What Is DeFi? Decentralized Finance Explained

You’ve probably heard that DeFi lets you trade, borrow and earn interest without a bank. You’ve also heard about hacks that drained hundreds of millions of dollars overnight. Both are true, and that’s why DeFi is worth understanding even if you never use it.

Decentralized finance shows up in conversations about stablecoins, payments, tokenized assets and crypto regulation. If you run a business, advise clients or just want to know what your nephew is doing with his crypto, this guide explains how DeFi works, what it’s used for and where the risks hide.

This is general information, not investment, financial or legal advice. Nothing here is a recommendation to buy, sell or use any token or app.

What DeFi means

DeFi is short for decentralized finance: financial services built as software on public blockchains such as Ethereum. Instead of a bank or broker holding your money and approving transactions, the rules live in smart contracts, programs that run on the blockchain and execute automatically when conditions are met.

A few traits set DeFi apps apart:

• Wallet-based access. You connect a self-custody crypto wallet. There’s usually no account application.
• Always on. Contracts run 24 hours a day, every day.
• Transparent code and transactions. Anyone can inspect contract code and transaction history on the blockchain.
• Composable. Apps can plug into each other, like building blocks, so one protocol can use another’s tokens or prices.

“Decentralized” is often more of a goal than a fact. The US Treasury’s 2023 DeFi risk assessment noted that the term has no generally accepted definition and is often applied to services that aren’t functionally decentralized. Many protocols still have a company, developer team or small group of token holders who can change the code.

If the basics of blockchains are new to you, start with what blockchain is.

How DeFi differs from traditional finance

The main DeFi building blocks

Decentralized exchanges

A decentralized exchange (DEX) lets people swap one token for another directly from their wallets. Many popular DEXs, such as Uniswap, use an automated market maker: instead of matching buyers with sellers, the contract holds pools of 2 tokens and sets prices with a formula based on how much of each is in the pool.

The tokens in those pools come from liquidity providers, users who deposit pairs of tokens and earn a share of trading fees. Their main risk, often called impermanent loss, is that when prices move, they can end up worse off than if they had simply held the tokens.

Lending and borrowing

Lending protocols, such as Aave and Compound, pool deposits from lenders and let others borrow from that pool. Interest rates adjust automatically based on supply and demand.

Because there’s no credit check, loans are usually overcollateralized. To borrow $1,000 in a stablecoin, you might have to lock up $1,500 or more in another crypto asset. If your collateral’s value falls below a set threshold, the protocol can liquidate it, selling some or all of it to repay the loan, often with a penalty.

Stablecoins

Much of DeFi runs on dollar stablecoins, tokens designed to stay worth $1. Some are issued by companies backed by cash and Treasury bills. Others are created inside DeFi itself, backed by crypto locked in smart contracts.

Other pieces

• Oracles feed outside data, such as asset prices, into smart contracts.
• Bridges move tokens between different blockchains.
• Governance tokens give holders a vote on protocol changes.
• Staking and yield products pay rewards for locking tokens, often on proof-of-stake networks.

Key takeaway: DeFi replaces the institution with code. That removes gatekeepers and business hours, but it also removes the safety nets: no one can reverse a mistake, and a single bug can put every deposit at risk.

Where DeFi yields come from

When a DeFi app shows a yield, ask where the money comes from. Common sources:

• Borrowers paying interest on lending protocols
• Trading fees paid to liquidity providers on DEXs
• Token rewards, where a protocol pays users in its own newly issued tokens
• Staking rewards from blockchain networks

Interest and trading fees come from real activity. Token rewards are different: they’re often paid in a token whose price can fall sharply, which means a high advertised yield can shrink quickly in dollar terms. If a yield seems too good to be true and you can’t explain its source, treat that as a warning sign.

The risks to understand

Smart contract risk

Smart contracts do exactly what their code says, including the bugs. Attackers search for flaws, and when they find one, they can drain a protocol in minutes. Audits by security firms reduce this risk but don’t eliminate it, and even long-running, audited protocols have been exploited.

Bridge and infrastructure risk

Bridges hold large amounts of tokens, which makes them targets. In 2022, the FBI attributed the theft of $620 million in Ethereum, from the Ronin bridge behind the game Axie Infinity, to North Korea’s Lazarus Group. Oracles can also be manipulated, feeding false prices that trigger bad loans or liquidations.

Market and liquidation risk

Crypto prices can move sharply. In a fast crash, borrowers’ collateral can be liquidated before they have time to add more. Stablecoins can also lose their peg, as algorithmic coins have done.

Governance and admin key risk

Many protocols keep admin keys or upgrade powers. If those keys are stolen or misused, or if a small group controls governance votes, users can lose funds.

Scams and user error

Fake tokens, cloned websites, “approve” transactions that hand a scammer control of your tokens and fake support accounts are common. Sending tokens to the wrong address or network is usually permanent. Our guide to avoiding crypto scams covers the main patterns.

Limited protections

DeFi deposits aren’t FDIC or SIPC insured, and there’s usually no customer service desk or dispute process. Treasury’s 2023 assessment also found that criminals, including ransomware groups, scammers and North Korean hackers, use DeFi services to move and launder money, often exploiting weak compliance and poor cybersecurity controls.

How regulators view DeFi

There’s no single US DeFi law. Existing rules apply based on what a service actually does. Treasury has said that services covered by the Bank Secrecy Act have anti-money laundering obligations regardless of whether they claim to be decentralized. Securities and commodities laws can apply too, depending on the tokens and activities involved. For the full map, see who regulates crypto in the US.

Tax rules are also evolving. In April 2025, Congress used the Congressional Review Act to overturn an IRS rule that would have required certain DeFi platforms to report users’ transactions as brokers. That doesn’t make DeFi activity tax-free: swaps, sales and many rewards can still be taxable events you must report. See how crypto is taxed in the US. This is not legal or tax advice.

How DeFi connects to the wider financial system

DeFi ideas are spreading beyond crypto-native apps:

• Tokenized assets. Banks and asset managers are putting funds and bonds on blockchains, sometimes using DeFi-style settlement. See tokenization of real-world assets.
• Stablecoin payments. Payment companies use the same networks and tokens that DeFi relies on.
• Regulated DeFi. Some projects now build permissioned pools that only verified users can access.

DeFi is one part of the broader Web3 idea that users can hold and move digital assets directly, without an intermediary.

Where to start if you want to learn more

If you want hands-on understanding without large risks:

1. Learn wallet security first. Understand seed phrases and the trade-offs in hot wallets vs cold wallets.
2. Read before you click. Learn what a token “approval” does and how to review and revoke approvals in your wallet.
3. Use a test network. Many protocols run on test networks where tokens have no value, so you can practice for free.
4. Check the basics of any protocol. Look for public audits, how long it has operated, who controls upgrades and where its yield comes from.
5. Keep records. Every swap and reward may matter at tax time.
6. Only use money you can afford to lose. Smart contract losses usually can’t be recovered.

For any decision about investing, talk to a licensed financial professional.

The bottom line

DeFi is financial software running on public blockchains: exchanges, lending pools and stablecoins controlled by smart contracts instead of institutions. It’s open, transparent and always on, which is why it attracts builders and big financial firms. But the same design removes deposit insurance, reversals and customer service, and the code itself can fail. Understand how it works and how it breaks before you touch it.

Sources

• US Treasury: 2023 DeFi Illicit Finance Risk Assessment press release — definition issues, AML obligations regardless of decentralization claims, illicit use and poor cybersecurity controls
• US Treasury: Illicit Finance Risk Assessment of Decentralized Finance (full report) — DeFi services, centralized governance and risk findings
• FBI: Statement on attribution of malicious cyber activity posed by the DPRK — Lazarus Group and APT38 responsible for $620 million Ethereum theft
• House Ways and Means Committee: Resolution overturning the IRS DeFi broker rule signed — Congressional Review Act repeal, April 10, 2025