DeFi's Institutional Appeal Hampered by Persistent Security Risks, Says JPMorgan

According to JPMorgan, the persistence of security flaws in decentralized finance (DeFi) is hindering its appeal to institutional investors. The total value locked (TVL) in DeFi protocols, a key indicator of the ecosystem's size and health, has been stagnant, with the recent KelpDAO exploit resulting in a $20 billion loss. This incident exposed the structural risks inherent in DeFi, particularly in cross-chain bridges, which can amplify shocks due to the interconnectedness of the ecosystem. In response to such exploits, crypto participants are increasingly seeking refuge in stablecoins, much like traditional investors shift to cash in uncertain times. The report highlights that hacks and exploits pose a significant risk to crypto, as they directly undermine trust in systems that rely on code rather than intermediaries. The complexity and interconnectedness of blockchain infrastructure amplify these vulnerabilities, with cross-chain bridges being a primary vulnerability. Repeated exploits erode confidence across the ecosystem, driving users and institutions away, and prompting stricter regulation. The bank's analysts note that hack losses this year are tracking 2025 levels, with infrastructure and bridge exploits remaining the primary vulnerability. Furthermore, growth in DeFi remains muted, with TVL partially recovering in dollar terms but largely unchanged in terms of ether (ETH), raising questions about DeFi's ability to scale for institutional use. In times of stress, investors continue to rotate into stablecoins, with capital flowing from DeFi lending into Tether's USDT, which benefits from deeper liquidity and faster off-ramps.