Ethereum DeFi explained: the financial system built on smart contracts

DeFi, short for decentralized finance, is a set of financial services like trading, lending, and saving that run on Ethereum smart contracts instead of banks. Anyone with a wallet can use it, the code is public, and you hold your own funds. That openness is the appeal, and it is also where the risk lives.

What is DeFi, in plain terms?

DeFi is a financial system built from smart contracts on Ethereum, where software handles the jobs a bank or broker normally would. You can swap one token for another, lend out assets to earn interest, borrow against what you hold, or bet on prices, all without a company sitting in the middle approving each step.

The pieces that make it work are smart contracts, which are programs that live at public addresses and run exactly as written. (What a smart contract is, and why no one can quietly change it, is covered in our companion guide on Ethereum smart contracts.) In DeFi, those contracts hold funds and enforce rules, so a lending market or an exchange is really just code that anyone can read and anyone can use.

Two things follow from that design. First, the markets never close and never check who you are; a contract will process a valid request from any wallet, at any hour (source: What is DeFi?). Second, there is no support desk and no central party to reverse a mistake. The same openness that lets you use DeFi without permission also means you, not an institution, carry the risk when something goes wrong.

Here is the everyday version. You might swap one token for another straight from your wallet. You might earn interest by lending out a stablecoin. You might stake ETH and still hold a token you can use elsewhere. In each case, a contract does the job a bank clerk or broker once did. You approve the action from your wallet, and the rules run on their own.

What are the layers DeFi is built from?

DeFi is best pictured as a stack of layers, each one building on the layer below. At the bottom is Ethereum itself, which settles every transaction. Above it sit the assets, then the protocols, then tools that route between them, and finally the apps you click. Understanding the stack makes any single protocol easier to place.

Here is the stack from the ground up, with familiar examples at each level:

Each layer trusts the one beneath it, which is the source of both DeFi's power and its fragility. A strong settlement layer lets everything above it inherit Ethereum's security. But a weakness in a lower layer, such as a flawed asset or protocol, flows upward into everything built on top, a point the rest of this guide keeps coming back to.

What are the main types of DeFi?

Most of DeFi falls into five categories, and knowing them is enough to make sense of almost any protocol you will meet. Each one rebuilds a familiar financial service as a smart contract: an exchange, a lender, a dollar, a derivatives desk, or a savings product tied to staking.

Decentralized exchanges (DEXs) let you swap one token for another directly from your wallet, with no account and no order book in the traditional sense. Many use automated pricing pools rather than matching buyers to sellers. The mechanics of those pools are covered in our guides on how automated market makers work and centralized versus decentralized exchanges.

Lending and borrowing protocols let you deposit assets to earn interest, or post collateral and borrow against it. Rates are set automatically by supply and demand in the contract. Aave is the largest example, and lending has been one of DeFi's most-used functions for years. Borrowers usually have to lock up more value than they take out, a safety margin called over-collateralization, which is what protects the lenders if prices move suddenly.

Stablecoins are tokens designed to hold a steady value, usually one US dollar, such as USDC, USDT, and DAI. They are the unit most DeFi activity is priced and settled in, because a stable unit is far easier to lend, borrow, and trade with than a volatile one. Not all stablecoins hold their value the same way: some are backed by real dollars held in reserve, others by crypto collateral or by algorithms, and those designs carry very different risks. How stablecoins fit a portfolio is covered separately in our guide on stablecoins in a portfolio.

Derivatives protocols let users trade contracts whose value tracks something else, such as perpetual futures on the price of ETH. They bring margin trading and hedging on-chain. They are more advanced and higher-risk than simple swaps or savings, and best left until the basics are familiar.

Liquid staking lets you stake ETH to help secure the network and still receive a token representing your staked position, so the value is not locked away. Lido is the best-known example. Because that token keeps earning staking rewards while staying usable, it has become one of the most common building blocks in the rest of DeFi, which leads straight to the idea in the next section.

What is TVL, and how big is DeFi now?

Total value locked, or TVL, is the headline measure of DeFi's size: it adds up the value of all the assets currently deposited across DeFi protocols. A higher TVL means more money is being put to work, so it is the number people reach for first when they ask how big DeFi has become.

As of April 2026, total DeFi TVL sat around 100 billion dollars, though the exact figure depends on which categories you count (source: DefiLlama). One caveat matters before you lean on that number. TVL is easy to double-count, because the same money can appear in several places at once. If you stake ETH with Lido, then use the staking token you receive as collateral on Aave, your deposit is counted by both protocols. So the headline total overstates how much unique money is actually in the system. It is a useful gauge of scale and momentum, not a precise bank balance.

A few protocols dominate the rankings, and they have for years. Aave, a lending market, has been the largest or near-largest DeFi protocol for several years running, holding on the order of 26 billion dollars in April 2026 (source: Aave V3 on DefiLlama). Lido, the liquid-staking protocol, has held the top or near-top spot for much of 2024 and 2025 on the strength of ETH staking, around 23 billion dollars in the same period (source: Lido on DefiLlama). Uniswap, the best-known DEX, holds a few billion dollars in its pools while handling large trading volume (source: Uniswap on DefiLlama). These figures move with the market, so treat them as a snapshot rather than a fixed value.

What are "money legos"? Composability explained

Composability is the property that DeFi protocols can plug into each other, so the output of one becomes the input of another, the way Lego bricks snap together. Because every contract sits at a public address, one strategy can move funds through several protocols in a single chain of steps, with no company arranging the connections.

A simple walkthrough shows why people call them money legos. Say you start with 10 ETH:

1. You stake the 10 ETH with a liquid-staking protocol and receive about 10 staking tokens in return, which keep earning staking rewards.

2. You deposit those staking tokens into a lending market as collateral.

3. Against that collateral, you borrow a stablecoin, say a portion of the value in USDC, keeping a safe buffer so you are not easily liquidated.

4. You put that borrowed USDC to work somewhere else, perhaps another lending market or a liquidity pool.

5. To unwind, you reverse the steps: withdraw the USDC, repay the loan, reclaim the staking tokens, and unstake back to ETH.

Each step is a separate protocol, yet they connect directly because they all speak the same on-chain language. That is powerful, and it is also why risk compounds. If any single protocol in the chain fails, the whole stack built on top of it is exposed at once. Composability multiplies both the opportunity and the fragility, which is the theme of the rest of this guide.

How is DeFi different from a bank?

DeFi and a bank can offer similar services, but the trade-offs are nearly opposite. A bank is gated, custodial, and private, with consumer protections and limited hours. DeFi is open, self-custodial, and transparent, running every hour of the year, with no safety net if something breaks. Neither is simply better; they ask you to accept different risks.

The differences line up cleanly side by side:

The row that deserves the most weight is insurance. In many countries, money in a bank is protected up to a limit if the bank fails. DeFi has no equivalent backstop. If a protocol is exploited or a contract has a flaw, the lost funds are usually gone for good, as the next section shows.

What this means in practice is simple. DeFi hands you control and visibility a bank does not, and in return it hands you responsibility a bank normally absorbs. If you value being able to verify everything yourself and move money at any hour, that trade can be worth it. If you value a safety net and someone to call when something breaks, a bank still has the edge. In reality, many people use both, for different jobs.

From Blofin's operational perspective, we watched the April-2026 stress event from both sides at once. Funds held in custody on our platform were unaffected and kept moving normally, while users who had moved assets into DeFi protocols were exposed to the on-chain fallout there. That dual vantage point is exactly why this guide frames the DeFi-versus-bank decision as a question of which risks you are choosing to take on, rather than which option is simply better.

Is DeFi safe? What the April 2026 Kelp DAO failure showed

DeFi is not safe in the way an insured bank account is safe; its safety depends entirely on the specific protocols you use and how they are built. Well-audited, long-running contracts that have held large sums for years are a very different proposition from a new, unaudited one. The clearest recent reminder of the downside came in April 2026.

In that incident, an attacker exploited a flaw in how the liquid-staking project Kelp DAO verified messages from its cross-chain bridge, releasing about 116,500 rsETH, worth roughly 292 million dollars at the time (source: The $292M Kelp exploit). Because of composability, the damage did not stay in one place. The attacker used the unbacked tokens as collateral to borrow real assets from the lending market Aave, whose own incident report estimated potential bad debt of roughly 124 to 230 million dollars depending on how the loss was shared (source: Aave rsETH incident report). A group of projects later organized a voluntary rescue effort, called DeFi United, to help cover the hole.

So how do you tell a safer protocol from a riskier one? A few signals help. Look for a long track record, since a contract that has held large sums for years has survived real attacks. Look for public audits by known security firms. Check whether the protocol leans on a single price feed or bridge, because those connection points are where many exploits begin. And be wary of unusually high yields, which almost always signal unusual risk. None of this guarantees safety, but it separates the well-worn from the untested.

The lesson is not that DeFi is doomed; the system kept running and the response was coordinated. The lesson is that risk in DeFi is a counterparty question. When a contract you rely on breaks, there is no settlement window and no insurer to call. The practical takeaways are ordinary financial caution applied to a new setting: favor established, audited protocols, understand that one weak link can cascade through everything built on it, and never assume a high advertised yield comes without matching risk. The specific risks of chasing yield are covered in our guide on yield-farming risks for investors.

Why is most DeFi on Ethereum, and what does it mean if you use it?

Most DeFi runs on Ethereum because that is where the money, the users, and the most battle-tested contracts already are. New protocols launch where the deepest liquidity sits, and each one that arrives makes the next more useful through composability. That network effect is hard for newer chains to copy quickly.

Ethereum's main chain can be expensive when busy, so a lot of DeFi activity has moved to Layer 2 networks, which run the same kind of contracts far more cheaply while still settling back to Ethereum. Why those networks exist and how their costs compare is covered in our guide on why Ethereum needs Layer 2s. For a user, the practical effect is that you will often bridge funds to a Layer 2 to use DeFi at a reasonable cost.

That bridge is the moment worth pausing on. From Blofin's operational perspective, when a user withdraws USDC from our platform and bridges it to a Layer 2 to use DeFi, they are leaving custodial coverage and entering the DeFi counterparty universe. Our risk team treats the bridge contract as the boundary: once funds cross it, the user has taken on smart-contract risk on the destination network and on every protocol they touch there. We make that boundary visible in the withdrawal flow, but we cannot make it disappear. Knowing exactly where that line sits, and what is on the other side of it, is the single most useful thing a newcomer to DeFi can carry with them.

If you are just starting, you do not have to use any of this to understand it. A sensible first step is to read, not deposit. Open a well-known protocol's page, see what it does, and notice which layer of the stack it sits in. When you do decide to try DeFi, start small, on an established protocol, with an amount you can afford to lose while you learn how it behaves. The system rewards curiosity, and it punishes rushing.

Frequently asked questions

Is DeFi the same as crypto?

No. Crypto is the broad category of digital assets and blockchains. DeFi is one use of it: financial services like trading, lending, and saving built from smart contracts, mostly on Ethereum. You can own crypto without ever touching DeFi, for example by simply holding ETH. DeFi is what you are using when that ETH is put to work inside a protocol that lends, swaps, or stakes it.

Are DeFi yields safe?

Not automatically. A yield is a payment for taking on risk, so a higher advertised return usually signals higher risk, whether from the protocol's code, its dependence on price feeds, or the assets involved. Some established protocols have paid modest yields reliably for years; some new ones have collapsed quickly. Treat any yield as a question about what could go wrong, not a free return. Our guide on yield-farming risks for investors covers this in depth.

What is TVL?

TVL, or total value locked, is the total value of assets deposited across DeFi protocols, used as a rough measure of the system's size and momentum. It is useful but imperfect, because the same money can be counted in more than one protocol at once, for example staked ETH that is then used as collateral elsewhere. Read it as a gauge of scale, not an exact figure.

Why is most DeFi on Ethereum?

Because Ethereum has the deepest liquidity, the largest user base, and the longest track record of contracts surviving real conditions. Composability means each new protocol is more useful when it can connect to the ones already there, so activity concentrates where the ecosystem is densest. Much of that activity now runs on Ethereum Layer 2 networks, which are cheaper but still settle back to Ethereum.

Can DeFi replace banks?

Not wholesale, at least not today. DeFi can replicate many banking functions and offers genuine advantages in openness and transparency, but it lacks the consumer protections, dispute resolution, and deposit insurance most people rely on, and it places the full burden of security on the user. For now it is better understood as a parallel, programmable financial system with a different risk profile than as a drop-in replacement for a bank.

Researched and written by the Blofin Academy editorial team with AI-assisted drafting. Primary sources include the ethereum.org DeFi explainer, DefiLlama TVL data, and the Aave rsETH incident report. Total-value-locked and protocol figures are snapshots as of April 2026 and were independently verified against cited dashboards; figures change frequently.

This article is for informational purposes only and does not constitute financial advice, investment guidance, or a recommendation to buy, sell, or hold any digital asset. Decentralized finance involves significant risk, including the risk of total loss from smart-contract exploits, and carries no deposit insurance or guaranteed recourse. Conduct your own research and consult qualified professionals before making decisions. Blofin Academy content reflects the state of public information at time of publication; protocols and ecosystem data change frequently.