DeFi’s Comeback
Decentralized finance took a beating in 2022-2023 — LUNA/UST collapsed, FTX imploded, and DeFi total value locked (TVL) plummeted from $180 billion in December 2021 to below $40 billion in late 2022. But 2024-2025 brought a recovery that’s worth examining beyond the headline numbers.
The Numbers
As of early 2025, DeFi TVL sits around $120-140 billion, according to DefiLlama. That’s still below the 2021 peak in nominal terms, but the composition has changed. In 2021, TVL was inflated by unsustainable yield farming schemes where tokens printed out of thin air were counted as “value locked.” Today’s TVL is more concentrated in established protocols with genuine utility.
Ethereum dominates with roughly 58% of DeFi TVL. Tron — yes, Tron, Justin Sun’s blockchain — holds about 10%, largely from USDT transfers. Solana has captured about 5%, BNB Chain about 4%, Arbitrum about 3%, and the remaining 20% is spread across Polygon, Avalanche, Base, Optimism, and dozens of smaller chains.
DEX trading volume tells a similar story. Uniswap processes $1-3 billion in daily volume, routinely exceeding Coinbase on many days. Its v4 upgrade (expected 2025) introduces “hooks” — programmable plugins for liquidity pools — that could make Uniswap a platform on which others build rather than just an exchange.
The Protocols That Matter
Uniswap: Still the dominant DEX, with approximately $4 billion in protocol-controlled liquidity and cumulative trading volume exceeding $2.5 trillion. Uniswap’s fee switch — turning on protocol fees for certain pools — went live in late 2024, making UNI a token with actual cash flows for the first time.
Aave: The leading lending protocol with roughly $15 billion in active loans. Aave v3, deployed across multiple chains, introduced isolated markets (limiting risk contagion between assets), efficiency mode for correlated assets, and portal features for cross-chain liquidity. Aave’s stablecoin GHO, launched in 2023, has grown to a market cap of approximately $500 million.
Lido: Dominates liquid staking, enabling about $30 billion in staked ETH to remain liquid and usable in DeFi. Lido’s dominance creates concentration risk (discussed in the Ethereum article above), but the protocol itself has operated reliably.
Maker/Sky: MakerDAO rebranded to Sky in late 2024 as part of its “Endgame” plan, creating new tokens (USDS and SKY in addition to existing DAI and MKR). It remains the oldest and largest decentralized stablecoin protocol, with about $5 billion in DAI/USDS outstanding. The rebrand was controversial and confusing — a reminder that DAO governance often makes suboptimal product decisions.
EigenLayer: The restaking protocol launched in 2024 created an entirely new DeFi category. EigenLayer allows staked ETH to secure additional services (AVSs – Actively Validated Services) beyond Ethereum consensus, creating a marketplace for pooled security. It attracted over $15 billion in TVL within its first year, making it one of the fastest-growing DeFi protocols ever. The risks — complex slashing conditions, systemic contagion if restaked positions are compromised — are still being understood.
Hacks, Exploits, and Persistent Risk
DeFi can’t be discussed honestly without acknowledging the security disaster that is smart contract risk. According to DefiLlama’s Rekt database, DeFi protocols lost approximately $1.5 billion to hacks and exploits in 2023, and another $1.2 billion in 2024. The complexity of DeFi protocols creates attack surfaces that security audits consistently miss.
The most damaging exploits of 2024-2025 include the KyberSwap exploit ($48 million), the Munchables exploit on Blast ($62 million, later partially recovered), and several bridge hacks that continue to demonstrate that cross-chain infrastructure is the weakest link in DeFi. The total value hacked in DeFi’s history exceeds $8 billion — a number that would be front-page news in any other industry but has become normalized in crypto.
Insurance against smart contract risk exists through protocols like Nexus Mutual, but coverage is expensive and incomplete. Most DeFi users are effectively self-insuring, which means accepting a small but non-trivial probability of total loss. This isn’t sustainable for mainstream adoption.
Regulatory Pressure
The US regulatory environment for DeFi remains hostile. The SEC’s actions against Coinbase, Binance, and individual token issuers have created legal uncertainty around which DeFi activities constitute unregistered securities offerings. The IRS finalized rules in 2024 requiring DeFi front-ends and brokers to report user transactions (the “DeFi broker rule”), prompting several protocols to geo-block US users entirely.
Europe’s MiCA (Markets in Crypto-Assets) regulation, fully effective by early 2025, provides more clarity but imposes significant compliance requirements on DeFi protocols serving EU residents. The practical result: DeFi is increasingly splitting into a compliant, KYC’d version for regulated jurisdictions and a permissionless, global version that operates outside legal frameworks.
DeFi in 2025 is more resilient, more useful, and more institutionally relevant than the yield-farming mania of 2021. But it remains an experiment — one that has produced genuinely innovative financial infrastructure, but also one where a single smart contract bug can destroy hundreds of millions in value. The technology works. The security model mostly doesn’t.