What Is DeFi? Decentralized Finance Explained

DeFi, short for decentralized finance, is a set of financial services such as trading, lending, and borrowing that run as open software on blockchains instead of inside banks or brokerages. There is no company approving your account. You connect a wallet you control, interact directly with a program called a smart contract, and the code executes the trade or the loan automatically. That design makes DeFi available to anyone with an internet connection, and it also means there is no support line to call and no deposit insurance when something breaks. This guide walks through the main building blocks, explains where the advertised yields actually come from, and lays out the risks in plain terms.

Programmable money instead of intermediaries

Traditional finance works through intermediaries. A bank holds your deposit, a broker matches your trade, and each one keeps its own private ledger. DeFi replaces those intermediaries with smart contracts: programs deployed to a blockchain that hold funds and move them according to fixed rules anyone can inspect. Most DeFi activity lives on Ethereum and its layer 2 networks, with Solana as the other major hub. Bitcoin itself hosts very little DeFi, because its scripting language is deliberately limited to keep the monetary network simple and secure.

Two properties follow from this design. First, DeFi is non-custodial: you hold your own keys, and no platform can freeze your account or lend out your coins behind your back. Second, it is unforgiving: transactions are irreversible, and the code does exactly what it says, including when what it says contains a bug.

The scale is significant but well below its peak. Total value locked, the standard measure of funds deposited in DeFi protocols, sat around 70 billion dollars at this writing according to trackers like DefiLlama, down from roughly 115 billion at the start of the year and far below the highs of late 2021. Ethereum still holds over half of it.

Decentralized exchanges and automated market makers

The first thing DeFi got working at scale was trading. A decentralized exchange, or DEX, lets you swap one token for another directly from your wallet, with no account and no custodian.

Most DEXs do not use an order book the way a stock exchange does. They use an automated market maker, or AMM. An AMM is a smart contract holding a pool of two assets, say ETH and a dollar stablecoin. A pricing formula adjusts the exchange rate automatically as people trade against the pool: the more of one asset you buy, the more expensive the next unit becomes. Uniswap made this model famous, and nearly every chain now has an equivalent.

The pools are funded by ordinary users called liquidity providers, who deposit both assets and earn a cut of every trading fee. That income is real, but it comes with a quirk called impermanent loss: if the two assets move sharply apart in price, the pool automatically sells the winner and accumulates the loser, so a liquidity provider can end up worse off than if they had simply held. Providing liquidity is a trading position, not a savings account.

Lending markets

The second pillar is lending. Protocols such as Aave and Compound run shared pools where depositors supply assets and borrowers draw from them, with interest rates set algorithmically: the more of a pool is borrowed, the higher the rate climbs, which attracts new deposits and discourages new loans.

Because there are no credit checks and no identities, every loan is overcollateralized. To borrow 1,000 dollars of stablecoins you might post 1,500 dollars of ETH. If your collateral falls too close to the loan value, the contract liquidates it automatically, selling your collateral to repay the debt plus a penalty. This is why DeFi lending survived crashes that killed its centralized competitors: the system never depends on trusting a borrower, only on the collateral math.

The honest limitation is that overcollateralized lending mostly serves traders who want leverage or liquidity without selling. It does not do what banks do for the real economy, which is lend against future income.

Stablecoins, the workhorse of DeFi

Stablecoins are tokens designed to hold a fixed value, almost always one US dollar, and they are the unit of account for most of DeFi. The two giants, Tether (USDT) and USDC, are backed by reserves of cash and short-term US Treasuries, and together they dominate a market worth close to 300 billion dollars.

Regulation caught up in 2025. The GENIUS Act, signed into US law on July 18, 2025, is the first federal framework for payment stablecoins: only licensed issuers may offer them, reserves must be backed one for one with cash and short-term Treasuries, issuers must publish monthly reserve disclosures, and they are barred from paying interest to holders. The European Union got there earlier, with MiCA's stablecoin rules applying since June 30, 2024. The practical effect is that major fiat-backed stablecoins now operate more like regulated e-money and less like an offshore experiment.

Not every design deserves that comfort. Algorithmic stablecoins, which try to hold their peg through code and incentives rather than reserves, have a catastrophic track record. Terra's UST, the largest of them, collapsed from one dollar to nearly zero in May 2022 and erased tens of billions of dollars of value in about a week. If a stablecoin's backing cannot be explained in one plain sentence, treat it as risk capital.

Where DeFi yield actually comes from

DeFi is famous for advertising yields that beat any bank. Before chasing one, identify who is paying it. There are only a few honest answers:

• Trading fees. Liquidity providers on DEXs earn a slice of each swap. Real revenue, offset by impermanent loss.
• Borrower interest. Lending pool depositors earn what borrowers pay. Real revenue, sized by actual borrowing demand, which is why stablecoin lending rates are usually modest single digits in calm markets.
• Staking rewards. Proof of stake networks pay validators newly issued coins for securing the chain. Real, but it is issuance, not profit, and it comes with slashing and lockup risks.
• Token emissions. Many protocols top up yields by printing their own governance token. This is marketing spend. The headline percentage is only as good as the token's price, which usually falls as emissions flood the market.

A useful rule: if a platform offers a double-digit yield on a dollar asset and cannot show you the borrower or the fee stream funding it, you are not earning yield, you are being recruited. Celsius advertised exactly such yields before it froze withdrawals and went bankrupt in 2022.

The risks, stated plainly

DeFi removes the banker and replaces him with code, and code has its own failure modes.

• Smart contract bugs. A flaw in a contract can be exploited to drain every dollar it holds, instantly and irreversibly. Chainalysis counted about 3.4 billion dollars stolen across crypto in 2025; one DeFi example was the roughly 220 million dollar exploit of the Cetus exchange in May 2025.
• Depegs. Stablecoins can trade below one dollar under stress. Even fully reserved USDC slipped its peg for a weekend in March 2023 when Silicon Valley Bank, which held part of its cash, failed. Algorithmic designs can go to zero.
• Rug pulls. Anyone can deploy a token and a pool. Anonymous teams routinely launch projects, attract deposits, and vanish with them. A token you found through a social media post is a lottery ticket at best.
• Admin keys and governance. Many "decentralized" protocols retain upgrade keys held by a small team. Whoever holds those keys can change the rules, and attackers who phish them can steal the funds.
• User error and phishing. Approval phishing, where a fake site tricks you into signing a token approval that lets an attacker drain your wallet, is among the most common ways DeFi users lose money. Interacting with contracts from a hardware wallet and revoking old approvals reduces the blast radius.

DeFi versus CeFi after the 2022 collapses

CeFi, or centralized finance, means crypto companies that take custody of your coins and offer bank-like services. In 2022 the biggest of them failed in sequence: Celsius and Voyager froze withdrawals and filed for bankruptcy that summer, FTX collapsed in November 2022 after customer funds were found to be missing, and BlockFi followed it down. Customers were unsecured creditors who waited years for partial recoveries.

Through that same crash, the major DeFi protocols simply kept running. Aave and Compound liquidated undercollateralized loans automatically, Uniswap kept matching trades, and depositors could verify solvency on-chain at any moment. That contrast is the strongest argument for DeFi: it replaces "trust me" with "verify the contract."

It is not the whole story. Centralized platforms remain the bigger honeypot, and attackers know it: the single largest crypto theft ever, roughly 1.5 billion dollars, hit the centralized exchange Bybit in February 2025. DeFi's transparency does not protect you from bugs, scams, or your own mistakes; it only removes the specific risk of a custodian misusing your funds. Each model fails differently.

Does a bitcoin buyer need DeFi?

No. You can buy bitcoin on a regulated exchange, withdraw it to your own wallet, and never touch a smart contract. Most people should stop there. If you do explore DeFi, treat it as experimentation with money you can afford to lose completely: start with tiny amounts, use a dedicated wallet, stick to old, heavily audited protocols, question every yield, and read up on common scams first. DeFi is a genuinely new financial architecture, but its safety net is knowledge, because there is no other one.