What is DeFi explained: protocols, yields and risks

What is DeFi? Decentralized finance is a set of financial services that run as programs on a blockchain rather than as companies: token swaps, collateralized loans, stablecoins, staking. A smart contract replaces the bank, your wallet replaces the account, and a signed transaction replaces the application form. Your money never leaves your wallet until you approve a transaction yourself. According to DeFiLlama, DeFi protocols held $81.6 billion in total value locked on November 3, 2026, and dollar stablecoins earned 3.8⁠–⁠4.4% a year in the largest protocols. The main risks are bugs in code, stolen keys and collateral price manipulation: hackers took $972 million from crypto projects in the first half of 2026.

What DeFi is and how it differs from a bank

In traditional finance every operation passes through an intermediary: a bank holds the money, an exchange matches buyers and sellers, a broker fills the order. In DeFi those jobs are done by a smart contract, a program stored on the blockchain that executes the same way for everyone. Per the ethereum.org documentation, a deployed contract cannot be altered and its code is open for inspection. We explained the underlying chain itself in What is blockchain.

The core difference is who holds the money. The DeFi page on ethereum.org lays it out in a table; here is the essence:

That last row is the key to understanding DeFi. Freedom from intermediaries means there is nobody to call when you send funds to the wrong address or a protocol gets exploited.

The building blocks: five types of DeFi protocols

Almost the entire ecosystem reduces to five building blocks. Each has a leader visible by total value locked (TVL) in DeFiLlama data as of November 3, 2026.

How a DEX works. Uniswap has no buyers and sellers in the usual sense. There is a pool of two tokens, say ETH and USDC, funded by liquidity providers. Price follows the constant product formula x × y = k: the more ETH taken out of the pool, the more expensive each additional unit becomes. Per the Uniswap documentation, a v2 trader pays 0.3% per swap and that fee is split among liquidity providers in proportion to their share.

How a lending protocol works. On Aave you post collateral and borrow a smaller amount against it. According to the Aave help center, the position's health factor equals collateral value multiplied by the liquidation threshold, divided by total debt. Their example: supply $10,000 in ETH with an 80% threshold and borrow $6,000 in GHO, and the health factor is 1.333. Once it drops below 1, anyone may repay part of your debt and claim your collateral plus a bonus. We described what that looks like in the market in our piece on crypto liquidations.

Staking and stablecoins deserve their own reading: how staking works and USDT vs USDC.

Where DeFi yield comes from

DeFi yield is not interest from nowhere. Every number has a payer, and knowing who pays matters more than the number itself.

1. Borrowers' interest. On Aave the deposit rate depends on pool utilization: the higher the share of funds borrowed, the more expensive the loan and the higher the depositor's return. Per the Aave risk stewards report of October 13, 2026, the USDC pool on Aave's core market was 93.5% utilized.
2. Trading fees. A DEX liquidity provider earns a share of fees from every trade in the pool.
3. Network rewards. In liquid staking the yield is Ethereum's validator reward, passed through to stETH holders after Lido's fee.
4. Token incentives. A protocol tops up returns with its own token to attract deposits. That part disappears when the program ends, and the token itself may fall.

Here is what rates looked like per DeFiLlama Yields on November 3, 2026 (Ethereum mainnet, largest pools):

For comparison, the 10-year US Treasury yield stood at 4.91% on November 2, 2026, per US Treasury data in our market dashboard. In other words, the dollar "risk-free" rate was higher than a USDC deposit in the largest DeFi lender. That is normal for a calm market: DeFi rates rise when traders borrow stablecoins en masse to buy crypto, and fall when nobody wants leverage.

What it looks like on November 3, 2026

DeFi's size moves with coin prices because TVL is counted in dollars while the locked assets are mostly ETH and tokens. Per DeFiLlama's history, TVL peaked at $177.5 billion on November 9, 2021, bottomed at $38.3 billion on December 31, 2022 in the bear market, and hit a second peak of $167.9 billion on October 7, 2025. By November 3, 2026 it had shrunk to $81.6 billion.

The split by chain on the same date, per DeFiLlama: Ethereum $43.6 billion (about 53% of all DeFi), then Base $5.9 billion, Solana $5.4 billion, Tron $5.2 billion, BNB Chain $5.2 billion and the bitcoin network $4.1 billion. Live coin data is on our Ethereum page.

The market backdrop that morning, from our dashboard: bitcoin traded near $76,830 as of 3:00 AM ET on November 3, 2026, down 11.2% over 30 days; the Fear & Greed index read 26, "Fear"; stablecoin market cap was $297.7 billion, down 3.6% on the month. When stablecoins leave the market, demand for DeFi loans falls and deposit rates follow. We explained why stablecoin supply is called the market's "dry powder" in a separate article.

How to start using DeFi in five steps

1. Set up a non-custodial wallet (MetaMask, Rabby, or Phantom for Solana) and write the seed phrase on paper. How to store it is covered in What is a seed phrase.
2. Pick a network. Ethereum has the deepest liquidity but higher fees; Base, Arbitrum and Solana are cheaper. Keep a little of the chain's native coin for gas.
3. Send a stablecoin from an exchange directly to the right network. Choosing the wrong network on withdrawal is the most common way to lose your first money.
4. Choose a protocol by age and size. Large TVL and years of operation do not guarantee safety, but they mean thousands of people and billions of dollars have tested the code. A new protocol paying 40% is almost always compensation for risk, not a gift.
5. Start small and watch approvals. Every time you "approve" a token for a contract, you grant it the right to spend that token. Limit approval amounts and revoke old ones with a revoke tool.

DeFi risks: where exactly people lose money

Code bugs and stolen keys. Per the TRM Labs report for the first half of 2026, there were 207 hacks worth $972 million. Smart contract exploits accounted for 125 of the 207 incidents, yet roughly 76% of the stolen value came from infrastructure and key compromises, meaning human failure rather than math. TRM attributes the two largest attacks, Drift Protocol (about $285 million) and KelpDAO (about $292 million), to North Korea-linked hackers. We walked through one such exploit in the b14g hack explainer.

Oracle manipulation. A lending protocol values collateral at the price an oracle feeds it. If a token trades thinly, that price can be pushed. Per TRM Labs' analysis, on August 30, 2026 an attacker pushed the TONIC token roughly 100x in about 20 minutes, posted it as collateral on the Tectonic protocol on Cronos and borrowed about $75 million in liquid assets against it. TRM counted 32 such attacks in 2026 to date, more than in any previous year.

Liquidation. Collateral falls, the health factor slips below 1, and the position is closed with a bonus to the liquidator. The liquidation threshold is set by protocol governance, and as Aave notes, there is no universally "safe" health factor.

Impermanent loss. A DEX liquidity provider always ends up holding more of the token that fell. Per the Uniswap table, a 1.5x price move leaves you 2% behind simply holding, 2x leaves you 5.7% behind and 5x 25.5%, and the direction does not matter. Fees may cover that gap, or may not.

The decentralization illusion. In a Bank for International Settlements bulletin from December 2021, economists write that "full decentralisation in DeFi is illusory": key decisions are made by governance token holders, often the developers themselves, and "there are no shock absorbers in DeFi that can cut in during stress periods". A live example: on October 30, 2026 Aave froze 292 reserves after the Binance hacker borrowed $44.6 million through the protocol: a human decision, made within hours, which is both a safeguard and proof that a kill switch exists.

Regulation and taxes. The rules for DeFi are still being written: in October 2026 the UK's FCA opened a consultation on which DeFi services will need authorization. In most countries DeFi income is taxed like any other.

Common beginner mistakes

• Looking only at the headline APY. 30% a year in a new token usually means the token will lose value faster than the interest accrues.
• Confusing stablecoin yield with yield in a volatile asset. 2.3% on stETH is 2.3% in ether, whose price can move 20% in a month.
• Treating a health factor as permanent. Liquidation thresholds change by vote, and collateral prices change in minutes.
• Granting unlimited token approvals. A phishing site holding such an approval can drain the wallet in one transaction.
• Putting everything into DeFi. The right allocation is the amount whose loss you could absorb without consequences.

Frequently asked questions

Is DeFi safer than an exchange? It depends. An exchange can be hacked or can freeze your account; in DeFi nobody can freeze your wallet, but nobody will refund you after a mistake or an exploit either. Per DeFiLlama, the largest theft of 2026 hit a centralized exchange, Binance, for $6.36 billion on October 29, while the largest attacks on DeFi protocols in the first half of the year, Drift and KelpDAO, were about $290 million each.

Do I need ETH to use DeFi? On Ethereum, yes, to pay gas, even if you only touch stablecoins. On Solana you need SOL, on Tron TRX.

Can I lose more than I put in? Not in overcollateralized lending: debt is always smaller than collateral and the position is liquidated first. In leveraged perpetuals the loss is capped at your margin, but it can go to zero in minutes.

Where do I find current rates? In the protocols themselves and on aggregators such as DeFiLlama; rates change every block. The market backdrop they depend on is in our dashboard.

This is not investment advice.