JPMorgan Warns DeFi Exploits and Stagnant TVL Continue to Limit Institutional Appeal

JPMorgan analysts warn that decentralized finance continues to face institutional adoption challenges following the $290 million KelpDAO exploit, which erased approximately $20 billion in total value locked within days and left $200 million in bad debt. The attacker breached a cross-chain bridge and minted $292 million in unbacked rsETH tokens used as collateral to drain lending protocols. While DeFi total value locked has partially recovered in dollar terms, it remains largely unchanged in ETH-denominated terms, suggesting limited organic expansion. Following the exploit, capital flowed from DeFi lending into Tether's USDT, which offers deeper liquidity and faster off-ramps during stress periods.

KelpDAO Exploit and Systemic DeFi Vulnerabilities

• ▪Hack losses in 2026 are tracking 2025 levels according to JPMorgan analysts
• ▪The KelpDAO exploit left roughly $200 million in bad debt after the attacker used unbacked rsETH as collateral to drain lending protocols
• ▪Infrastructure and bridge exploits remain the primary vulnerability in DeFi despite gains in smart contract auditing
• ▪An attacker breached a cross-chain bridge in the KelpDAO exploit and minted $292 million in unbacked rsETH
• ▪Cross-chain bridges have been responsible for billions of dollars in losses due to complicated designs, shared infrastructure, and weak validation mechanisms
• ▪The KelpDAO exploit erased approximately $20 billion in total value locked (TVL) within days

Stagnant Growth and Limited Institutional Adoption

• ▪JPMorgan warned that persistent security vulnerabilities and stagnant total value locked are weighing on decentralized finance's institutional appeal
• ▪JPMorgan analysts raised questions about DeFi's ability to scale for institutional use
• ▪DeFi total value locked has partially recovered in dollar terms but is largely unchanged in terms of ether (ETH)

Flight to Stablecoins During Market Stress

• ▪Tether's USDT benefits from deeper liquidity and faster off-ramps compared to DeFi lending protocols
• ▪Tether's USDT serves as a preferred flight-to-safety asset during periods of stress in crypto markets
• ▪Crypto participants responded to recent exploits by seeking refuge in stablecoins according to JPMorgan analysts led by Nikolaos Panigirtzoglou
• ▪Following the KelpDAO exploit, capital flowed from DeFi lending into Tether's USDT

Perspective of JPMorgan analysts

• ▪JPMorgan analysts led by Nikolaos Panigirtzoglou see capital flight to USDT as a sign of institutional preference for traditional financial instruments over DeFi protocols
• ▪JPMorgan analysts view persistent security vulnerabilities in DeFi as a barrier to institutional adoption