The DAO

The DAO was a decentralized autonomous organization that operated on the Ethereum blockchain as a crowdfunded investment fund. It allowed anyone who purchased its DAO tokens to submit proposals for projects or ventures and to vote on which proposals should receive funding. The voting power of each participant was proportional to the number of tokens they held, and approved proposals were automatically executed by the underlying smart contract code. In this way, the organization aimed to replace traditional venture‑capital decision‑making with a transparent, token‑driven governance model.

In June 2016, an attacker exploited a recursive call vulnerability in The DAO's splitDAO() function, combined with a second flaw that enabled repeated withdrawals, and drained over 3.6 million ether from the fund. This amount corresponded to roughly one‑third of the total ether holdings that The DAO possessed at the time of the attack, indicating a substantial pool of assets under its management. The incident triggered a wide‑ranging debate within the Ethereum community about the immutability of blockchain ledgers and the appropriateness of intervening to reverse the theft.

The DAO's distinguishing attribute was its reliance solely on smart‑contract code for governance, eliminating any traditional hierarchical structure or central authority. It had no identifiable owners, parent company, or subsidiaries; instead, control resided collectively with the token holders who governed the fund through their votes. This design positioned The DAO as an early experiment in fully decentralized organizational forms, highlighting both the potential and the risks associated with code‑based governance in the blockchain ecosystem.