DeFi, short for decentralized finance, is the umbrella term for financial services — trading, lending, borrowing, earning yield — rebuilt as open software that runs directly on a blockchain instead of inside a bank or brokerage. Rather than an institution deciding who can borrow and keeping a private ledger, a set of publicly viewable rules, written into smart contracts, does the job automatically for anyone with a compatible wallet.
What “decentralized” actually removes
A traditional bank plays several roles at once: it holds your deposits, decides who qualifies for a loan, sets the terms, and maintains the master record of who owns what. DeFi splits those functions apart and replaces the institution with code. A lending protocol does not evaluate your creditworthiness the way a bank does; it enforces a fixed, published rule — deposit acceptable collateral, and the contract releases the loan automatically, with no application, no approval process, and no ability for anyone to quietly change the terms after the fact for a specific user.
The core pieces DeFi is assembled from
- Decentralized exchanges — for swapping one token for another without a centralized order book run by a company.
- Lending and borrowing markets — for earning interest on deposits or borrowing against posted collateral.
- Liquidity pools — shared pots of tokens, funded by users, that many DeFi applications rely on to function.
- Stablecoins — tokens that track a steady value, giving DeFi a practical unit of account that does not swing as wildly as most crypto assets.
These pieces are described as “composable,” meaning one protocol can plug directly into another. A token earned by lending on one platform can become the collateral for a loan on a second, whose receipt is then used somewhere else entirely — all without a single application form, though each additional layer also adds another point where something can go wrong.
How a decentralized exchange actually prices a trade
A conventional exchange matches individual buyers and sellers through an order book. Most decentralized exchanges instead use an automated market maker: a pool holding two tokens, priced by a formula based on the ratio between them. When you trade, you add to one side of the pool and remove from the other, and the price shifts mechanically in response — there is no need to find a matching counterparty, because you are trading directly against the pool. The funds inside that pool come from other users, called liquidity providers, who deposit tokens in exchange for a share of the trading fees.
Where DeFi yield actually comes from
DeFi’s ability to pay a return on deposited assets is one of its biggest draws, and it is worth being able to trace where that return originates rather than treating it as a given. Interest paid to lenders comes from borrowers; fees paid to liquidity providers come from traders using the pool. The combined value users have deposited across DeFi protocols is tracked by a metric called total value locked (TVL), a rough gauge of how much capital currently trusts a given protocol.
If you cannot identify where a yield is actually coming from — whose interest payment, whose trading fee — treat that as a warning sign rather than an opportunity. Sustainable returns in DeFi trace back to real economic activity; a yield with no identifiable source is often being funded by new deposits rather than genuine earnings, which cannot continue indefinitely.
Custody in DeFi is different by default
Using DeFi typically means holding your own assets in a self-custody wallet rather than depositing them with a company, since most DeFi protocols interact directly with your wallet rather than an account they manage on your behalf. That removes a middleman’s ability to freeze or block your funds, but it also removes any safety net: there is no support line if you sign a malicious transaction or send funds to the wrong contract. Our guide on crypto wallets covers this trade-off in more detail.
Risks that are specific to DeFi
| Risk | What it means |
|---|---|
| Smart-contract risk | A bug or exploit in a protocol’s code can drain funds quickly and irreversibly, even in projects that had been operating for a long time. |
| Oracle risk | Protocols rely on external price feeds called oracles; a manipulated or faulty feed can trigger incorrect liquidations or mispriced trades. |
| Impermanent loss | Supplying two assets to a liquidity pool can leave a provider worse off than simply holding those assets, when their relative prices diverge. |
| Rug pulls | A team can launch a project, attract deposits, and disappear with the funds, particularly in newer or unaudited protocols. |
Habits that reduce avoidable DeFi losses
No checklist eliminates risk in DeFi, but a few habits meaningfully reduce the avoidable kind. Start with amounts you can afford to lose entirely while you learn how transactions actually behave. Favor protocols that have operated for a meaningful length of time and have undergone independent security audits, while remembering that an audit reduces risk without eliminating it — audited protocols have still been exploited. Before signing anything, try to understand what permissions the transaction actually grants, and periodically review and revoke approvals you no longer use.
Common misconceptions worth correcting
A few myths about DeFi cause real, avoidable harm. The first is that it is anonymous; in reality most public blockchains are pseudonymous, and every transaction remains permanently visible and increasingly analyzable. The second is that a high advertised yield is essentially free money; sustainable yield has a traceable source, and an unusually high, unexplained return is a warning sign rather than an opportunity. The third is that an audit means a protocol is safe; audits catch many issues but cannot guarantee flawless code, and exploits have hit audited projects before. Finally, many newcomers assume a mistaken transaction can be reversed the way a bank transfer sometimes can. On most networks it cannot, which is precisely why understanding a transaction before signing it matters more in DeFi than almost anywhere else in finance.
This guide is educational and is not financial advice. Cryptocurrency prices are volatile and you should never risk money you cannot afford to lose. Always do your own research before acting.
Frequently asked questions
Do I need permission to use DeFi?
No. Most DeFi apps are open to anyone with a self-custody wallet -- there is no account application. That openness is the point, but there is also no safety net.
Is DeFi the same as a crypto exchange?
Not quite. A centralized exchange is a company holding your funds. A decentralized exchange is software you trade from your own wallet, against a pool, with no company holding assets.
What is the biggest risk in DeFi?
Smart-contract risk -- a code flaw can drain funds instantly and irreversibly. Market risk, liquidation risk, and scams sit alongside it. Never deposit more than you can afford to lose.
Can DeFi transactions be reversed if I make a mistake?
Generally no. Most blockchains hosting DeFi activity do not support reversing a confirmed transaction, whether it was a genuine mistake or a scam.