What is a DAO legal wrapper, and why does Brazil require one?
A DAO legal wrapper (a recognized legal entity placed around a decentralized autonomous organization to give it contractual capacity and defined liability) is not optional for any DAO that operates commercially in Brazil. As Brazil's Lei das Criptomoedas – the Virtual Assets Act – brings digital-asset activity under supervised oversight, an unwrapped DAO faces a structural contradiction: its members transact without a legal person, which means contracts may be unenforceable, bank accounts are unobtainable, and tax obligations fall on individuals rather than on an entity. The practical answer is to establish a Brazilian legal vehicle, or a recognized offshore structure with Brazilian registration, before the DAO executes its first revenue-generating smart contract. This guide walks through each step of that process, the cross-border variables that affect the choice of wrapper, and the classification questions that determine how the Brazilian Banco Central do Brasil and the Comissão de Valores Mobiliários (CVM) will view the tokens or instruments the DAO issues.
To map the right wrapper structure for your DAO before the first on-chain transaction, contact OBOLUS at info@oboluslaw.com.
Brazil's virtual-asset legal environment in 2025
Brazil's Virtual Assets Act established a statutory definition of virtual assets and assigned supervisory authority to the Banco Central do Brasil for payment-related activity and to the CVM for instruments that meet the legal definition of a security. That dual-authority structure is the first issue any DAO structuring exercise must resolve. A DAO that distributes governance tokens carrying economic rights – profit participation, revenue share, or redemption rights – is far more likely to attract CVM scrutiny than a DAO whose token is purely a vote-counting mechanism with no associated cash flows. The Banco Central, meanwhile, supervises virtual-asset service providers under the Virtual Assets Act, and a DAO that routes fiat settlement, stablecoin payments, or cross-border transfers through its infrastructure may trigger VASP registration requirements.
Brazil has not enacted a bespoke DAO statute. That absence forces practitioners to work within existing corporate and civil-law forms, each of which imposes different liability exposure, governance requirements, and tax treatment. In our cross-border practice, we have seen founders assume that an unwrapped DAO is simply unregulated. That assumption is incorrect under Brazilian law: absent a legal entity, the participants may be treated as an irregular sociedade em comum – an informal partnership in which every member bears unlimited joint and several liability. That is a materially worse outcome than any formal wrapper.
Step 1 – Classify the token before choosing the entity
Token classification under Brazilian law determines which regulator supervises the DAO, what disclosure obligations attach, and whether the chosen legal wrapper can lawfully issue the instrument. The CVM applies a substance-over-label test: the question is what rights the token actually confers, not what the whitepaper calls it. A token that entitles the holder to a share of protocol revenue, a proportional claim on treasury assets, or a guaranteed return is almost certain to be classified as a valor mobiliário – a security – regardless of whether the issuer calls it a utility token or a governance token.
The distinction matters at the entity level. A Brazilian sociedade anônima (SA) is the vehicle designed for public or semi-public issuance of securities and investment interests; a sociedade limitada (Ltda) is not optimized for securities issuance. A DAO issuing instruments that the CVM classifies as securities needs an SA or an offshore structure with CVM registration, not a Ltda. Getting this wrong converts a product launch into an unregistered offering – precisely the risk that careful pre-launch classification is designed to prevent.
The common mistake at this step is relying on the marketing label. A utility label on a whitepaper does not settle the legal classification; the CVM will look through the label to the substance of rights. We assess classification against those economic rights before any entity is formed or any token is issued publicly.
Step 2 – Select the legal wrapper form
Once classification is clear, the wrapper options divide into two broad paths: a domestic Brazilian entity or an offshore entity with Brazilian nexus. Each path has sub-variants, and the right choice turns on the DAO's token type, revenue model, banking needs, and the residence of its active contributors.
Domestic options. The sociedade limitada offers a simple and low-cost formation process, limited liability for quotaholders, and flexibility in the operating agreement (contrato social). It is suitable for a DAO whose activity is confined to software development, whose token is a non-economic governance instrument, and whose contributors are primarily Brazilian residents. The sociedade anônima is more complex and more expensive to maintain, but it is the correct vehicle if the DAO intends to issue tokens with economic rights to a broad base of holders, because the SA framework accommodates varied share classes and the CVM's securities-law regime maps onto it.
Offshore options. A Cayman Islands foundation company or a BVI company are established vehicles in the global DAO wrapper space. The Cayman Islands Monetary Authority (CIMA) operates a VASP regime, and the BVI Financial Services Commission operates the Virtual Asset Service Providers Act 2022. Using an offshore entity requires Brazilian registration – under Brazilian foreign-investment rules, a foreign legal entity operating commercially in Brazil must be registered with the Junta Comercial and the Receita Federal. The offshore entity does not escape Brazilian tax or regulatory reach; it adds a layer of structural flexibility and, in some configurations, access to common-law trust and fiduciary tools that Brazilian civil law does not provide.
The decision matrix in brief: a domestic Ltda suits a non-securities, developer-contributor DAO with a primarily Brazilian community; a domestic SA suits a token-issuing DAO targeting Brazilian retail or institutional holders; an offshore foundation with Brazilian branch suits a globally distributed DAO that needs civil-law insulation for its Brazilian activities and access to international banking.
If you are between the domestic and offshore paths and need a clear recommendation, write to OBOLUS at info@oboluslaw.com. The analysis turns on facts specific to your token and your community.
Step 3 – Draft the governing documents
The governing documents of the legal wrapper must map to the DAO's on-chain governance in a way that avoids conflict. Where the DAO votes on-chain to allocate treasury funds, the legal wrapper's constitutional documents must authorize the directors or managers to execute that instruction. Where the DAO's smart contract auto-distributes fees, the wrapper's operating agreement must characterize and account for those distributions correctly for Brazilian corporate and tax law purposes.
Three drafting points are non-negotiable. First, the wrapper documents must define clearly which actions require on-chain governance approval and which the directors may execute unilaterally – ambiguity here creates both governance risk and regulatory risk. Second, the documents must address the treatment of token holders: are they members, creditors, licensees, or something else? That characterization affects CVM classification and the tax treatment of distributions. Third, if the DAO uses a multi-signature wallet as its operational treasury, the wrapper documents must designate the signatories and establish a conflict-of-interest and disclosure regime that satisfies Brazilian corporate-governance expectations.
A common mistake is using boilerplate offshore DAO documents without adapting them to Brazilian civil law. Brazilian courts and regulators will look to the substance of the arrangements, and a document designed for a Delaware LLC or a Cayman foundation requires material adjustment before it functions as the governance instrument of a Brazil-facing DAO.
Step 4 – Registration and regulatory filings
For a domestic SA or Ltda, formation follows the standard Brazilian corporate registration process: preparation of the contrato social or estatuto social, notarization, registration with the competent Junta Comercial, enrollment with the Receita Federal for a CNPJ, and, for SAs, the constitutional meeting and publication requirements. The process is well-trodden but not fast; timing varies by state and by the complexity of the share structure.
If the token constitutes a valor mobiliário, a CVM registration or exemption filing is required before the token is offered publicly. The CVM has a sandbox regime – the Sandbox Regulatório – that allows innovative token structures to operate under temporary authorization while the CVM's permanent framework develops. Eligibility for the sandbox requires an application demonstrating that the activity is genuinely novel and that the applicant can satisfy investor-protection conditions. We regularly advise on sandbox applications and on the alternative: structuring the token offering so that it qualifies for an available exemption from full registration.
If the DAO's activity constitutes virtual-asset service provision under the Virtual Assets Act – exchange, custody, transfer, or brokerage of virtual assets – a VASP authorization from the Banco Central is required. The Banco Central has published its licensing framework and is processing authorizations. Operating commercially before authorization is granted is a regulatory violation, and the Banco Central has signaled that it will enforce the requirement.
Step 5 – Tax and banking for a Brazil-facing DAO
Tax treatment of DAO activity in Brazil falls under the Receita Federal's general corporate income tax regime for domestic entities, supplemented by specific guidance on virtual assets that the Receita Federal has issued in recent years. Token issuance, protocol fee income, and treasury investment returns are all potentially taxable events. The characterization of a token as currency, financial asset, or equity instrument for tax purposes does not necessarily match its regulatory classification, and misalignment between the two can produce unexpected tax liabilities.
Cross-border distributions are the most complex variable. If the DAO's legal wrapper is offshore but its contributors, users, or revenue sources are in Brazil, Brazilian withholding tax and foreign-exchange reporting obligations apply to outbound payments. Brazil's Receita Federal and Banco Central require reporting of foreign-exchange flows above certain thresholds, and a DAO treasury that auto-distributes in stablecoins or native tokens must be structured so that those distributions do not constitute unreported remittances.
Banking is a practical constraint that the legal analysis cannot ignore. Brazilian banks have been cautious about onboarding digital-asset entities, and a DAO wrapper without a clear regulatory status – no CNPJ, no VASP authorization if required, no AML/KYC program – will not obtain a corporate account. The sequence matters: entity formation, regulatory registration, and AML program documentation all precede the bank account application. Operators we advise routinely underestimate the time and documentation that Brazilian correspondent banking requires; building that buffer into the project timeline is essential.
Step 6 – AML, KYC, and the Travel Rule
A DAO wrapper that constitutes a VASP under the Virtual Assets Act must implement an AML and KYC program that satisfies the standards set by the Conselho de Controle de Atividades Financeiras (COAF) and the Banco Central. Brazil applies the FATF Recommendations to virtual-asset activity, including FATF Recommendation 15, which requires VASPs to identify the originator and beneficiary of transfers and to apply risk-based customer due diligence.
The Travel Rule – the obligation to pass originator and beneficiary identification data alongside a virtual-asset transfer – applies to Brazilian VASPs and creates a specific compliance challenge for a DAO: the protocol may be non-custodial, but the legal wrapper that signs contracts, holds fiat, or executes transfers on behalf of the DAO is custodial in the regulatory sense. The Travel Rule compliance program must be designed for the wrapper's actual activity, not for the underlying smart contract's technical architecture. A DAO that believes its non-custodial design exempts it from Travel Rule obligations has almost certainly misread the Brazilian VASP definition.
Practical illustration – DAO restructure ahead of a token launch
In a recent matter, a protocol team based across Brazil and Europe had been operating an on-chain lending product for several months without a legal entity. The team engaged OBOLUS after their intended exchange partners required a legal counterparty before listing the protocol's governance token. We conducted a token classification analysis, determined that the economic rights attached to the token brought it close to the CVM's valor mobiliário threshold, and advised a restructure before any public offering. The team formed a Brazilian SA as the primary wrapper, amended the token's smart contract to remove the revenue-sharing mechanic that had triggered the classification risk, and prepared a CVM sandbox application for the revised instrument. The exchange listings proceeded on the revised structure within a timeline that allowed the team to hit its community launch window. No securities-law violation occurred because the restructure preceded the public offering.
Decision point – Which wrapper for which DAO profile?
Profile A: a DeFi protocol with Brazilian contributors and non-economic governance tokens. A domestic sociedade limitada is typically sufficient. Formation is relatively fast, the Ltda can hold treasury assets and sign contracts, and the governance token – if it carries no economic rights – is unlikely to require CVM registration. Key risk: if the token model changes post-launch to add economic rights, the entity structure and regulatory status must be reassessed immediately.
Profile B: a DAO issuing tokens with economic rights to a broad holder base. A domestic SA or an offshore foundation company with Brazilian VASP registration is required. The SA is the cleaner choice if the primary community is Brazilian; the offshore foundation is preferable if the majority of token holders are international and Brazilian activity is one of several jurisdictions. Timeline from concept to authorized operation is measured in months, not weeks, when the CVM process is involved.
Profile C: a globally distributed DAO with significant Brazilian revenue. An offshore entity – Cayman or BVI – with Brazilian branch registration and full VASP authorization from the Banco Central. This profile requires allied counsel in both the offshore jurisdiction and Brazil, coordinated AML/KYC programs, and careful cross-border tax structuring to manage Brazilian withholding obligations. In our practice, this is the most complex configuration and the one where early legal engagement saves the most cost.
If a prior structure stalled at the banking or regulatory stage, a structural review can identify the cause and the path forward. Contact OBOLUS at info@oboluslaw.com.
Related at OBOLUS
- DeFi, Tokenization & Smart-Contract Law – end-to-end legal advice for protocols, token issuers, and on-chain infrastructure
- Staking Service Legal Framework in South Korea – how Asian jurisdictions regulate validator and staking activity
- Travel Rule Compliance Program: The Structuring Angle – designing a Travel Rule program that works across multiple VASP registrations
FAQ
Can a DeFi protocol be regulated?
Yes. In Brazil and in most leading digital-asset regimes, the regulatory perimeter is defined by activity, not by the technical architecture of the protocol. A DeFi protocol whose legal wrapper accepts deposits, routes payments, or operates an exchange function falls within the VASP definition under Brazil's Virtual Assets Act. The Banco Central looks through the decentralized label to the economic substance of what the entity does.
What legal wrapper suits a DAO?
The right wrapper depends on the DAO's token classification, revenue model, and contributor geography. A domestic Brazilian sociedade limitada suits a non-securities, developer-focused DAO. A sociedade anônima suits a DAO issuing tokens with economic rights to a broad holder base. An offshore foundation – Cayman or BVI – with Brazilian registration suits a globally distributed DAO. Classification of the token must precede the entity choice.
Who is liable when a smart contract fails?
Without a legal wrapper, all active contributors may bear personal liability as members of an irregular partnership under Brazilian civil law. With a correctly structured wrapper, liability is limited to the entity, subject to standard corporate-veil principles. The governing documents must map clearly to on-chain governance so that a court can identify the responsible legal person. Smart-contract audits reduce technical risk but do not substitute for legal liability allocation.
About OBOLUS
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers, and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking, and compliance that sit around them. Digital assets are the entirety of our practice, and we act only for businesses – not for retail claimants or retail investors. We assess token classification against the substance of rights, not the marketing label; that approach has consistently allowed clients to restructure before a regulatory event rather than respond to one. To discuss your DAO structure, contact info@oboluslaw.com or message us at t.me/oboluslaw.
By Roman Levitt, Technology & DeFi Counsel – specializing in smart-contract legal architecture, token classification, and DAO structuring across Brazil and global DeFi markets.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.