JPMorgan: DeFi security flaws, $20B hack deter institutions

JPMorgan warns that DeFi’s security flaws and slow growth, highlighted by the $20B KelpDAO exploit, are driving institutions away and increasing stablecoin demand.

JPMorgan has published multiple reports highlighting that persistent security vulnerabilities and stagnant growth in decentralized finance (DeFi) are deterring institutional investors. The recent KelpDAO exploit, which targeted a cross-chain bridge, resulted in the creation of approximately $292 million in unbacked rsETH. This incident caused DeFi’s total value locked (TVL) to plummet by about $20 billion within days. The exploit led to an estimated $200–$230 million in bad debt and triggered significant capital outflows, as investors shifted to stablecoins like USDT for safety. JPMorgan analysts noted that DeFi’s high interconnectedness amplifies the impact of such breaches. Despite improvements in smart contract auditing, vulnerabilities in bridges and infrastructure remain a major concern. These ongoing issues, coupled with a lack of organic growth, are undermining institutional confidence and participation in the DeFi sector.