A recent $292 million exploit of Kelp DAO has highlighted the vulnerabilities of decentralized finance (DeFi) at a critical juncture, as Wall Street firms expand their presence in onchain markets. This incident has exposed the fragility of certain aspects of the system, underscoring the need for improvement before institutions can increase their exposure.
In the lead-up to the hack, major players such as Apollo Global Management and BlackRock made significant moves into onchain finance, with the former partnering with Morpho and the latter launching a tokenized money market fund on Uniswap. According to industry insiders, this exploit is unlikely to deter traditional finance (TradFi) from further engagement with onchain finance but rather emphasizes the need for DeFi to address its weaknesses before larger capital pools can enter the market. 'This is a speed bump, not a roadblock,' said Nick Cherney, head of innovation at Janus Henderson, an asset manager overseeing $500 billion in assets.
Cherney believes that pioneers in DeFi will always face risks, but such failures can drive improvements, ultimately leading to stronger systems over time. The long-term shift towards tokenized real-world assets, such as funds, bonds, and credit, is expected to anchor DeFi markets, bringing in legal frameworks and risk controls refined by traditional finance over decades. Security specialists argue that the current setup is insufficient and that systems are only as secure as their weakest links.
This reality is driving the industry towards more comprehensive defenses, including zero-trust architectures, continuous monitoring, stricter controls, and built-in redundancies. Evgeny Gokhberg, founder of digital asset manager Re7 Capital, emphasizes that many current 'best practices' need to become baseline requirements, including timelocks on key governance actions, stricter multi-signature controls, and stronger safeguards around bridges.
For DeFi to achieve institutional-grade status, it must meet certain conditions, such as clarity, with verifiable collateral and legal structures mapping to real-world risk, reliability, with predictable and auditable smart contracts and governance processes, and liquidity that can withstand pressure. According to Bhaji Illuminati, CEO of Centrifuge Labs, 'being open and secure is not mutually exclusive,' and the goal is to make trust explicit and verifiable. Illuminati stresses that every layer of the DeFi stack must prioritize security, especially in the age of artificial intelligence.