DeFi, yield, and smart-contract risk

What DeFi changes and what it does not

Applications built from smart contracts let people trade, lend, borrow, and provide liquidity without an institution holding the assets. Balances and rules are visible, positions are usually permissionless to open, and no account approval is required.

What remains are trust boundaries in different places. The contract code must be correct. The oracle supplying prices must be accurate and timely. Governance must not act against users. The website you interact through must not be compromised, and it is a conventional website with a conventional domain. Removing an intermediary does not remove trust; it relocates it into components that are harder to evaluate and that fail without notice or recourse.

Where returns come from

Every yield has a payer, and identifying it is the whole analysis. Interest on lending comes from borrowers, so it depends on continued demand to borrow. Trading fees come from traders using a pool. Staking rewards come from protocol issuance and network fees. Token incentives come from a treasury distributing its own token.

The last category is where headline numbers usually originate, and it is the least durable. A high advertised return paid in a protocol's own token is a distribution of newly issued units. Whether it is worth anything depends on that token holding value while everyone receiving it decides what to do with it. It is not interest in any conventional sense.

For liquidity provision specifically, the fee income is offset by the effect of price divergence between the assets in the pool. A position can earn substantial fees and still be worth less than simply holding the two assets would have been. Quoted returns often exclude this.

Liquidation and the limits of overcollateralization

Borrowing against collateral requires posting more value than you borrow. This protects the protocol, not the borrower. If collateral value falls or accrued debt rises past a threshold, the position is liquidated automatically—the collateral is sold, typically at a penalty, without warning or discretion.

This is why an overcollateralized loan can still be lost. The threshold is a mechanical rule evaluated continuously against an oracle price, and it is most likely to trigger during volatile periods when network fees are also high and adding collateral is hardest. Anyone borrowing should know the exact liquidation price and how quickly they could realistically respond, before opening the position.

Map the dependency stack

A single position typically depends on a wallet, a network, one or more tokens, possibly a bridge, an oracle, the protocol's contracts, its governance keys, the liquidators who keep it solvent, and the frontend you use to interact. A failure in any layer can affect the whole route.

Composability makes this worse in a way that is easy to miss. Protocols build on each other, so a position may inherit risks from systems you did not choose and may not know about. A stablecoin used as collateral, in a lending market, on a scaling network, accessed through a bridged token, is exposed to every one of those simultaneously. Adding protocols multiplies dependencies rather than diversifying them.

• Name who pays the yield and in which asset.
• Identify the collateral ratio and exact liquidation price.
• Find the oracle and who can change it.
• List administrator and upgrade powers over the contracts.
• Confirm exit liquidity and the fee cost of exiting in a hurry.