DeFi risk is not one thing. It is a stack of technical, economic, governance, liquidity, and operational dependencies. The goal is not to find a risk-free protocol, but to understand what can fail, how losses propagate, and whether the compensation is worth the exposure.
Reading Path
Start here
DeFi Lending Risks: A Money-Market ChecklistAssess DeFi lending risks: collateral, oracles, liquidation rules, admin control and insurance assumptions. A framework, not a safety stamp.Start with dependencies and failure paths, not a safety score.
Unstoppable DeFi: Measuring Protocol ResilienceHow to assess DeFi protocol resilience: immutable contracts, admin keys, oracle dependencies and front-end access, with examples from 2022.Ask what can still be stopped, upgraded or captured.
DeFi’s UX Disaster: Curation Could Save InnovationShining a light on DeFi’s dirty secret: the curation layer crisis - and what can we do to address it.Curation and user-facing risk are part of the protocol story.
DeFi Bullshit Detector: Red Flags With ClaudeSet up Claude to confront DeFi marketing with onchain data, team history and counterparties. A research workflow, not a magic audit.A research workflow for confronting claims, not a magic audit.
Pharos: Stablecoin Peg and Risk MonitorTrack stablecoin pegs, risk and DEX liquidity with Pharos. Free, open source, no account needed. Built to expose the risks price charts miss.The stablecoin monitoring project I build. Signals are not guarantees.
Historical cases
Dated mechanism studies, not current product instructions. Historical does not mean defunct: check each post's context before acting.
Leaving the GHO Liquidity Committee: DeFi NewspeakWhy I resigned from the GHO Liquidity Committee: liquidity mismanagement, conflicts of interest and the gap between DeFi governance talk and reality.My 2024 GHO committee departure: incentives, conflicts and governance language.
Risk Tranching in DeFi: Senior and Junior YieldWhat risk tranching is, how senior and junior tranches split yield and losses on Saffron or 88mph, and why money markets need this primitive next.The 2021 Saffron case: distributing risk does not remove it.
The Great DeFi Filter: Why Mass Adoption Is HardWhy DeFi adoption takes more than better interfaces: the learning curve, user understanding and the work communities and builders need to do.The 2020 filter for separating durable mechanisms from fragile noise.
Risk Checklist
- Contract risk: audits, upgradeability, admin keys, bug bounties, and dependency contracts.
- Oracle risk: price source quality, update cadence, manipulation resistance, and fallback behavior.
- Collateral risk: liquidity, volatility, token permissions, bridge exposure, and centralization.
- Liquidation risk: market depth, keeper competition, bad debt, and cascading failures.
- Governance risk: multisigs, timelocks, quorum, capture, delegation, and emergency powers.
- User risk: approvals, phishing, wrong network, leverage, and position monitoring.
Core Concepts
- Smart contract, audit, and bug bounty cover code risk.
- Price oracle, liquidation, and liquidation cascade cover market mechanics.
- Multisig, timelock, and governance attack cover control risk.
- Bridge, exploit, and rug pull cover common failure paths.