A research paper from the European Central Bank has concluded that governance across decentralized finance protocols is heavily concentrated, warning that the results could influence future "regulatory anchor points" for the sector.

The paper, published by ECB researchers and reported by The Block, examines how decision-making power is distributed across major DeFi protocols. Its central finding: despite the industry's decentralization narrative, effective control over protocol upgrades, treasury allocations and parameter changes frequently sits with a small number of token holders.

That conclusion carries direct weight for European policymakers. The ECB has repeatedly flagged DeFi as a supervisory blind spot, and a data-driven demonstration of governance concentration gives regulators an empirical basis for treating protocol decision-makers as accountable entities — an approach that sits uneasily with the sector's core design claims.

Why does governance concentration matter for regulation?

DeFi protocols typically govern themselves through token-weighted voting, in which holders of governance tokens propose and approve changes. In theory, this distributes control across a protocol's user base.

The ECB paper's findings challenge that premise. Where voting power clusters among a limited set of wallets or institutional actors, the functional distinction between a decentralized protocol and a traditionally managed financial firm begins to narrow.

This matters because European rules — including the Markets in Crypto-Assets Regulation (MiCA), which entered into application in stages across 2024 — were drafted with decentralized arrangements only partially in scope. If ECB research shows that identifiable actors effectively control protocol outcomes, supervisors gain an argument for extending existing financial-regulation frameworks to those actors rather than building a bespoke DeFi regime.

The paper explicitly notes its results could affect "regulatory anchor points," a phrase that signals the research is intended to inform where and how future rules attach to the sector.

What are the operational consequences for protocols?

For protocol foundations and decentralized autonomous organizations serving European users, the findings raise concrete compliance questions:

• Governance design: token distribution and voting mechanics may come under supervisory scrutiny as indicators of who actually controls a protocol.
• Accountability: concentrated voting power could expose dominant token holders to responsibilities traditionally attached to company directors or fund managers.
• Disclosure: protocols may face pressure to document governance participation and voting concentration for regulators.

The business implication is straightforward. If European authorities treat concentrated governance as evidence of centralized control, DeFi teams operating from or serving the EU should expect their token-holder structures, treasury arrangements and upgrade procedures to be examined with the same rigor applied to licensed financial institutions.

What comes next?

The paper adds to a growing body of central bank research on DeFi market structure and follows the ECB's earlier warnings that unregulated decentralized venues could pose financial stability and investor protection risks. Its authors position the work as an input to the EU's ongoing assessment of whether current frameworks — MiCA among them — adequately capture decentralized arrangements.

With the European Commission expected to review how DeFi fits within the existing crypto rulebook in the coming policy cycle, the ECB's findings on governance concentration are likely to feature in that debate as regulators decide where the sector's legal responsibilities ultimately land.