DeFi's Institutional Appeal Hampered by Persistent Security Risks, Says JPMorgan

Decentralized finance (DeFi) is facing challenges in attracting institutional investors due to persistent security vulnerabilities and stagnant growth in total value locked (TVL), according to a report by JPMorgan. The KelpDAO exploit, which resulted in a $20 billion loss, exposed structural risks in the ecosystem. The attack, which involved breaching a cross-chain bridge and minting unbacked assets, led to a significant loss of trust and underscored the interconnectedness of DeFi protocols. Analysts at JPMorgan noted that crypto participants have been seeking refuge in stablecoins in response to recent exploits, similar to how traditional investors shift to cash in uncertain times. The report highlighted that hacks and exploits remain a central risk for crypto, as they directly undermine trust in systems that rely on code rather than intermediaries. The complexity and interconnectedness of blockchain infrastructure amplify these vulnerabilities, with cross-chain bridges being a particular weak point. Repeated exploits can erode confidence across the ecosystem, driving users and institutions away, and prompting stricter regulation. The report also noted that growth in DeFi remains muted, with TVL partially recovering in dollar terms but largely unchanged in terms of ether (ETH). This suggests limited organic expansion and raises questions about DeFi's ability to scale for institutional use. In periods of stress, investors continue to rotate into stablecoins, with capital flowing from DeFi lending into assets like Tether's USDT, which benefits from deeper liquidity and faster off-ramps.