CertiK's H1 2025 data tracked $2.47 billion lost across 344 incidents, and the largest share by far came not from broken contract logic but from compromised wallets and signing systems. In many of those cases, the code executed exactly as written.

That gap between "the code is correct" and "the money is safe" is the real subject here. Decentralised finance has matured past the point where a protocol can be judged as a single application.

A live position now leans on oracle feeds, bridges, wrapped assets, a stablecoin issuer, external liquidity, a frontend, and governance decisions made by people the depositor will never meet. Each of those is a separate trust assumption.

None of them shows up on an audit certificate.

Seasoned security researchers stopped treating DeFi as a collection of apps some time ago. They read it as an operating model, a set of connected services that each import their own technical, governance, and operational assumptions. The stronger those connections grow, the less a single audit report or a headline total-value-locked figure says about real exposure.

For an institutional allocator, that reframing changes the diligence question outright. What matters is not whether one contract was reviewed. It is whether the whole arrangement keeps protecting capital when one part of it fails.

The Audit Certifies the Code, Not the System Around It

An audit is a scoped, time-bounded review. OpenZeppelin describes its own process plainly, with at least two engineers reviewing the same code and automated tooling kept separate from human security reasoning. What that produces is a judgement about a defined codebase at a defined moment. It does not stand as a guarantee covering the next upgrade, the next bridge integration, or the oracle the contract trusts for prices.

Consider a lending market whose contracts enforce every rule correctly. An attacker manipulates the external price feed the market relies on, inflates the value of pledged collateral, borrows real assets against it, and walks away leaving bad debt behind. Nothing in the code malfunctioned.

One assumption underneath the code stopped being true.

Flash loans make that scenario cheaper than most investors assume. The Bank of Canada's 2025 work on uncollateralised lending describes how a borrower can take and repay enormous sums inside a single transaction, which removes the capital barrier that once deterred this kind of market manipulation. An attacker no longer needs deep pockets. They need one mispriced dependency and a block to act in.

This is why mature security teams evaluate attack paths, not isolated bugs. As a label, "audited" earns its place as evidence of one control. Treating it as proof that every supporting part has been independently verified is the false confidence that turns a clean report into an expensive surprise.

The Attack Surface Moved Up the Stack

Look at where the losses actually migrated, and the shift is hard to miss. Immunefi's six-year review of DeFi losses found bridge incidents fell from 73% of DeFi losses in 2022 to 3% in 2025, while the damage moved toward signing systems, custody workflows, and privileged access. None of it disappeared. The exploit climbed to a higher, softer layer.

CertiK's data tells the same story from another angle. Wallet compromise was the single most expensive attack type in H1 2025, accounting for $1.706 billion across just 34 incidents. When so few events produce that much loss, the lesson lands hard for anyone who treats self-custody as a solved problem. Keys became the target precisely because the contracts got harder to break.

The CFTC's 2024 DeFi work named the deeper issue directly. Even systems described as decentralised retain control points, through developers, governance processes, interfaces, admin keys, validators, and bridge operators. The Bank for International Settlements has made a related case for years, describing a decentralisation illusion in which a concentrated layer of human control sits beneath the autonomous surface. Risk follows that control layer, wherever it actually lives.

The DeFi Risk Stack

Evaluation still leans on one or two surface signals, usually annual yield, total value locked, or a green audit badge. Each carries some information, and none describes the full exposure of a position. A better approach treats DeFi risk as layered, because that is how it behaves in practice.

The DeFi Risk Stack separates the exposure into six distinct layers.

•        Code risk. Contract bugs, reentrancy, faulty access control, upgrade mistakes.

•        Market risk. Thin liquidity, collateral volatility, liquidation cascades.

•        Oracle risk. Manipulated or delayed price feeds that drive bad decisions downstream.

•        Governance risk. Admin keys, proxy upgrades, concentrated voting power, DAO capture.

•        Composability risk. Failure imported from another protocol, a bridge, a wrapped asset, or a shared liquidity venue.

•        Recovery risk. Unclear accountability, no guaranteed recourse, weak incident response.

The value of the model is not taxonomy for its own sake. It forces a position to be priced across every layer it actually touches, which is the only way to see that a protocol can score well on code and stay dangerous on oracle, governance, or recovery. An audit speaks to the first layer.

Losses keep coming from the other five.

Composability Turns One Failure Into Many

The ability to plug protocols into one another is DeFi's defining advantage and its most underpriced hazard. Lending markets feed exchanges, yield strategies sit on liquidity pools, and protocols accept each other's tokens as collateral. A single position can depend on several contracts, a bridge, an oracle, a wrapped asset, a stablecoin issuer, and governance votes across separate organisations at once.

None of those parts has to contain malicious code for capital to evaporate. When protocols use each other's synthetic and staked tokens as collateral, one exploit on an underlying asset can set off an automated wave of liquidations across applications that never shared a line of code. Contagion runs at block speed, faster than any human committee can convene.

A second, quieter tax compounds the visible losses. Transparent transaction queues let specialised bots scan pending trades and reorder them for profit, extracting value from ordinary users on the way through. This is the MEV problem, and it sits inside normal protocol mechanics, not any single bug.

Forking widens the blast radius again. New protocols copy established open-source contracts without fully grasping the parameter limits behind them, so a flaw found in one design quietly propagates across the copies. Immunefi's April 2025 figures captured how concentrated this damage gets, with $92,453,100 lost across 15 incidents in a single month where DeFi accounted for the entire reported total. Composability did not cause every one of those losses, but it is what lets a local failure become a shared one.

Governance Is Where an Exploit Becomes an Economic Event

Security conversations tend to start with attackers and end with ownership. Most serious protocols deliberately keep some administrative power. Contracts can be upgraded, treasuries sit behind multisignature wallets, and emergency pauses exist for good reason. Software running billions in assets cannot be frozen fully in place.

The hazard is not that these powers exist. It is who holds them, how they are used, and whether anything stops them becoming the next way in. Admin keys and multisigs are governance tools and attack surfaces in the same moment, which is why private-key and signer compromise now sit among the largest loss drivers in the data.

Weak ownership rarely makes the headline, yet it sets the size of the bill. A decentralised governance process cannot halt a live exploit the way a centralised operator can, because a proposal, a debate window, and an on-chain vote take days while an attacker takes minutes. From there it gets worse. Concentrated token holders can vote down security budgets in favour of fee generation, and insiders holding liquid voting power can sell into public markets before a structural flaw surfaces, capturing the upside and leaving the downside with later depositors.

Recovery is where that weakness turns permanent. CertiK reported that only 0.38% of stolen funds were returned in Q1 2025, down from 42.09% the previous quarter. When the return rate collapses to a rounding error, governance quality stops being a philosophical question about decentralisation and becomes the main thing standing between an incident and a write-off.

Why the Problem Persists

None of this survives because the industry lacks talent. It survives because the incentives reward it. Protocol teams capture fees and token appreciation by deploying fast and pulling in liquidity, while the security cost lands later and lands mostly on depositors.

Speed pays now. Caution pays never.

The payoff maths runs the same way for attackers. A vulnerability worth a modest bug bounty to disclose can be worth orders of magnitude more to exploit, which quietly pushes marginal talent toward the adversarial side. Venture funding tightens the screw, pressing teams toward token launches and deadlines that rarely wait for security to catch up.

Demand reinforces all of it. Capital chases the highest yield regardless of how carefully the underlying code was tested, so protocols that skip rigorous review are often rewarded with inflows, not punished. That pull creates a slow race downward, where thorough risk modelling costs market share.

Investor behaviour closes the loop. A 2025 study from Georgia Tech, drawn from interviews and a survey of nearly 500 crypto investors, found that only 10.8% regularly checked and revoked the token approvals that leave wallets exposed long after a user has moved on. False confidence is not a side effect of the system. It is one of the load-bearing reasons the losses keep recurring.

What Mature DeFi Operations Do Differently

The strongest teams gave up chasing zero vulnerabilities and started designing for the day something breaks. Its clearest marker is the autonomous circuit breaker. Rather than wait for a governance vote mid-exploit, resilient protocols write mathematical invariants straight into runtime, so the system freezes the instant a rule like "withdrawals cannot exceed deposits minus fees" is violated.

Several other practices separate mature operations from the rest.

•        Time-locked upgrades that give depositors a window to exit before a contested change takes effect.

•        Isolated risk pools that wall off experimental assets so an exploit on a new token cannot drain the blue-chip vault.

•        Layered controls combining audits, bug bounties, live monitoring, and rehearsed incident response, not any single safeguard.

•        Published control maps that disclose admin keys, signers, pause powers, oracle dependencies, and upgrade rights before anyone deposits.

The economics favour this discipline even though it slows launches. Every undocumented dependency and every unclear line of emergency authority adds delay during the one window when recovery is still possible, and that delay is measured directly in capital that leaves and does not return. A protocol with documented ownership and a tested response plan tends to outlast a better-coded peer with weaker operations.

Where Regulation Is Actually Heading

The common assumption is that regulation will tighten steadily until investors are protected. Evidence points somewhere messier. In April 2025, the United States repealed the IRS DeFi broker rule that would have treated certain non-custodial platforms like brokers for tax reporting, a clear sign that policymakers are not all moving in one direction.

What regulators are converging on is the hunt for control points. IOSCO's DeFi recommendations focus on identifying responsible persons, conflicts, disclosure, and enforcement, on the view that decentralised systems still contain accountable actors. The EU is weighing whether crypto lending and borrowing need dedicated rules under its MiCA Article 142 review. The Financial Stability Board's 2025 work found significant gaps and inconsistencies across jurisdictions, the kind of fragmentation that breeds regulatory-arbitrage risk rather than clean protection.

For an institution, the practical reading is that pressure arrives through the access layer first. Stablecoin issuers, frontends, bridges, custodians, and fiat off-ramps are far easier to reach than neutral protocol code, and that is where screening, disclosure, and reporting duties will concentrate. The FATF reported in 2025 that implementation of virtual-asset standards remains weak across much of the world, which means those gaps persist long enough to matter to anyone holding a multi-year position. DeFi risk, over that horizon, becomes a market-structure and governance-disclosure problem at least as much as a coding one.

The Allocator's Takeaway

Strip the topic back to one line and it holds. An audit tells an investor the code was correct on the day it was reviewed. The DeFi Risk Stack tells them whether the system survives the day something else goes wrong.

That is the shift the data keeps confirming. Losses moved up from contract bugs to signing systems, dependencies, and ownership. Recovery rates fell to a rounding error. Regulators began hunting for who actually controls these systems rather than accepting the decentralised label at face value.

Each trend points at the same place, that exposure lives in the operating model, not in any single contract.

Protocols most likely to last will not be the ones advertising the richest yields. They will be the ones that can show who holds emergency authority, how dependencies are watched, and what happens to user funds when a part of the system fails. Allocators who learn to read those same signals will price DeFi for what it is. Those who keep reading the audit badge as the answer are mispricing it, and the bill for that habit tends to arrive at the worst possible moment.

Frequently Asked Questions

Does a DeFi audit mean the protocol is safe?

No. An audit reviews a defined version of the code under a set scope and timeframe. It does not cover later upgrades, oracle assumptions, bridge integrations, frontends, or governance changes. Treat it as one control inside a wider security posture, not a verdict on the whole position.

Why is governance now treated as a security issue?

Governance decides who can upgrade contracts, move treasury assets, and trigger emergency actions. When those powers are concentrated or poorly documented, ordinary decisions can expose investors to losses unrelated to code quality. With only 0.38% of stolen funds returned in CertiK's Q1 2025 data, the quality of ownership often decides whether an incident is survivable.

What should an institution check before deploying capital?

Beyond the audit, look at who controls upgrades and emergency powers, which oracle sets prices, whether the protocol depends on bridges or wrapped assets, how concentrated voting rights are, and whether a tested incident-response plan exists. These say more about real exposure than yield or total value locked.

Does self-custody remove counterparty risk?

It removes exchange counterparty risk and shifts the burden onto key management, approval hygiene, and phishing resistance. With wallet compromise responsible for $1.706 billion of H1 2025 losses, self-custody changes where the risk sits rather than removing it.

What is the most overlooked risk in DeFi today?

Dependency risk. A position can rely on oracles, bridges, stablecoins, liquidity providers, and frontends that never appear in an audit, and a failure in any one of them can reach investor funds even when the core contracts run exactly as designed.

The slow part is rarely the technology. It is the plumbing wrapped around it.

That gap explains why stablecoins have moved from the edge of crypto trading into treasury and cross-border payment conversations inside large companies. Federal Reserve data put stablecoin market value at $317 billion in April 2026, after growth of more than 50% during 2025. The World Economic Forum estimated that stablecoins settled over $27 trillion in 2024, more than Visa and Mastercard combined.

At that size they are not a crypto experiment, but a money-movement layer that payment firms, banks, and multinationals are now expected to understand. Growth above 50% in a single year is not how a niche tool behaves.

One obvious read is that stablecoins move money faster. The more useful read is that they expose where the old system actually slows down.

The payment was never the slow part

When a cross-border payment lands late, most teams blame the transfer. That transfer is usually the easy part.

Look at the numbers behind the complaint. The Bank for International Settlements, citing FSB progress reporting, measured cross-border speed against the G20's own goals. Only 35% of retail and 55% of wholesale payments arrived within an hour, against a 75% target. In other words, the wire was never the real bottleneck.

Delay lives in the work around the transfer. Counterparty checks, liquidity sourcing, currency conversion, clearing windows, and reconciliation all run before anyone calls a payment complete.

Stablecoins compress one of those steps. Tokenised dollars move directly across networks that never close, so settlement stops waiting on a chain of intermediaries.

Moving the token is not the same as completing the payment. Someone has to screen the wallet, clear sanctions checks, redeem at par, record the rate, and deliver usable local currency to the recipient. As the Fed's Kyoungjin Kim has observed, the chain leg can finish in seconds while the rest of the workflow does not.

Practitioners now separate two things. Settlement describes how value travels, while money movement covers everything required before that value counts as clean, compliant, and spendable inside a business.

Stablecoins improve the first part of that journey. Organisations still have to rebuild the second.

The stablecoin money-movement stack

Mature teams have stopped treating a stablecoin payment as a single transaction. They treat it as a connected sequence instead, and it helps to name the model.

A useful way to see it is the stablecoin money-movement stack, seven layers where weakness in any one surfaces somewhere downstream.

The first three layers set the foundation. Asset selection asks which coin clears the bar on reserve quality, redemption rights, and liquidity. Chain selection weighs transaction cost, network resilience, and fit with the intended corridor. Custody settles who actually holds the assets, whether a qualified custodian, an exchange, an MPC wallet that splits key control across parties, or an internal treasury desk.

Compliance comes next, the layer that turns a token transfer into a commercial payment. Wallet screening, sanctions controls, and counterparty attribution decide whether money can legally move at all. So do Travel Rule obligations, the duty to pass originator and beneficiary details alongside each transfer.

Liquidity follows, and it is what turns a digital balance into working capital, through redemption partners and enough currency depth to convert at need.

Then comes the least visible layer, and often the most labour-intensive. Every payment has to reconcile against invoices, tax records, exchange rates, and the ledger. Faster settlement earns very little if month-end close gets harder.

No single layer looks like much on its own. Taken together, they explain why the strongest programmes resemble payment-redesign projects rather than crypto launches.

Ownership decides the outcome

Ask why stablecoin projects stall and most people name regulation, technology, or volatility. Implementation teams keep landing somewhere quieter. Ownership.

A cross-border stablecoin payment crosses boundaries that ordinary payments rarely touch all at once. Product owns the customer flow, engineering owns the wallets, treasury owns reserves and redemption, compliance owns AML and sanctions controls, finance owns reconciliation, and legal owns licensing.

Each function does its job. Very few own the workflow that runs through all of them. Projects clear pilots because every department succeeds in isolation, then hit friction in production when nobody connects the parts into one accountable process.

This cost is not abstract. TRM Labs put illicit-entity stablecoin flows at roughly $141 billion in 2025, with monthly volume crossing $1 trillion several times, a heavy load on screening, monitoring, and case management. When the compliance bill grows that fast, treating the blockchain as the hard problem misreads where the money and the risk actually sit.

Chainalysis implementation guidance reaches the same conclusion. Stablecoins need a single cross-functional owner spanning treasury, compliance, legal, and engineering before volume climbs, not after. Governance here does not slow innovation. It lets innovation survive contact with production.

Regulation is turning from brake into trigger

For years the market read regulation as the obstacle. That reading is ageing badly.

Large companies do not avoid stablecoins because rules exist. They hesitate when the rules are unclear, since a treasury committee cannot approve a payment programme without settled redemption rights and reserve disclosure.

Clarity is arriving fast, and for an enterprise buyer it matters more than any gain in blockchain throughput. The US GENIUS Act created a federal regime for payment stablecoins, the EU's MiCA rules are already in force, and the UK finalised its sterling-backed regime in June 2026.

Clearer is not yet consistent, though. The Financial Stability Board found significant gaps and inconsistencies across jurisdictions, which leaves global cross-border programmes navigating different licensing, disclosure, and AML rules corridor by corridor.

The rail is going global while the rules around it stay local. For many firms, jurisdictional strategy is becoming part of payment strategy, and possibly the next real advantage.

Stablecoins are not replacing banks

Headlines predicting that stablecoins will replace banks tend to overlook what banks actually do. Banks create credit, safeguard deposits, manage liquidity, and provide regulated access to domestic payment systems. Settling more than $27 trillion in a year does not touch any of that work.

What they improve is the movement of value between parties, and little else. That single stretch of the financial system has barely changed in decades.

The trade-offs deserve the same honesty. In weak-currency markets, easy access to digital dollars helps users, yet the IMF and BIS warn it can deepen dollarisation and strain monetary sovereignty.

Reserves carry consequences too. BIS research links stablecoin reserve flows to short-term US Treasury yields, so payment adoption now reaches into government-debt markets.

None of this is fatal. It confirms that the winners will run several rails at once, picking the right one for each corridor. That flexibility is far tougher to copy than a blockchain integration, because holding consistent governance, compliance, and liquidity control across every rail is the genuinely hard task.

The new advantage is operational, not technical

For years firms measured payments by settlement time, wire fees, and currency spread, because those were the levers banks exposed. Stablecoins widen the question.

A payment that settles instantly but sits trapped inside an exchange account has not improved working capital. A cheap transfer that throws reconciliation exceptions can cost more than it saves.

So the sharpest teams are changing what they count. They stop asking how fast value moves. They ask how fast it becomes usable. Then they price the whole corridor, from liquidity and conversion through reconciliation, compliance review, and exception handling, not the on-chain fee alone.

Technology keeps getting easier to buy. Operational discipline keeps getting harder to replicate, and that is where the gap between experimenting and operating now opens.

Stablecoins are winning because they fix problems businesses live with every day, not problems the technology imagined for them. Even so, every faster payment still needs governance, liquidity, compliance, and trust.

Over the coming decade, the leaders will not be the firms with the fastest chain or the lowest fee. They will be the ones that recognise a plain operational truth.

Moving money has become easy. Managing its movement has not. That is the discipline that now pays.

Frequently Asked Questions

Why are stablecoins gaining traction in global payments?

They cut settlement friction and let value move continuously, around the clock, without a chain of correspondent banks. The pull reflects demand for better cross-border money movement rather than interest in crypto itself, which is why payment firms and banks are now building with them directly.

Are stablecoins right for every international payment?

No. Their value depends on the corridor, the regulatory position, liquidity, and operational fit. Some routes settle better through conventional banking, while slow or expensive corridors gain the most from stablecoin settlement.

What is the hardest part of implementing stablecoins?

Rarely the blockchain. The difficulty is governance, covering issuer approval, custody, compliance, liquidity, and reconciliation, and assigning one owner for a workflow that spans treasury, compliance, finance, legal, and engineering.

How does regulation affect enterprise adoption?

Clear regulatory rules on reserves, redemption, and disclosure remove the uncertainty that stalls treasury sign-off. The GENIUS Act, MiCA, and the UK's 2026 regime let firms treat stablecoins as durable payment rails rather than an experiment, though fragmentation across jurisdictions still adds review work.

What separates successful stablecoin programmes?

Successful teams start from a business problem, not a token. They define the use case, assign clear ownership, build compliance into the workflow from day one, and judge success by time to usable funds, total corridor cost, failed-payout rate, and reconciliation accuracy, not settlement speed alone.