LDO+stETH dual governance

hello all

the dual governance seems like a proper balance of powers among the protocol, stETH holders and the wider ethereum community.

the suggestion to burn LDO in a vote thats been vetoed by stETH is a novel idea to address potential gridlock but it should be dropped in relatively short order. there is economic value to LDO and to subject that to removal due to governance vote (even if by an attacker) is a worse outcome than even the antics of the MC and YGG governance battle. DAO governance is supposed to give everyone a voice; silencing an opposing voice is quite the opposite.

i would propose taking a lesson from dispute resolution in meatspace. something along the lines of, if there is a vote that meets certain conditions and there is gridlock resulting from this vote over x amount of time, then there is a committee which shall decide whether or not the proposal is in the best interest of LDO and the ethereum community and should be implemented. Following the approval of this concept, the community votes on this committee once every five years or so and the committee is therefore entrusted to make good decisions only upon gridlock. I think we can all identify folks who would make good and smart decisions. further, the number of proposals that would result in this kind of antagonistic gridlock are quite small, thus limiting the influence of the committee.

the attack vector here would be the committee vote. we can make prerequisites for committee candidates such as candidates can only be folks that have worked at LDO, own a financial interest in LDO and are approved by a majority of the largest tokenholders.

Lido will be a huge important protocol going forward and having resolution frameworks for these types of edge cases fills many weak points of governance.

5 Likes

Finally someone gets it.

ETH has no ā€œin-protocolā€ governance mechanism other than forking. Giving stETH governance capability is basically attempting to enshrine some governance mechanisms at the EVM level.

Lido should be aiming to reduce governance exposures, not increase it.

1 Like

Yes, I very much agree with this point of view, the team should pay attention to the veLDO option.

1 Like

Why does veLDO matter?

  • Dominate power is naturally risk aversion. With veLDO mechanism, some of the dominate powers(hold at least 5M $LDO) will hesitate to lock up all their token. If they did so, that would bound their interests closer to the long-term goal of Lido, and will prevent them from anything that will hurt the community.

  • veLDO will give newcomers a chance to leverage their power in governance. Assuming the maximum lock up time will be 6 years and decrease linearly. A community member who locked up 1M $LDO for 6 years, will have the same power as those who locked up 6M $LDO for 1 year. This will encourage more new members to join Lido DAO and make the whole community stronger.

2 Likes

Thank you so much for summarizing and bringing up great questions! Iā€™ll try to provide my perspective here, hoping that other community members will weigh in as well.

I donā€™t have the data readily available at hand (maybe @irina can help here), but Iā€™m definite that these two are very distinct sets. You can get some stETH metrics here: https://dune.com/LidoAnalytical/Lido-Finance-Extended.

Judging from Etherscan data, about half of total stETH supply is held by three protocols: AAVE (31.5%), Curve (12%), and Maker (5.5% via wstETH token). The rest of stETH is distributed in a much more diverse way, and for the three protocols, it would be both very damaging reputation-wise and non-trivial technically (theyā€™ll need to vote for a protocol upgrade) to use stETH they hold in a Lido veto voting.

The fact that Lido is a multi-chain service is one of the causes of the principal-agent problem this proposal tries to address: due to the Lido governance having power on other chains, LDO holders (the agent) may have incentives that are misaligned with Ethereum stakers (the principal).

While I beleive that the Ethereum liquid staking protocol is the central service Lido provides, and will remain so in a foreseeable future (and, as far as I can tell, the whole team beleives the same), the mere possibility of having non-aligned incentives justifies introduction of a safety mechanism like the one proposed here.

That said, multi-chain governance is just one cause of the principal-agent problem which is present even in mono-chain setups.

While I think this is a good outcome for Ethereum given that Lido will be able to eventually ossify its core contracts, there are other optimal outcomes, e.g.: most stake being taken by small independent entities each holding 1-2% of stake at most; an oligopoly of staking solutions with varying degree of centralization, each taking no more than 10-15% of stake; 3 largest solutions taking 90% stake, but each a with sufficiently decentralized validator set and network-aligned governance. The question is whether these other optimal states are reachable, and the opinions here vary greatly accross the Ethereum community.

In my opinion, the most probable outcome is the largest service taking the majority of stake (say, 50-60%), with the next 30-40% being distributed between 3-5 large solutions. In this case, itā€™s critical for the largest service, be it Lido or some other solution, to provide a robust and diverse validator set and to be aligned with stakers.

Integration of liquid staking mechanics into the base protocol should result in a less complex and more liquid setup. But that doesnā€™t mean this setup will be more decentralizedā€”Iā€™d argue it will be quite the opposite.

Given that ETH is not and should not be a governance token, the stake distribution mechanism has to be non-opinionated and completely based on data available onchain, which basically means that any entity would be able to register as many validators as they can economically and operationally afford, no matter whether these validators are distributed jurisdictionally and geographically, whether mono-client or whitelabel setup is used, and so on.

This setup, combined with the effect of economies of scale, will result in the majority of stake being anonymously taken by large entities (and/or entities running whitelabel nodes) that have no incentives or obligations to decentralize and generally act in the best interest of the network and stakers.

One might think about some mechanism that allows bringing the meatspace data onchain to introduce decentralization incentives (and weā€™re actually researching this as part of the Lidoā€™s upcoming permissionless node operator subset), but itā€™s a very complex research that will require multiple iterations over several years. Moreover, integrating it into the consensus rules will make the latter significantly more complex and fragile, so Iā€™d argue that the best place for the validator set selection mechanics is still the more flexible execution layer.

7 Likes

I think the community should take veLDO mode as seriously. Although the treasury has enough LDO to incentivize LP currently, it is not sustainable. When we are in the bear market with cheaper and cheaper LDO price, the incentive action indicates sending tons of governance powers to NON-LIDOer in a cheaper price, which could cause a more centralization governance problem. Everyone has to admit Lido cannot ignore LDO. Why not construct a more health token economy.

5 Likes

Thank you @skozin for all the thoughtful replies ā€“ makes sense on all of them. And yes I also suspect thereā€™s a very wide range of opinions across the ethereum / Lido communities particularly on the last two questions (Lido market share and enshrined liquid staking).

I am not sure where I personally stand definitely on either.

On decentralization incentives, itā€™s a interesting idea for sure. One could imagine a quadratic distribution mechanism (with community governed parameters such that we can adjust the degree to which it is linear vs superlinear vs quadratic or something more extreme).

1 Like

Vote escrow is a nice mechanics but itā€™s not without deficiencies, at least in the plain form. The main one is that the locking mechanism can be easily circumvented by using a smart contract and introducing a market for locked voting power. If not prohibited on either code or incentives level, this market will naturally arise (e.g. see Convex and cvxCRV token).

For example, it can work like this:

  1. You send your LDO to a smart contract. The SC locks your LDO for a max period, receives non-transferrable veLDO, and mints you a transferrable xLDO.
  2. The SC allows you to get LDO back by burning xLDO and waiting for a lock period to pass.
  3. The SC allows xLDO holders to collectively use veLDO for voting for/against some Lido governance decision by running an internal vote among xLDO holders and voting for the leading outcome.

This way, weā€™ll end up with a more centralized governance without any benefits from the locking mechanics (since xLDO is still transferrable and will have a liquid market).

This can be dealt with by prohibiting smart contracts from minting veLDO. This is a very efficient technique but it prevents voters from using decentralized escrows or multisigs like Gnosis Safe for holding their LDO, which I donā€™t think is acceptable.

Unfortunately, EVM doesnā€™t allow to get the complete call stack, only the first (tx.origin) and previous (msg.sender) addresses, so there seems to be no easy way of adding a whitelist of smart contract proxy and implementetion code hashes to allow well-known multisigs.

One complex way of doing this may look like this:

  1. Split veLDO minting into two transactions: transferring LDO and receiving veLDO.
  2. Transferring LDO to the minting SC (first transaction) gives the address the right to later either mint veLDO or receive LDO back.
  3. Minting veLDO (second transaction) requires the caller to provide a Merkle proof of the first transaction that allows the SC to check whether the multisig proxy and impl code is whitelisted, whether it was invoked by a EOA, and whether the invocation directly transferred LDO (in contrast to invoking some other SC).
  4. If the proof is correct and all checks pass, veLDO is minted to the LDO sender address. Otherwise, LDO is returned to that address.

Itā€™s not an easy thing to implement but itā€™s doable (though adding each new multisig implementation to the whitelist will take a lot of development time and effort).

One more consideration to keep in mind is that blocking or whitelisting smart contracts doesnā€™t prevent a centralized version of the voting power market from emerging.

3 Likes

Appritiate your kindness and patient response. Some of the technology implementation details are quite clear, which I havenā€™t deep dive before.

I know how influential Convex is inside the Curve ecosystem. No need to mention what a significant role it plays in the Curve stETH-ETH liquidity incentive plan. As you have said, it is unacceptable to take action to prevent it with the risk of collateral damage.

Here is the question: Even if veLDO will not be adopted, could these risks be immune based on the current conditions? Whatā€™s the difference between LDO governance and veLDO governance while facing the threat?

IMO, just like you canā€™t prevent the other LSD protocol breaking the market share threshold even if we take a self-limited cap. If there will be huge interests in the LDO governance power, there will be some Convex alike protocol emerge and take that role. At that time, a decentralized and strong community will stand out and protect Lido from such attacks.

After the dual governance model is implemented and we go to the minimum governance model, the main $LDO governance may focus on DAO treasury management. The reason that I strongly recommend the veLDO mechanism is simply because of the deep demand for restructuring the Lido governance power. By the end of 2022, about 85% of the total $LDO supply will be unlocked and held in a small group of holders. TBO, at that time, I would feel ashamed to participate in Lido governance without 5M $LDO in my bag. Even though veLDO may not be perfect to solve all the issues we are facing, it is still providing a reliable solution to somehow balance the power.

Looking forward to more inspiring insight on this proposal.

2 Likes

So is there a better way? Now LDO is also very centralized.In my opinion, LDO+stETH dual governance simply weakens the rights and interests of LDO, resulting in LDO becoming less and less valuable in the future, and even losing the necessity of existence. this is not good.

2 Likes

å¦‚ęžœldoēš„ä»·å€¼č¢«čæ›äø€ę­„减少ļ¼Œęˆ‘ęƒ³äøå‡ŗęˆ‘ęŒęœ‰å®ƒēš„任何ē†ē”±äŗ†

1 Like

It actually introduces another question that one-token-one-vote is a good governance way? For current Lido, I donā€™t think so coz the top 100 token holders could decide any thing here.
I agree that veLDO mode somehow introduces the bribe model later but it could accummulate the power from the holders with the small amount. To avoid the bribing project with too much power, we could set a upper voting limit for the project(like 10%, the number is not absolute and fixed for all voting cases), which should be considered for the top token holders as well. Also, we could increase stETH holder veto power to avoid LDO centralization governance in this case.

To explore a real decentralization governance, we still have a long way to go.

when the market emerges, it means more competition as well.

2 Likes

Nothing in ve-model solves the principal-agent problem between LDO stakeholders and stETH holders. If anything, it exacebrates them by explicitely embracing short-term vote bribing. Itā€™s got its flaws and benefits, but I donā€™t think discussion of them in this proposal would be fruitful because itā€™s completely orthogonal to the main thing here.

Principal-agent problem can be solved by reducing agentā€™s (in that case LDO holders) power or by increasing principalā€™s power. Reducing LDO power is a great goal, but unachievable until Ethereum ossifies enough. Hence, if we are to do anything with principal-agent problem at all, we are left with empowering stETH holders in some way.

6 Likes

@vsh yeah, fully agree here. This discussion, though interesting, is definitely out of scope of this proposal.

The vote escrow model was mentioned as part of the ā€œBurn rogue LDOā€ option as a means of locking LDO being used to voteā€”as this option requires LDO immobility for the main vote+veto vote period. But it can also be achieved without the ve-model, e.g. we could require the voter to lock LDO into the voting contract for the mentioned period.

1 Like

I canā€™t fully agree that ve-model has nothing to do with the problem between LDO stakeholders and stETH holders. Yes, dual governance can somehow enhance the balance of power between LDO stakeholders and stETH holders, but the redistributed of stakeholders power also can help that balance more stable.

Letā€™s take a look at Balancer, which was recently adopted the ve-model.


https://dune.com/queries/936870

This is a scatter chart of the current veBAL vote power(top 300 holders, X-axis: lock period /month, Y-axis: veBAL). Yes, bribe protocols have integrated with veBAL and hold about 40% of total vote power. But, letā€™s zoom in the chart and exclude the two bribe protocols temporarily.

https://dune.com/queries/936870

From the above chart, we can see that most of the top holders chose to lock at the max period of time. Without a strong faith in common interests and beliefs, your power will be slashed, just like this guy.

If the lock-up time cap is set at 4 years for even more, the power will be more decentralized and healthy.

Back to the third-part bribe attack risk issue. Considering that the total share among all the $LDO holders, excluding the top 100, is about 7% of the total supply, itā€™s really hard for an external player to do so.

The problem
The root cause of Lido governance introducing additional risks is a principal-agent problem between stakers (the principal) and LDO holders (the agent). The problem exists because LDO holders donā€™t have the exact same incentives as stakers.

To be honest, not to mention a ā€œsame incentivesā€, to some extent, it is the thousands of mediocre LDO holders supported the stakersā€™ interests( the best liquidity on DEXs and LP rewards). The ve-model may give them a much more decentralized and widely adopted future of the DAO.

If ā€œThe problem exists because LDO holders donā€™t have the exact same incentives as stakers.ā€, then give them.

The above assumption is calculated based on the ve-model implemented, and most of the variables did not change rapidly in the near future. If, I mean if, it comes to the reality, the LDO holders(the agent) can have a 3~4% APR, which is somehow close to the stakersā€™(the principal) return, and bundle the LDO holders(the agent) more closely to the stakers(the principal).

My point is: I canā€™t find anyway, besides the ve-model, that could probably turn the atmosphere among the mediocre stakeholders from stifle to a bit of fresh air. If you have, just name it.

3 Likes

I enjoy this article. I think it will help. You should read about it. We can see how different kinds of tokenmics influence the tokenā€™s value

2 Likes

Appreciate your reference article. ve-model adoption doesnā€™t mean we donā€™t make any adjustment on the existing role models. The alternatives mentioned in the article are also pretty inspiring.

To be honest, if the tokenomics distributed more shares to the DAO treasury and much longer vesting design, I may not be so eager to call for a restructure of governance power. In my mind, thatā€™s the original sin. The result is concentrated governance power and lack of governance participated. Over the past year and a half, only 84 addresses have ever participated in the Aragon on-chain voting. The off-chain snapshot voting looks a little bit better, with 1184 voters. But, as you look through all the snapshot proposals, you will find that only 2-3 ended with the ā€œAgainstā€ among all 92 proposals. The most equal balanced votes appeared in the " Proposal: LDO Treasury Diversification - Part 3 (updated)" proposal. I canā€™t say ā€œthis is wrong!ā€, but I have to say that ā€œthis is not right!ā€.

2 Likes

Let me post my last words on this proposal with a quotation.

ā€œPower is when we have every justification to kill and we donā€™t.ā€

ā€œYou think thatā€™s power?ā€

ā€œThatā€™s what the emperors had. A man stole something. Heā€™s bought in before the emperor. He throws himself down on the ground. He begs for mercy. He knows heā€™s going to die. And the emperor pardons him. This worthless man, he lets him go.ā€

ā€œI think you are drunk.ā€

ā€œThatā€™s power, Amon. Thatā€™s powerā€

2 Likes

also note that 95% of people in crypto are absolute idiots

a $1 billion valuation is considered a unicorn and very difficult to obtain

LDO pretty much started as a unicorn

founders dumping in first 1-2 years is never a good sign

why are they not locked up for 4-6 years? lol

they get paid a salary and LDO tokens. they control the dao, to them keep it status quo, ā€œgovernanceā€ baby

dump on the idiots

notably vitalik announces when he sold eth

perhaps the founders here can announce if they sold and how much, cuz otherwise is it not shady and unethical?

1 Like

Blockchain data is pretty transparent and u could use some tools like Dune to find all you want.

1 Like