JPMorgan Warns DeFi Exploits and Stagnant TVL Continue to Limit Institutional Appeal

Apr 25, 2026

JPMorgan analysts warn that decentralized finance continues to face institutional adoption challenges following the $290 million KelpDAO exploit, which erased approximately $20 billion in total value locked within days and left $200 million in bad debt. The attacker breached a cross-chain bridge and minted $292 million in unbacked rsETH tokens used as collateral to drain lending protocols. While DeFi total value locked has partially recovered in dollar terms, it remains largely unchanged in ETH-denominated terms, suggesting limited organic expansion. Following the exploit, capital flowed from DeFi lending into Tether's USDT, which offers deeper liquidity and faster off-ramps during stress periods.

KelpDAO Exploit and Systemic DeFi Vulnerabilities

▪Hack losses in 2026 are tracking 2025 levels according to JPMorgan analysts.
▪The KelpDAO exploit left roughly $200 million in bad debt after the attacker used unbacked rsETH as collateral to drain lending protocols.
▪Infrastructure and bridge exploits remain the primary vulnerability in DeFi despite gains in smart contract auditing.
▪An attacker breached a cross-chain bridge in the KelpDAO exploit and minted $292 million in unbacked rsETH.
▪Cross-chain bridges have been responsible for billions of dollars in losses due to complicated designs, shared infrastructure, and weak validation mechanisms.
▪The KelpDAO exploit erased approximately $20 billion in total value locked (TVL) within days.

Stagnant Growth and Limited Institutional Adoption

▪JPMorgan warned that persistent security vulnerabilities and stagnant total value locked are weighing on decentralized finance's institutional appeal.
▪JPMorgan analysts raised questions about DeFi's ability to scale for institutional use.
▪DeFi total value locked has partially recovered in dollar terms but is largely unchanged in terms of ether (ETH).

Flight to Stablecoins During Market Stress

▪Tether's USDT benefits from deeper liquidity and faster off-ramps compared to DeFi lending protocols.
▪Tether's USDT serves as a preferred flight-to-safety asset during periods of stress in crypto markets.
▪Crypto participants responded to recent exploits by seeking refuge in stablecoins according to JPMorgan analysts led by Nikolaos Panigirtzoglou.
▪Following the KelpDAO exploit, capital flowed from DeFi lending into Tether's USDT.

Perspective of JPMorgan analysts

▪JPMorgan analysts led by Nikolaos Panigirtzoglou see capital flight to USDT as a sign of institutional preference for traditional financial instruments over DeFi protocols.
▪JPMorgan analysts view persistent security vulnerabilities in DeFi as a barrier to institutional adoption.