with limited liability changes that exposure, but only if it is real and respected.
Does using a foundation or DUNA remove all risk?
No. A wrapper solves the liability and contracting problem. It does not make your token lawful, secure your contracts or fix concentrated governance. It also only works if the people who built the project genuinely give up residual control.
Can anonymous contributors be protected?
Anonymity is not a legal shield. A company between a contributor and the DAO is a better protection than a pseudonym, and it still requires the company's owners to complete KYC with their service provider.
Do I need a separate entity for the token?
Often yes. Keeping the equity-holding company and the token-issuing entity separate avoids mixing investor rights with token holder rights. See our token pre-sale guide.
Is a Wyoming DUNA better than a foundation?
It is simpler (one entity) and treats token holders as members, but it is newer and Wyoming-specific. A foundation has deeper precedent and offshore options. Many projects use both.
Who helps set this up?
Otonomos handles the entities, filings, registered offices, nominee or local director where needed, and the bank and exchange accounts. You decide the structure with us, complete KYC and pay.
Keep reading
Crypto Regulation in 2026
Where every region stands, plus a playbook for stolen crypto.
DAO Governance: Trust vs. Foundation vs. DUNA
Pick the legal wrapper that fits your DAO.
Best Jurisdiction for a Web3 Foundation
A side-by-side of foundation jurisdictions.
This guide is general information, not legal or tax advice.
Updated about 3 hours ago