2026-05-10 –, Sladkovský Stage
In the "code is law" era, governance is the ultimate attack vector. This session outlines a hardened security architecture used by ZKsync: 3-Body Governance (Token Holders, Guardians & Security Council), layered technical resilience via audits and whitehat incentives, and stronger accountability via token mechanics & compliance. Learn how to build incorruptible systems to defend decentralization.
In the "code is law" era, protocol governance isn't just a community tool - it is the ultimate attack vector. While many ecosystems rely on a single Security Council as a safety net, true protocol sustainability requires a more expansive strategy that integrates technical safeguards with human accountability.
This session explores a tiered framework for governance security that balances decentralization with rigorous risk management. We will move past the basics of voting to discuss:
- 3-Body Governance: Why requiring review & approval from token holders, trusted ecosystem Guardians and a professional Security Council is essential for preventing governance capture.
- Layered Technical Resilience: Integrating professional audits and whitehat incentives directly into the governance lifecycle.
- Enforceable Accountability: Transitioning from "trust-based" program execution to programmatically enforceable token mechanics and required KYC/KYB for program admins and program recipients.
Drawing on real-world implementation examples from ZKsync, I will provide a modular model that other protocols can reference and adopt to ensure their governance is not just decentralized, but incorruptible. Attendees will leave with a checklist for evaluating and upgrading their own governance system’s security architecture.
With 4.5+ years of governance operator experience, I currently support the ZKsync ecosystem as the Governance Experience Lead. This includes being the core maintainer of all ZKsync governance documentation and resources, managing all governance interfaces and tooling to enable smooth governance operations, and supporting token mechanics design and deployment.