Free 30-min Web3 Consultation
Book Consultation
Smart Contract Security Audits
View Audit Services
Custom DeFi Protocol Development
Explore DeFi
Full-Stack Web3 dApp Development
View App Services
Free 30-min Web3 Consultation
Book Consultation
Smart Contract Security Audits
View Audit Services
Custom DeFi Protocol Development
Explore DeFi
Full-Stack Web3 dApp Development
View App Services
Free 30-min Web3 Consultation
Book Consultation
Smart Contract Security Audits
View Audit Services
Custom DeFi Protocol Development
Explore DeFi
Full-Stack Web3 dApp Development
View App Services
Free 30-min Web3 Consultation
Book Consultation
Smart Contract Security Audits
View Audit Services
Custom DeFi Protocol Development
Explore DeFi
Full-Stack Web3 dApp Development
View App Services
public-goods-funding-and-quadratic-voting
Blog

The Inevitable Collusion in Token-Curated Registries

An analysis of the fundamental economic flaw in token-weighted curation systems, explaining why they are structurally prone to cartel formation and fail as mechanisms for sybil-resistant public goods funding.

introduction
THE INCENTIVE MISMATCH

Introduction

Token-Curated Registries (TCRs) structurally incentivize collusion over curation, undermining their core utility.

Collusion is the equilibrium state for any TCR with meaningful economic value. The game theory of staking tokens to vote on list membership creates a direct financial incentive for voters to coordinate and extract value from applicants, turning curation into a rent-seeking market.

The 'Dilution Defense' is a myth. Proposals like requiring voters to hold the listed token (e.g., a Curve gauge-style system) fail because large stakeholders can still collude to list inferior projects, extracting fees while diluting the cost across the entire token holder base.

Real-world evidence is consistent. Early TCR experiments like AdChain and the Kleros-curated Tokenlist demonstrated that low-stakes lists are ignored, while high-stakes lists become targets for sybil attacks and voter cartels, validating the theoretical failure mode.

thesis-statement
THE INCENTIVE MISMATCH

The Core Flaw: Priced Influence

Token-Curated Registries (TCRs) structurally convert governance power into a tradable financial asset, making collusion an economic inevitability rather than a security failure.

Governance becomes a yield asset. In a TCR, staking tokens to curate a list creates a direct financial return. This transforms a governance action into a yield-bearing instrument, aligning voter incentives with fee extraction, not protocol health.

Collusion is the rational equilibrium. Entities like large holders or professional delegates in systems like Curve Finance or early The Graph curators maximize returns by forming voting cartels. This is not corruption; it is game-theoretic optimization of a flawed mechanism.

The price of a vote is public. Unlike opaque political lobbying, a token's market price transparently signals the cost of influence. This creates a liquid market for control, where the highest bidder deterministically steers outcomes, as seen in contentious MakerDAO executive votes.

Evidence: The fundamental dilemma of on-chain voting is that any mechanism valuing participation with a token will see that token's value converge to the price of its purchased influence, divorcing it from any underlying utility.

WHY DECENTRALIZED CURATION FAILS

TCR Failure Modes: A Comparative Post-Mortem

A first-principles analysis of systemic vulnerabilities in token-curated registries, comparing failure modes across key design dimensions.

Failure ModeClassic TCR (e.g., AdChain)Staked Reputation Model (e.g., Kleros)Hybrid / Mitigated Approach (e.g., Optimism's AttestationStation)

Collusion Attack Surface

High (O(n²) voter pairings)

Medium (Juror pools & appeals)

Low (Fixed, known attesters)

Whale Dominance Threshold

33.4% of stake

50% per court tier

N/A (Non-stake weighted)

List/De-list Cost (Gas)

$50-200

$5-15 + appeal bonds

< $1 (L2)

Voter Apathy / Low Participation

Critical (No quorum = no updates)

Managed (Fallback to higher court)

Not Applicable (Centralized trigger)

Time to Finality (Dispute)

7-30 days (Challenge period)

~1 week (Multi-round appeals)

< 1 hour (Instant, with fraud proof window)

Sybil Resistance Mechanism

Pure Token Stake

Stake + Skin-in-the-Game Reputation

Permissioned Attester Set

Primary Use Case Survivability

False (AdChain deprecated)

True (Kleros active, niche)

Contextual (Used for specific protocol data)

deep-dive
THE COLLUSION VECTOR

The Quadratic Voting Mirage and the Sybil Problem

Quadratic voting's theoretical Sybil resistance is a mirage, as token-curated registries inevitably succumb to collusion and vote-buying.

Quadratic voting fails in practice because it assumes costless identity creation. In reality, Sybil attacks are cheap. Projects like Gitcoin Grants demonstrate that sophisticated collusion rings, not individual voters, determine outcomes.

Token-curated registries are markets. Any market with a governance token is a vote-buying market. Rational actors form cartels to pool voting power, a dynamic seen in early TCR experiments like adChain.

Collusion is the equilibrium. The cost to bribe a quadratic voting system scales with √N, making large-scale manipulation economically viable. This isn't a bug; it's the Nash equilibrium for any financially incentivized curation game.

Evidence: Analysis of Gitcoin Grants rounds shows a small number of funding pools consistently capture the majority of matching funds, indicating coordinated Sybil campaigns that exploit the quadratic formula.

counter-argument
THE INCENTIVE MISMATCH

Steelman: Can't We Just Fix It With Better Design?

Token-curated registries fail because economic incentives for honest curation are structurally weaker than incentives for collusion.

Collusion is the equilibrium state for any TCR with significant value. The economic reward for validators to form a cartel and extract value from the registry always exceeds the reward for honest, competitive curation.

Better design cannot solve this. Adding slashing, reputation, or complex voting like conviction voting only raises the collusion cost. It does not eliminate the fundamental profit motive, as seen in early experiments like AdChain and Kleros.

The data proves the failure. No major TCR operates at scale for critical infrastructure. The model was abandoned for decentralized sequencers and oracle networks like Chainlink, which use explicit, non-speculative work for rewards.

takeaways
THE TCR COLLUSION TRAP

TL;DR for Builders and Funders

Token-Curated Registries fail because their economic security model is fundamentally flawed, creating a predictable path to capture.

01

The Voter Collusion Problem

TCRs assume voters are independent actors. In reality, large token holders (whales, VCs, the project team itself) can coordinate off-chain to control outcomes. This turns the registry into a permissioned list masquerading as a decentralized one.

  • Key Flaw: Security relies on unenforceable social assumptions.
  • Result: The registry becomes a single point of failure for the entire application layer built on top of it.
>51%
Stake to Control
~$0
Collusion Cost
02

The Adversarial Staking Model

The 'challenge and stake' mechanism is gamed by insiders. Malicious listers can be challenged, but colluding voters can simply vote to approve them and split the challenger's slashed stake as profit.

  • Perverse Incentive: Honest challengers lose funds; colluders profit.
  • Outcome: The registry fills with low-quality or malicious entries because it's economically rational to do so.
-EV
For Honest Actors
+EV
For Cartels
03

The Builder's Alternative: Reputation & Work

Avoid pure token-voting for critical lists. Look to models like The Graph's Curator signaling (work-based) or Optimism's Citizen House (reputation-based). Security must be divorced from transferable financial weight.

  • Solution: Bond reputation or provable work, not just capital.
  • Examples: Karma, Proof of Personhood (Worldcoin), and delegated reputation systems.
Work-Based
Security Anchor
Sybil-Resistant
Design Goal
04

The Funder's Lens: TCRs Are a Red Flag

A project pitching a TCR for a core component (oracle list, bridge whitelist, validator set) has not thought deeply about mechanism design. It's a legacy crypto idea that doesn't survive contact with adversarial capital.

  • Due Diligence: Question any reliance on TCRs. Demand a collusion analysis.
  • Invest Instead in teams building with cryptoeconomic primitives like threshold signatures, ZK proofs, or EigenLayer AVS-style slashing.
High Risk
Architecture
Pre-2018
Thinking
ENQUIRY

Get In Touch
today.

Our experts will offer a free quote and a 30min call to discuss your project.

NDA Protected
24h Response
Directly to Engineering Team
10+
Protocols Shipped
$20M+
TVL Overall
NDA Protected Directly to Engineering Team
Why Token-Curated Registries Inevitably Lead to Collusion | ChainScore Blog