DeFi's Institutional Appeal Hindered by Persistent Security Flaws, JPMorgan Warns

Decentralized finance's appeal to institutional investors is being hindered by persistent security vulnerabilities and stagnant total value locked, according to a report by JPMorgan. The total value locked, a measure of the size and health of the DeFi ecosystem, has been affected by the KelpDAO exploit, which resulted in a $20 billion loss. The exploit, which involved a breach of a cross-chain bridge and the minting of unbacked tokens, exposed the structural risks in DeFi. The incident has led to a shift towards stablecoins, with investors seeking refuge in assets like Tether's USDT. The report notes that hacks and exploits remain a central risk for crypto, undermining trust in systems that rely on code rather than intermediaries. The complexity and interconnectedness of blockchain infrastructure amplify these vulnerabilities, with cross-chain bridges being a particular weakness. Repeated exploits erode confidence in the ecosystem, driving users and institutions away, and prompting stricter regulation. The report also notes that growth in DeFi remains muted, with limited organic expansion and questions about its ability to scale for institutional use.