DeFi's Institutional Appeal Limited by Persistent Security Risks, Says JPMorgan

According to a report by JPMorgan, the allure of decentralized finance (DeFi) for institutional investors is being hindered by persistent security vulnerabilities and stagnant growth in total value locked (TVL). The recent KelpDAO exploit, which resulted in a $20 billion loss, exposed deep-seated structural risks in the ecosystem. TVL, a key metric for assessing the size and health of the DeFi ecosystem, has been impacted by the exploit, which involved a breach of a cross-chain bridge and the minting of unbacked assets. The incident has led to a shift towards stablecoins, with investors seeking refuge in assets like Tether's USDT. The report notes that hacks and exploits remain a significant risk for the crypto industry, undermining trust in systems that rely on code rather than intermediaries. The complexity and interconnectedness of blockchain infrastructure amplify these vulnerabilities, with cross-chain bridges being a particular point of weakness. Repeated exploits erode confidence in the ecosystem, driving users and institutions away, and prompting stricter regulation. The report also highlights that growth in DeFi remains muted, with TVL partially recovering in dollar terms but remaining largely unchanged in terms of ether (ETH). This limited organic expansion raises questions about DeFi's ability to scale for institutional use. In times of stress, investors continue to rotate into stablecoins, with capital flowing from DeFi lending into assets like USDT, which offer deeper liquidity and faster off-ramps.