Free 30-min Web3 Consultation
Book Consultation
Smart Contract Security Audits
View Audit Services
Custom DeFi Protocol Development
Explore DeFi
Full-Stack Web3 dApp Development
View App Services
Free 30-min Web3 Consultation
Book Consultation
Smart Contract Security Audits
View Audit Services
Custom DeFi Protocol Development
Explore DeFi
Full-Stack Web3 dApp Development
View App Services
Free 30-min Web3 Consultation
Book Consultation
Smart Contract Security Audits
View Audit Services
Custom DeFi Protocol Development
Explore DeFi
Full-Stack Web3 dApp Development
View App Services
Free 30-min Web3 Consultation
Book Consultation
Smart Contract Security Audits
View Audit Services
Custom DeFi Protocol Development
Explore DeFi
Full-Stack Web3 dApp Development
View App Services
layer-2-wars-arbitrum-optimism-base-and-beyond
Blog

Why Arbitrum's Governance Experiment is Incomplete

An analysis of the Arbitrum DAO's power structure, revealing how the Security Council's emergency powers and off-chain veto create a governance ceiling, contrasting with models from Optimism, Base, and zkSync.

introduction
THE GOVERNANCE GAP

Introduction

Arbitrum's governance model is a significant but incomplete experiment in L2 decentralization.

Delegated voting power is concentrated among a few entities, creating a centralization vector that contradicts the network's scaling mission. The Arbitrum DAO structure outsources decision-making to a small council, replicating the flaws of corporate governance.

Onchain execution remains permissioned, with the core team controlling upgrades via a Security Council multisig. This creates a hard ceiling for decentralization, unlike the progressive credibly neutral models of Optimism's Bedrock or zkSync's Boojum.

Evidence: The initial $ARB airdrop allocated over 40% of tokens to insiders and investors, while the DAO's first major vote required emergency intervention from the founding team.

thesis-statement
THE INCENTIVE MISMATCH

The Governance Ceiling

Arbitrum's onchain governance model fails to solve the fundamental misalignment between token-holding voters and the protocol's core technical operators.

Token-based voting is insufficient. DAO delegates vote on treasury allocations, but the sequencer and validator set remain centralized under Offchain Labs. This creates a principal-agent problem where the entity with operational control is not directly accountable to the DAO.

The L2 security model is inverted. Unlike Ethereum, where validators secure the chain, Arbitrum's security derives from its fraud-proof system and Data Availability layer. Governance tokens grant no power over these mission-critical components, which are managed by a single entity.

Compare to Optimism's Technical Committee. While also imperfect, Optimism's Security Council holds emergency upgrade powers, creating a clearer, albeit federated, chain of accountability. Arbitrum's governance lacks this formalized technical oversight body.

Evidence: The failed AIP-1.03 'Transaction Fee Cashback' proposal revealed the DAO's inability to enforce sequencer behavior or fee distribution, highlighting the governance ceiling where token votes meet operational black boxes.

market-context
THE INCOMPLETE EXPERIMENT

The L2 Governance Spectrum

Arbitrum's governance model, while pioneering, exposes the unresolved tension between decentralization and operational efficiency in L2s.

Arbitrum's Security Council is a centralized bottleneck. The DAO's multi-sig of 12 members can unilaterally upgrade core contracts, creating a single point of failure that contradicts its decentralized branding.

Onchain voting is performative without execution. The DAO votes on proposals, but the Council executes them, creating a governance lag. This is a hybrid model that prioritizes speed over pure decentralization, unlike Optimism's slower, direct Citizen House execution.

Real power resides off-chain. Critical decisions on sequencer selection, fee capture, and protocol upgrades are made by Offchain Labs, not token holders. This mirrors the founder-led governance seen in early Ethereum, not a mature DAO.

Evidence: The Council's emergency powers were used to pause the chain in 2023. This proves the system's resilience but also its reliance on a trusted human layer, a flaw pure rollups like zkSync Era structurally avoid with verifiable proofs.

WHY ARBITRUM'S EXPERIMENT IS INCOMPLETE

L2 Governance Power Matrix: A Comparative Snapshot

A first-principles breakdown of on-chain governance power, showing where Arbitrum's token-holder model lacks the formalized, executable authority of its peers.

Governance Power FeatureArbitrumOptimismPolygon zkEVM

On-Chain Upgrade Execution

Sequencer/Prover Control

Soft Social

Technical Council

Security Council

Protocol Treasury Control

DAO Multisig

Token House + Citizens' House

Governance + Security Council

Emergency Action Time (Worst-Case)

~7 days

< 24 hours

< 24 hours

Governance Token Required for Proposals

0.1% of Supply

0.25% of Supply

0.1% of Supply

Formalized Technical Authority

None

Optimism Foundation

Polygon Labs + SC

Direct L1 Bridge Control

Governance Turnout Threshold for Quorum

5%

2%

5%

deep-dive
THE GOVERNANCE GAP

Deconstructing the Security Council's Power

Arbitrum's Security Council is a centralized failsafe that contradicts its decentralized governance narrative.

The Council is a kill switch. It holds unilateral power to upgrade core contracts, a capability that directly undermines on-chain voting outcomes. This creates a single point of failure for the network's security model.

Delegated power is not dissolved power. The DAO's ability to elect council members is a procedural check, not a substantive one. The structural authority remains concentrated, mirroring the Lido DAO's staking module governance dilemma.

The multisig is the real governor. Until the Council's emergency powers are sunset or made explicitly permissionless via a system like Optimism's Law of Chains, Arbitrum's final governance layer is a 9-of-12 multisig, not its token holders.

counter-argument
THE STRATEGIC VIEW

The Steelman: This is a Feature, Not a Bug

Arbitrum's governance model is an incomplete experiment by design, prioritizing rapid ecosystem growth over immediate decentralization.

The Foundation Council is a speed dial. It centralizes veto power to execute critical upgrades and security patches without DAO latency. This mirrors Optimism's Security Council but with a more explicit, time-bound mandate for intervention.

Deferred decentralization is a scaling tactic. The model intentionally sacrifices short-term political purity for ecosystem velocity. This trade-off is common in early-stage L2s competing for developer mindshare against Polygon, zkSync, and Base.

The incomplete design creates a forcing function. The scheduled 2024 sunset of the Foundation's power is a public commitment device. It pressures the DAO to build real governance tooling and active participation before the safety net disappears.

Evidence: The Arbitrum DAO's initial AIP-1 treasury allocation failure proved the necessity of the Council. The system worked as designed to prevent a governance attack, buying time for the community to develop competence.

risk-analysis
GOVERNANCE FRAGILITY

The Incomplete Experiment: Risks and Implications

Arbitrum's governance model, while innovative, reveals critical gaps in decentralization and security that threaten its long-term viability as a foundational L2.

01

The Security Council's Single Point of Failure

A 12-of-15 multisig holds ultimate upgrade control, creating a centralized veto point. This contradicts the L2's decentralized branding and introduces a critical trust assumption.

  • Power to Pause: Council can unilaterally halt the chain, a power rarely used by mature L1s like Ethereum.
  • Permissioned Upgrades: All protocol changes, even minor fixes, require Council approval, creating a bottleneck.
12/15
Multisig Quorum
1
Chain Pause Key
02

The AIP-1 Backlash: Tokenholder Illusion

The failed AIP-1 proposal to allocate 750M ARB tokens without a vote exposed the gap between token-based signaling and real authority.

  • Governance Theater: Tokenholders can vote, but the Foundation and Council retain final execution power over treasury and upgrades.
  • Precedent of Ignoring Votes: The community's overwhelming 'No' vote was initially dismissed, highlighting the advisory nature of governance.
750M
ARB Proposal
>77%
Voted 'No'
03

The Sequencer Monopoly & MEV Risk

Arbitrum's single, permissioned sequencer operated by Offchain Labs creates a centralized economic and technical choke point.

  • No Fork Choice: Users cannot force transaction inclusion, unlike on Ethereum where they can broadcast to other nodes.
  • Opaque MEV: All transaction ordering power is centralized, preventing a competitive MEV market and raising censorship risks.
1
Active Sequencer
0ms
User Censorship Cost
04

The L1 Escape Hatch is a Governance Bomb

The canonical bridge's upgradeability means the Security Council can change the rules for withdrawing assets back to Ethereum. This makes L1, the final settlement layer, dependent on L2 governance.

  • Settlement Risk: The security of $10B+ in bridged assets is gated by the 12-of-15 multisig, not Ethereum's consensus.
  • Contradicts Rollup Theory: A proper rollup's security should derive solely from L1 data availability and fraud proofs, not a mutable bridge contract.
$10B+
TVL at Risk
Mutable
Bridge Logic
05

Stagnation via Bureaucracy

The multi-stage governance process (Temperature Check, Consensus Check, Final Vote) is designed for safety but creates extreme latency for critical upgrades.

  • Competitive Disadvantage: Rivals like Optimism with its Optimist Collective and Base can iterate faster with simpler governance.
  • Inability to Respond to Emergencies: A critical bug fix requires navigating a weeks-long process, unless the Security Council uses its emergency powers, further centralizing control.
Weeks
Upgrade Latency
3-Stage
Vote Process
06

The Missing Credible Neutrality

Arbitrum's governance is not credibly neutral; it is explicitly controlled by a known set of entities (Offchain Labs, early investors, Foundation). This deters protocols that require long-term, immutable guarantees.

  • Protocol Risk: Why would Uniswap or Aave deploy their canonical v3/v3 on a chain whose rules can change at the whim of a council?
  • Comparison to L1s: Ethereum's core protocol changes require overwhelming social consensus, not a corporate board vote.
Known
Controller Set
High
Sovereignty Risk
future-outlook
THE GOVERNANCE GAP

The Path to Completeness (Or Not)

Arbitrum's governance structure is a high-stakes experiment that remains incomplete, lacking the finality and decentralization required for credible neutrality.

The Security Council is a crutch. The current 9-of-12 multisig controlling the upgrade keys is a centralized checkpoint. This contradicts the long-term vision of on-chain governance where token holders vote on upgrades directly, a model Optimism's OP Stack is actively pursuing with its Citizen House.

Delegated voting creates apathy. The low voter participation in ARB governance votes reveals a systemic flaw. Large holders delegate to entities like Plurality Labs or Blockworks Research, creating a pseudo-aristocracy that centralizes decision-making power away from the broader community.

Treasury control is the real test. The DAO's $4B+ treasury is managed off-chain via a traditional multisig. True completeness requires an on-chain, programmatic framework for fund allocation, moving beyond manual grants to a system like Optimism's RetroPGF or Aave's decentralized treasury management.

Evidence: The first major governance vote, AIP-1, was controversially ratified by the Foundation after community backlash, demonstrating that formalized on-chain processes are still subordinate to informal social consensus and centralized intervention.

takeaways
ARBITRUM'S GOVERNANCE GAPS

TL;DR for Protocol Architects

Arbitrum's governance experiment is pioneering but structurally incomplete, creating critical risks for protocol architects building on it.

01

The DAO Treasury is a Centralized Black Box

The Arbitrum DAO controls ~$3B+ in ARB tokens but its spending is approved by a centralized, multi-sig "Security Council." This creates a critical contradiction: token-holder votes are merely suggestions, not executable commands.\n- Governance Risk: Final authority rests with 9-of-12 signers.\n- Execution Lag: DAO proposals require manual multi-sig fulfillment, adding days of delay.

$3B+
Controlled Treasury
9/12
Multi-Sig Control
02

The Protocol Upgrade Veto is a Single Point of Failure

Core protocol upgrades (Nitro, Stylus) require a two-step governance process where the DAO votes, but the Arbitrum Foundation holds a unilateral veto. This centralizes ultimate technical control, undermining the "permissionless innovation" narrative.\n- Sovereignty Risk: Foundation can block DAO-mandated upgrades.\n- Coordination Overhead: Creates friction for critical security or performance patches.

100%
Veto Power
2-Step
Process
03

Delegated Voting Enables Whale Cartels

Arbitrum's delegated voting model has led to ~70%+ voter apathy, concentrating power in a few large delegates (e.g., Blockworks Research, Gauntlet). This creates governance capture risks where a small group can steer treasury spending and protocol direction.\n- Cartel Risk: Top 10 delegates control a majority of voting power.\n- Apathy Metric: Low voter turnout makes the system brittle and easily influenced.

~70%
Voter Apathy
Top 10
Delegate Control
ENQUIRY

Get In Touch
today.

Our experts will offer a free quote and a 30min call to discuss your project.

NDA Protected
24h Response
Directly to Engineering Team
10+
Protocols Shipped
$20M+
TVL Overall
NDA Protected Directly to Engineering Team
Arbitrum Governance: Why Token Holders Don't Have Final Say | ChainScore Blog