DeFi Security Crisis Blocks Institutional Money, JPMorgan Warns
JPMorgan analysts have identified security breaches and weak capital growth as major barriers to institutional investment in decentralized finance.
The report, led by managing director Nikolaos Panigirtzoglou, cited the Kelp DAO exploit as a central example of the sector's vulnerabilities. The attack erased an estimated $20 billion from DeFi total value locked within a matter of days.
The attacker exploited a cross-chain bridge to mint $292 million in unbacked rsETH tokens, which were then used as collateral on the lending protocol Aave to borrow real Ethereum, leaving an estimated $230 million in bad debt across the protocol. Losses did not stay contained to platforms directly exposed to rsETH, with capital fleeing from pools with no direct connection to the compromised asset.
Total hack losses across the crypto sector this year are running at roughly the same pace as 2022, according to JPMorgan analysts. Smart contract auditing has improved, but cross-chain bridge security remains a major concern.