CODE IS LAW

The phrase "code is law" is often misinterpreted – sometimes by earnest seekers, and often intentionally by opponents of the powerful message it conveys.

Far from a literal statement, "code is law" means that code: resembles, should be, must be, and will inevitably be treated as law in the execution and arbitration of smart contracts.

Here is the argument for each.

Law Is Code

While code is not literally law, law is a form of code; the two bear striking similarities.

Legal "code" is a set of rules, much like smart contract code.

The main differences are in its interpretation and enforcement – legal code is interpreted by courts; it is enforced through violence and coercion.

Traditional law is interpreted by courts and enforced through violence or the threat of it.

Smart contracts are self-executing, interpreted by a compiler, and enforced through economic incentives.

As they share similar form and function, code makes a suitable replacement for law in the interpretation and enforcement of smart contracts.

The replacement of the traditional legal system in this domain is both moral and practical.

Code Should Be Law

"Code is law" can be interpreted as a statement that enforcement through economic incentives is more ethical than enforcement by violence and coercion.

This is particularly fitting where an alternative is possible, and where laws do not have the consent of the governed.

But "should" – used in a moralistic sense – is a blue-pilled word. It's also a rejection of reality. Ought implies can.

Fortunately for the cypherpunks, code as law in the domain of smart contracts is not only practical, it is proven.

Code is not only a more suitable alternative to law in the enforcement of smart contracts.

For smart contracts to retain their defining properties, code must be their interpreter and enforcement mechanism.

Code Must Be Law

"DeFi" – decentralized finance is characterized by a lack of trusted third-parties.

Relying on courts for the arbitration of disputes in smart contracts changes their definition, and eliminates their value proposition.

The same is true of every trusted intermediary smuggled back into the stack.

A multi-sig is a committee. A security council is a court. An upgradeable contract with admin keys is a corporation with extra steps.

Each of these is a concession – a soft return to the system smart contracts were built to replace.

Governance is the same attack vector by a different name. Where code cannot be changed, votes can – and votes can be bought, accumulated, or simply outlasted.

Nouns is the latest example. The mechanism was not an exploit. It was the governance system working exactly as specified – a minority with sufficient patience accumulating sufficient votes to steer the treasury.

A DAO with meaningful power over funds is a court with a token-weighted bench.

The recent KelpDAO/LayerZero hack made the same point through a different vector. A single-verifier DVN configuration – a 1-of-1 trusted party dressed in decentralized clothing – was the point of failure.

Days later, Arbitrum's Security Council voted to freeze $71M in stolen ETH. Whether or not one agrees with the outcome, the mechanism is a multi-sig with the power to reach into the chain and move funds.

That is not DeFi. That is CeFi with a rollup.

THORChain, for its part, took the opposite approach and caught heat for it – the predictable cost of not having a lever to pull.

This is the tension: systems built to be censorship-resistant are only censorship-resistant when tested. Every trusted party inserted for safety is a trusted party that will be leaned on under pressure.

Smart contracts do not admit exceptions without ceasing to be smart contracts.

Code Will Be Law

Crypto moves in cycles. Every four years the industry forgets why it exists, reinvents the institutions it set out to replace, and gets punished for it.

Then it remembers.

The KelpDAO exploit, the Arbitrum freeze, the THORChain debate are all the predictable end state of a cycle that traded cypherpunk principles for convenience, yield, and regulatory goodwill.

Each cycle filters the field. Protocols that compromised on principle get captured, frozen, or shut down. Protocols that didn't, persist.

The survivors compound. The compromisers don't. After enough cycles, the only projects left standing will be those built on principle.

Code is law – not because cypherpunks decreed it, but because every attempt to make it otherwise has failed, and will continue to fail, on a long enough timeline.

The market selects for what cannot be stopped.