If you plan on doing this with a smart contract or DAPP on the EVM, I highly suggest that you thoroughly vet the code before releasing. The community doesn't need another theDAO fiasco. The Solidarity language has some vulnerabilities, and it does not appear anyone is clear on how to program around them or if it is even possible to program around all of them.(Except for the most simple code structure, which your project seems to demand a much higher degree of complexity.)