"DeFi" stands for "decentralized finance" — a collection of crypto applications that try to recreate traditional financial services (lending, trading, yield) without using banks. The pitch is compelling: higher yields, no permission needed, no intermediary taking a cut.
The pitch is mostly true. The pitch also leaves out the parts that get people hurt.
What DeFi actually offers
Three core services dominate:
- Decentralized exchanges (DEXs) — Uniswap, Curve, Trader Joe. Swap one token for another without an account. Cheaper than CEXs for small trades, generally more expensive for large ones due to slippage.
- Lending protocols — Aave, Compound, Morpho. Lend your crypto to borrowers, earn yield. Borrow against your crypto without selling it.
- Yield farming — Provide liquidity to various pools, earn a share of the fees plus often additional tokens as incentives.
All of this runs on smart contracts — programs that live on a blockchain. There's no human admin who can stop a transaction once it's executed (mostly). That's the "decentralized" part.
The yields are real (mostly)
Yields on the major lending protocols for stablecoins typically range 3-8%. Yields on more exotic activities (yield farming with token incentives) can be 20%+ when active, but those tend to decay fast as more capital chases them.
This is structurally higher than what a bank pays. Why?
- No intermediary taking margin. The interest borrowers pay flows mostly to lenders.
- Stronger competition for capital. Protocols offer rates to attract liquidity.
- Sometimes: token incentives subsidized by the protocol's treasury.
The catch is that the "no intermediary" part also means "no insurance, no recourse, no regulation." All of which matter when something goes wrong.
The risks that actually matter
1. Smart contract bugs
DeFi protocols are software. Software has bugs. When the bug is in a contract holding $100M in user funds, the consequences are severe.
The 2022 Ronin Bridge exploit lost $625M. The 2023 Curve exploit lost $61M. The 2024 Radiant Capital exploit lost $58M. These weren't shady projects — they were among the largest and most reputable in DeFi at the time.
Major protocols mitigate this with extensive audits and bug bounties. But "audited" doesn't mean "exploit-proof." Several major exploits happened to audited code.
2. Liquidation risk for borrowers
If you borrow against your crypto in DeFi, you're using over-collateralized loans. You deposit, say, $10K of ETH and borrow $5K of USDC. If ETH drops enough that your collateral approaches the loan value, the protocol liquidates you — sells your collateral on-market at a discount to repay the loan.
The discount is real, the gas fees during a liquidation are high, and the speed at which this happens is fast. Multiple users have woken up to find their collateral half gone after a flash crash they slept through.
If you borrow in DeFi, you have to actively monitor your loan-to-value ratio. This is not a "set and forget" product for borrowers.
3. Impermanent loss for liquidity providers
If you provide liquidity to a DEX pool (e.g., ETH/USDC), you earn trading fees. You also expose yourself to "impermanent loss" — when one side of the pool gains a lot of value, you end up with less of the gainer and more of the loser than you would have had by just holding.
In a bull market for ETH, an ETH/USDC liquidity provider might earn 5% in fees but lose 15% versus just holding the ETH. The "yield" was real but the alternative was better.
4. Stablecoin de-pegs
Most DeFi runs on stablecoins. If a stablecoin de-pegs (loses its $1 value), every pool holding it suffers. UST's collapse in May 2022 took down billions of dollars in DeFi alongside it.
5. Protocol governance attacks
Some DeFi protocols are "governed" by token holders. If someone acquires enough governance tokens, they can vote in changes that drain the treasury. This has happened.
What works in DeFi
Despite the risks, some DeFi use cases work consistently well:
- Stablecoin lending on top-tier protocols. Aave's USDC market is one of the most battle-tested products in crypto. Yield is modest (3-5%), risk is manageable, capital is liquid.
- Spot DEX swaps for small amounts. Cheaper and faster than CEX withdrawals for most trades under $10K.
- Borrowing against crypto when you need short-term liquidity. Better than selling if you have tax-disposition concerns and you're disciplined about LTV.
What to avoid
- Yield products promising over ~10% on stablecoins without a clear source of that yield. The yield is almost always a token incentive that's about to evaporate.
- Brand-new protocols. Wait at least a year and a major audit cycle before depositing meaningful funds.
- Unaudited contracts. Even audited ones get exploited. Unaudited ones have no excuse.
The honest take
DeFi is one of the more interesting things crypto has produced. The lending side is genuinely useful. The DEX side has changed how trading works. The yield farming side is mostly a casino.
For a small investor: lending stablecoins on Aave or Compound is a reasonable thing to do with some of your stablecoin holdings. Everything else in DeFi requires more attention than most people are willing to give it.
If you can't articulate where the yield is coming from, that's the warning. Real yields have explanations. Fake ones don't.
Crypto is volatile. DeFi protocols have failed and will fail again. None of this is financial advice.