DAO Criminal Liability Defence Lawyers

DAOs (Decentralized Autonomous Organizations) are organizations whose governance is exercised through voting by token holders on a blockchain. Although their design seeks to eliminate intermediaries and central authorities, Spanish criminal law does not recognize the DAO as an autonomous entity exempt from personal liability. When a DAO is involved in fraud, money laundering, market manipulation or corporate offenses, the key question is: who responds, and why?

Legal Nature in Spain

In the absence of specific regulation, doctrine and the first judicial pronouncements assimilate the DAO without formal legal personality to an irregular civil society (Art. 1669 CC) or to a community of goods. The consequence is relevant: criminal liability falls on the individuals who acted with factual control, not on the DAO as such. If the DAO is wrapped in a foundation (typical in Switzerland, Cayman, BVI), the foundation may be subject to imputation, but individual liability persists.

Imputation of Tokenholders and Developers

Imputation of tokenholders requires proving more than mere token holding: active participation in votes approving the criminal conduct, knowledge of the design or material execution must be present. Core developers have greater exposure due to their technical control: if they retain the multisig keys, they can modify smart contracts, freeze funds or redirect them, which places them in a guarantor position. The defense must explore the project's real degree of decentralization and the effective capacity of each actor.

Defense Through Effective Decentralization

The most solid defense is effective decentralization: establish that the client, even being a prominent developer or tokenholder, had no unilateral control over the criminal conduct. Requires technical evidence (multisig configuration, token distribution, voting history) and documentary evidence (whitepaper, public documentation, internal communications). When it is proven that the DAO operated as a genuinely decentralized organization, individual imputation weakens except for those who exercised specific decisions.

DAO Treasury and Money Laundering

The DAO's treasury concentrates much of the criminal risk: if it receives funds of illicit origin or is used to channel the proceeds of an offense, those who control the multisig keys or vote on its disposal may be exposed to money laundering (Art. 301 CP). The defense must establish the lawful traceability of contributions, the transparency of the votes and the absence of knowledge of any illicit origin of the managed funds.

Strategies for Developers

The developer is the most exposed figure due to their technical control. The defense is built by documenting the real degree of that control: whether the code was delivered and the administration keys renounced (renounced ownership), whether decisions required a governance quorum external to the developer, and whether their contribution was punctual or structural. Establishing the effective loss of technical control delimits the period of liability and may exclude it for facts subsequent to the exit.

Criminal Classification of Each Conduct and Applicable Penalties

Before designing a defence, it is essential to pin down the exact offence the Public Prosecutor may attribute to conduct connected with a DAO, because the penalty, the limitation period and the procedural strategy all flow from it. The deceptive raising of funds for a protocol, where a false representation of reality induces a transfer of assets, falls within the fraud offence of Articles 248 and 249.1.a of the Criminal Code (CP), punishable in its basic form with imprisonment not exceeding five years. Where aggravating circumstances apply, such as special seriousness owing to the value defrauded, a large number of victims or abuse of personal relationships, Article 250.1 CP applies, and even Article 250.2 CP, with penalties reaching up to six or eight years of imprisonment.

Managing and moving the DAO treasury with assets of unlawful origin is channelled into the money laundering offence of Article 301 CP, carrying imprisonment of six months to six years plus a fine. The negligent form under Article 301.3 CP, which sanctions a breach of the duty of diligence as to the origin of the funds, provides for imprisonment of six months to two years. If the operation conceals income from the Tax Authority above the statutory threshold, the tax offence of Article 305 CP comes into play, with imprisonment of one to five years, aggravated to two to six years under Article 305 bis CP where the unpaid amount exceeds the qualified threshold or interposed structures are used. Identifying the correct offence is the defence's first technical task, because everything else is built upon it.

Limitation Periods for the Offence in Protocol Activity

The statute of limitations is a defensive tool of the first order where the facts date back to a protocol's earliest deployments, and Article 131 CP sets periods that depend on the maximum penalty laid down for the offence. Under the law in force there is no longer a three-year tier: offences whose maximum penalty does not exceed five years, such as basic fraud under Articles 248 and 249.1.a CP, negligent money laundering under Article 301.3 CP or the tax offence under Article 305 CP, become time-barred after five years. Offences with a maximum penalty above five years become time-barred after ten years.

Under that rule, aggravated fraud under Articles 250.1 and 250.2 CP is time-barred after ten years, as is intentional money laundering under Article 301 CP, which, carrying imprisonment of up to six years, sits above the five-year threshold. The aggravated tax offence under Article 305 bis CP, with a penalty of two to six years, is likewise time-barred after ten years. Minor offences punished only with a fine become time-barred after one year. The clock starts on the day the conduct is consummated, which in continuing operations does not always coincide with the first deployment, and is interrupted when proceedings are formally directed against the person under investigation. Precisely establishing that start date and the interrupting acts can be decisive in arguing that liability has been extinguished.

Blockchain Forensic Expert Evidence and How a Court Weighs It

In these proceedings the central evidence is usually on-chain traceability: analysis of wallets, smart contracts, token flows and the attribution of addresses to individuals. That evidence is normally supplied through a forensic expert report, and the defence must scrutinise both its methodology and its chain of custody. An attribution of an address to a defendant resting only on address-clustering heuristics, statistical inferences or unverified data from external platforms may be insufficient to ground a conviction, because a cryptographic signature proves control of a key, not necessarily the identity of whoever holds it at any given moment.

The court assesses this expert evidence under the rules of sound judicial reasoning, weighing its methodological rigour, the reproducibility of the queries run against the chain and the impartiality of the expert. The defence may put forward a counter-expert, question the assumptions underlying the analysis and highlight the blind spots in the tracing, particularly where mixers, cross-chain bridges or privacy protocols break the linearity of the flow. Doctrine requires digital evidence to guarantee integrity and inalterability from the moment it is obtained; any break in the custody of the data dump or in the hash sealing the evidence opens a legitimate avenue for challenge. Working this technical layer with sound experts is often what separates a firm accusation from a charge that cannot survive trial.

Corporate Criminal Liability and Compliance Programmes

Where the DAO is built around a foundation, a company or any entity with legal personality that channels the treasury or issues the token, the criminal liability of legal persons under Article 31 bis CP may be triggered. The entity is liable for offences committed in its name or for its benefit by directors and representatives, or by those under its authority where a duty of supervision has been seriously breached. Fraud under Articles 248 and 250 CP, money laundering under Article 301 CP and the tax offence under Article 305 CP are among the offences attributable to the organisation, with fine penalties and possible accessory consequences such as dissolution or a prohibition on certain activities.

The entity's defence turns on the organisation and management model contemplated in Article 31 bis CP. A suitable compliance programme, adopted and effectively implemented before the facts, with risk assessment, anti-money-laundering protocols, a whistleblowing channel and a supervisory body endowed with genuine autonomy, may exempt or mitigate the liability of the legal person. In a protocol's ecosystem this requires tailoring controls to the technical reality: counterparty identification procedures, a policy on the origin of the funds feeding the treasury, and an auditable record of governance decisions. Demonstrating that these controls existed and operated in practice, not merely that they appeared in a document, is the core of a sound corporate defence.