What decentralized finance protocols automate and where smart-contract, oracle and governance risk enters.
Identify where yield comes from and who controls contracts, prices, and upgrades.
- Automation replaces some intermediaries with technical dependencies.
- Always identify the economic source of yield.
- Audit upgrade keys and governance concentration.
Programs coordinate markets
DeFi protocols use smart contracts to exchange assets, issue collateralized loans or create derivatives. The contracts can reduce some intermediary roles while adding code, oracle and network dependencies. <strong>Yield has a source.</strong> Returns may come from borrower interest, trading fees, token incentives or leverage. If the source cannot be explained, the risk probably cannot be evaluated.
High displayed yield can collapse as incentives or prices change. <strong>Control can be hidden.</strong> Admin keys, upgrade rights, oracle selection and governance concentration can allow rapid changes. 'Decentralized' should be tested against actual control paths rather than accepted as a product label.
Follow the source of a displayed yield
A lending application advertises a 12 percent annual yield. Break that figure into borrower interest, trading fees, newly issued reward tokens, leverage, and any temporary subsidy. Ask whether the rate is fixed or changes with utilization, what collateral backs borrowers, how prices enter the contract, and who can upgrade or pause it.
If most of the yield comes from a token whose price falls, the displayed percentage may not preserve value. Then map the failure path: wallet approval, smart contract, oracle, collateral liquidation, chain congestion, bridge, front end, and administrator keys. An audit can reduce some code risk but cannot guarantee economic design, governance behavior, or user actions.
The useful question is not whether the application is decentralized. It is which intermediaries were removed and which technical or governance dependencies replaced them.
What runs without an intermediary
Decentralised finance is a set of programs on a blockchain that provide financial services by rule rather than by a company: exchanges that price assets with a formula and liquidity supplied by users, lending markets that set interest by supply and demand and liquidate collateral automatically, and derivatives that settle from on-chain prices.
You interact by sending transactions to a contract from a wallet you control; there is no account to open and no one to refuse you. The trade is that there is also no one to call when the code, the prices or your own transaction go wrong.
Where Bitcoin fits
Bitcoin's script is intentionally limited, so most DeFi activity happens on Ethereum and similar chains. Bitcoin participates there as wrapped tokens - a custodian holds bitcoin and issues an equivalent token on the other chain - which reintroduces exactly the intermediary DeFi claims to remove. Sidechains and federated networks offer Bitcoin-adjacent smart contracts under their own trust models. Lightning handles payments, not lending.
Anyone offering 'yield on your bitcoin' is either lending it to someone, wrapping it into another system, or both; the question is always who holds the coins while the yield is earned.
The risks, in the order they usually bite
Smart-contract bugs drain funds irreversibly and have done so for hundreds of millions of dollars at a time. Administrator keys can change or pause a protocol, so 'decentralised' is often a description of the front end rather than the control. Oracles that feed prices can be manipulated, triggering liquidations at false prices. Collateral can fall faster than liquidations clear during a crash.
Tokens issued as rewards can lose most of their value. And fraud is common: a protocol whose team is anonymous and whose code is unaudited is an invitation. The SEC's and FATF's materials on crypto assets are sober starting points.
Map every dependency before the displayed yield
Name the borrower, trading activity, incentive, or leverage that funds a return. Then inspect contract upgrades, administrator keys, oracle design, collateral, bridge exposure, and the exit path during stress.
Questions that reveal DeFi risk
What is DeFi?
Financial services - lending, exchange, derivatives - run by programs on a blockchain rather than by a company. Users interact with contracts directly, custody their own assets, and accept the risk that the code and its administrators behave as expected.
Does DeFi exist on Bitcoin?
In a limited form. Bitcoin's scripting is deliberately restricted, so most activity uses wrapped bitcoin tokens on other networks, sidechains, or Lightning. Each of those adds a custodian, a bridge or a federation whose trust model differs from Bitcoin's own.
What are the main risks in DeFi?
Bugs in contract code, administrator keys that can change or drain a protocol, oracle failures that misprice collateral, liquidation during volatility, and outright fraud. Audits reduce but do not remove them, and losses are rarely recoverable.
Sources and further reading
Primary documents this guide draws on. Links open the original publisher.
- Decentralized finance (DeFi) ethereum.org
- Uniswap documentation Uniswap
- Crypto assets U.S. Securities and Exchange Commission, Investor.gov
- Virtual assets Financial Action Task Force