Skip to content
Vol. 1 · Ed. 2026
CyberGlossary
Entry № 300

DeFi

What is DeFi?

DeFiDecentralized Finance: financial protocols built from smart contracts on public blockchains that offer lending, trading, and other services without traditional intermediaries.


DeFi is the ecosystem of permissionless financial applications that run on public blockchains such as Ethereum, Layer 2 networks, and other smart-contract platforms. Representative protocols include Uniswap (automated market-maker DEX), Aave and Compound (lending and borrowing), Curve (stablecoin swaps), and MakerDAO (DAI stablecoin). DeFi removes the need for a bank or broker, but introduces unique risks: smart-contract bugs (re-entrancy, logic flaws, oracle manipulation), economic exploits (flash loans, MEV, governance attacks), bridge compromises, and operational pitfalls (lost private keys, malicious frontends). Defensive practices include code audits, formal verification, bug bounties, multisig governance, circuit breakers, and on-chain monitoring tools.

Examples

  1. 01

    A user supplies USDC to Aave to earn yield and borrows ETH against the deposit.

  2. 02

    A trader swaps tokens on Uniswap v4 through a hook-enabled liquidity pool.

Frequently asked questions

What is DeFi?

Decentralized Finance: financial protocols built from smart contracts on public blockchains that offer lending, trading, and other services without traditional intermediaries. It belongs to the Web3 & Blockchain category of cybersecurity.

What does DeFi mean?

Decentralized Finance: financial protocols built from smart contracts on public blockchains that offer lending, trading, and other services without traditional intermediaries.

How does DeFi work?

DeFi is the ecosystem of permissionless financial applications that run on public blockchains such as Ethereum, Layer 2 networks, and other smart-contract platforms. Representative protocols include Uniswap (automated market-maker DEX), Aave and Compound (lending and borrowing), Curve (stablecoin swaps), and MakerDAO (DAI stablecoin). DeFi removes the need for a bank or broker, but introduces unique risks: smart-contract bugs (re-entrancy, logic flaws, oracle manipulation), economic exploits (flash loans, MEV, governance attacks), bridge compromises, and operational pitfalls (lost private keys, malicious frontends). Defensive practices include code audits, formal verification, bug bounties, multisig governance, circuit breakers, and on-chain monitoring tools.

How do you defend against DeFi?

Defences for DeFi typically combine technical controls and operational practices, as detailed in the full definition above.

What are other names for DeFi?

Common alternative names include: Decentralized Finance, Open finance.

Related terms

See also