DeFi's Appeal to Institutions Limited by Persistent Security Risks, JPMorgan Warns

According to JPMorgan, the persistence of security flaws in decentralized finance (DeFi) is hindering its appeal to institutional investors. The total value locked (TVL) in DeFi protocols, a key indicator of the ecosystem's size and health, has been stagnant, and recent exploits have exposed deep-seated structural risks. The KelpDAO exploit, which resulted in a $20 billion loss, is a case in point. An attacker exploited a cross-chain bridge, minting $292 million in unbacked tokens and using them as collateral to drain lending protocols, leaving $200 million in bad debt. This incident highlights the interconnectedness of DeFi and how it can amplify shocks. In response to such exploits, crypto participants have been seeking refuge in stablecoins, much like traditional investors shift to cash in uncertain times. The report notes that hacks and exploits remain a central risk for crypto, as they directly undermine trust in code-based systems. Smart contract bugs, phishing, and cross-chain bridge flaws can expose large pools of assets, and attackers often only need to exploit a single weak point to trigger significant losses. These vulnerabilities are exacerbated by the complexity and interconnectedness of blockchain infrastructure. Repeated exploits erode confidence across the ecosystem, driving users and institutions away, prompting stricter regulation, and slowing adoption. The bank's analysts observed that hack losses this year are comparable to 2025 levels, with infrastructure and bridge exploits remaining the primary vulnerability. Furthermore, growth in DeFi remains muted, with TVL partially recovering in dollar terms but largely unchanged in ether terms, suggesting limited organic expansion and raising concerns about DeFi's ability to scale for institutional use. In times of stress, investors continue to rotate into stablecoins, with capital flowing from DeFi lending into assets like Tether's USDT, which benefits from deeper liquidity and faster off-ramps.