BLOCKCHAIN technology is often hailed as “trustless” — but is it really? Blockchain transactions are validated by code, recorded on immutable ledgers, and executed automatically through smart contracts. In theory, there is no need to place trust in anyone. But if no one is in charge, who is accountable when things go wrong? As Malaysia deepens its engagement with digital assets, tokenised finance and blockchain-based platforms, blockchain governance is not just a technical or legal issue — it is a business and regulatory issue at its core.
Blockchain systems operate on decentralised networks governed by consensus mechanisms rather than traditional hierarchies. Yet decentralisation does not remove governance; it simply reshapes where power resides. The distribution of power varies depending on the type of blockchain. Public blockchains combine on-chain governance, where token holders vote on upgrades, with off-chain governance driven by developers, validators, foundations, and community debate. Private blockchains, in contrast, rely on organisational governance, with a single entity or consortium controlling participation and rules, often using simpler consensus mechanisms. In practice, governance reflects a mix of technical expertise, stakeholder influence, and code-based rules. Network upgrades are one key governance practice, requiring coordination, debate, and decision-making to maintain network integrity. For example, the recent Ethereum upgrades, such as the Fusaka upgrade that took place on Dec 3, 2025, involved extensive human decision-making and debate over which Ethereum Improvement Proposals (EIPs) to adopt.
This illustrates a broader lesson for businesses: even systems designed to be automated require clear governance, structured oversight, and accountable decision-making. Similarly, companies must embed robust governance frameworks to manage risk, ensure transparency, and accountability. Poor governance can lead to financial, operational, reputational losses, and regulatory penalties. By embedding governance into systemic processes, blockchain can enhance transparency, make transaction flows fully traceable, and reinforce accountability across organisational operations. The phrase “code is law” suggests software executes rules automatically, yet code is never neutral. It reflects developers’ choices, assumptions, and priorities, shaping rights, obligations, and outcomes, which go beyond technical settings.
Blockchain does not eliminate trust but relocates it. Instead of trusting a central authority, users place trust in the integrity of the protocol, the competence of developers, the incentives of validators, and the governance processes that guide upgrades and resolve disputes. Trust shifts from institutions to systems and to the people who design, maintain, and oversee those systems.
In Malaysia, blockchain activities are shaped by a multi-layered regulatory framework drawing from securities regulation, financial services rules, company law, anti-money laundering (AML) requirements, and general contract principles. These laws regulate activities, market conduct and accountability. Yet they do not expressly govern how decentralised networks allocate power, approve protocol changes or structure internal decision-making. For businesses exploring blockchain integration, such as tokenisation, decentralised finance, governance and due diligence must extend beyond technology. It must examine governance structures, including decision-making authority, voting rights allocation, protocol upgrade mechanisms, dispute resolution processes, accountability frameworks, and regulatory exposure.
Blockchain emerged as a technology to reduce dependence on human intermediaries. It promises transparency, efficiency and automated execution. Yet the promise of full automation is often overstated. Behind every protocol, it reflects human design, incentives and oversight. Sound governance still depends on human stewardship — to set the rules, manage risks, and intervene when the system is tested. For businesses, adopting blockchain is not just about implementing technology; it also requires robust governance structures that establish accountability and risk management, ensuring transparency, trust, and operational resilience.
As blockchain technology extends beyond cryptocurrency and finance, the real competitive advantage lies not just in faster transactions or smarter contracts, but in clearer and more effective governance frameworks. While technology can automate processes, record transactions immutably, and reduce reliance on intermediaries, but without effective governance, transparency, and accountability, these technical capabilities alone may still fail to build trust, to ensure operational resilience and maintain investor confidence. Businesses that integrate proper governance for blockchain integration — such as defining roles, decision-making protocols, and risk oversight are better positioned to capture market value, manage risk, and gain competitive edge in an increasingly digital and complex marketplace.
Ultimately, decentralisation does not remove the human element completely. Even in systems designed to run automatically, trust still has a human element, which is reflected in the design and choices of developers, validators, regulators, and corporate decision-makers. The allocation of power, the design of incentives, and the management of risk all involve negotiation, collective judgement and human oversight. These hidden dynamics shape outcomes just as much as the code itself, revealing the politics that underpin blockchain governance. Understanding this human dimension is essential for businesses, investors, and regulators seeking to navigate the promises and pitfalls of blockchain technology and its governance.
Dr Wong Wai Wai is senior lecturer at the faculty of law, University of Malaya, and author of “The Law of Smart Contracts” (2024) and “Trust and Corporate Governance in Digitalization” (Sweet & Maxwell, 2026)