Cosmos Hub Improvement Proposal (CHIP): Validator Vote Power Cap
Summary
This proposal introduces a vote power cap for validators in governance. The mechanism would ensure that no validator can unilaterally cast more than a fixed share of delegated voting power (e.g. 3%), while preserving both:
- The autonomy of delegators, whose votes are never reduced or capped if cast directly.
- The self-delegated stake of validators, which remains fully effective and is not subject to the cap.
This aims to mitigate governance centralization risks while maintaining the security and economic integrity of the staking system.
Motivation
The Cosmos Hub governance process inherits validator voting power from the staking module. Today, large validators may control substantial fractions of the voting power, particularly if delegators do not vote directly. This concentration creates several issues:
- Governance centralization: A handful of validators can disproportionately influence outcomes.
- Reduced delegator sovereignty: Passive delegators effectively cede control to their validator, potentially against their intended interest.
- Misalignment of roles: Validators are primarily responsible for network security and operations, not unilateral political decision-making.
The proposed mechanism seeks to rebalance governance power by enforcing a ceiling on how much delegated vote power a single validator can cast. This nudges the system toward broader participation, reduces systemic risks, and aligns with the Hub’s values of neutrality and decentralization.
Proposal Design
Core Mechanism
-
Validator Vote Cap:
- Each validator’s delegated voting power is capped at a fixed fraction of total voting power (e.g., 3%).
- Self-delegated stake is excluded from this cap and always counted fully.
-
Delegator Override:
- Any delegator voting directly retains full voting rights, independent of the cap.
- Only delegated stake that defaults to validator voting is subject to reduction when a validator exceeds the cap.
-
Adjustable Parameter:
- The cap (expressed as a percentage of total voting power) is a governance parameter that can be modified through on-chain governance.
Example
-
A validator controls 10% of the Hub’s total delegated stake.
-
The governance-defined cap is set at 3%.
-
At tally time:
- The validator’s self-delegation is fully included.
- The validator can only exercise 3% of delegated stake.
- Remaining delegations (7%) remain fully available if delegators vote directly.
Implementation Considerations
- Module changes: Requires modification to the x/gov tallying logic to introduce the cap at the level of validator-delegated votes.
- Staking alignment: Does not alter validator voting power for consensus or block production — this is purely a governance rule.
- Transparency: Governance proposals and tally results should clearly display capped vs. uncapped vote shares to improve understanding.
- Flexibility: Initial cap can be set conservatively (e.g., 3%) and adjusted over time based on observed impact.
Benefits
- Decentralization of governance outcomes.
- Encouragement of delegator participation — especially among delegators currently passive.
- Reduction of systemic governance risks associated with validator concentration.
Potential Risks & Mitigations
- Validator opposition: Larger validators may argue this reduces their governance influence. Mitigation: the cap excludes self-delegations and does not affect consensus security.
- Implementation complexity: Requires precise modification to x/gov tally. Mitigation: we proposed a PR diff example in the appendix below to demonstrate how little changes this mechanism introduces.
- Passive delegator inertia: If delegators remain inactive, capped votes may remain unused. Mitigation: community education and improved UX for direct voting.
Next Steps
- Community discussion: Gather feedback on the principle, threshold (e.g., 3%), and design details. Propose initial cap value and procedure for future adjustment.
- Technical specification: Work with Cosmos SDK contributors to define exact changes to the tallying process. We provided a PR diff suggesting changes in the appendix section of this post to highlight the relative simplicity of the proposed changes.
- On-Chain Constitution Amendment: Draft an on-chain legally binding constitution document making it clear that any entity caught in allegedly duplicating validators to avoid this cap will be subject to sanctions. Additionally, it is worth exploring further mitigation measures to prevent custodial entities tempted to bypass this cap. It should be stated that custodians cannot self-delegate the assets of their clients, as well as casting direct votes on these accounts. Infringement of said rules should leverage on-chain votes, including tombstoning of entities involved in the misconduct and an elevated %slashing of their delegations to discourage any attempt.
Conclusion
By introducing a validator vote power cap, the Cosmos Hub can strengthen decentralization, reduce governance capture risks, and reinforce the principle that governance is a collective responsibility shared across all stakeholders, not concentrated in a few validators.
This CHIP presents a pragmatic and adjustable path forward to align governance more closely with the Hub’s mission of neutrality and resilience.
Updated on 10/8/25 :
Incorporating feedback from the community we proposed to adjust the parameter to 3% instead of 2%. This is meant to ensure quorum is not affected in the early days, leaving room for future lower adjustments if necessary.
Appendix:
In order to facilitate the CHIP process, we built a proposed PR diff example demonstrating how simple it could be to implement the vote-power cap feature in the x/gov module. Our demonstration includes:
- New governance params: VotePowerCap (sdk.Dec) and VotePowerCapEnabled (bool).
- Param registration and validation.
- A concrete change to the Tally implementation that caps only delegator-defaulted voting power for each validator while excluding self-delegation and preserving delegator direct votes.
- Migration skeleton to add the new params at upgrade time.
- A focused unit test template that covers the main behaviors.
To avoid bloating this post we invite community members interested in this PR to look at this document: CHIP: Validator Vote Power Cap - Google Docs