Blockchain assets are increasingly controlled by organizations rather than individuals. DAO treasuries, consortium wallets, and custodial exchanges rely on threshold authorization and multi-party key management, yet existing payment mechanisms still target single-user wallets, leaving no unified solution for organizational transfers. We formalize the problem of \emph{DAO-to-(anonymous)-DAO} transactions and present \textsc{Dao$^2$}, a framework that enables one threshold-controlled organization to pay another, optionally with recipient anonymity, while keeping received funds under distributed control. \textsc{Dao$^2$} combines three components: \emph{distributed key derivation} (DKD) for non-stealth child addresses, \emph{distributed stealth-address generation} (DSAG) for unlinkable one-time destinations, and \emph{threshold signatures} for authorization. For ordinary transfers, the receiver derives a non-stealth address via DKD; for anonymous transfers, it derives a stealth address via DSAG. The sender then threshold-signs the payment, and the receiver redeems the funds without reconstructing any master secret. We formally prove its security and evaluate a prototype. A complete anonymous DAO-to-DAO transaction for a typical-sized (e.g., 7-member) DAO finishes in under 27\,ms with less than 1.2\,KB of communication, and scales linearly with DAO size.

翻译：区块链资产日益由组织而非个人控制。DAO金库、联盟钱包和托管交易所依赖于阈值授权和多密钥管理，然而现有的支付机制仍针对单用户钱包，缺乏统一的组织转账解决方案。我们形式化定义了“DAO到（匿名）DAO交易”的问题，并提出了\textsc{Dao$^2$}框架，该框架使一个阈值控制组织能够向另一个组织支付，可选择接受者匿名，同时保持接收资金处于分布式控制之下。\textsc{Dao$^2$}结合了三个组件：用于非隐形子地址的分布式密钥派生（DKD）、用于不可关联一次性目的地的分布式隐形地址生成（DSAG）以及用于授权的阈值签名。对于普通转账，接收方通过DKD派生出非隐形地址；对于匿名转账，则通过DSAG派生出隐形地址。发送方随后对支付进行阈值签名，接收方在不重建任何主密钥的情况下赎回资金。我们正式证明了其安全性并评估了原型。对于典型规模（例如7成员）的DAO，一次完整的匿名DAO到DAO交易在27毫秒内完成，通信量低于1.2 KB，且与DAO规模呈线性扩展。