JPMorgan has issued a stark warning that persistent security breaches and stagnant growth in the decentralized finance (DeFi) sector are preventing large-scale institutional adoption. In a recent note, analysts led by managing director Nikolaos Panigirtzoglou highlighted that while the broader cryptocurrency market has seen price recovery, DeFi's underlying organic growth remains elusive.
The report specifically points to the KelpDAO cross-chain bridge exploit in April 2026 as a critical example. The breach allowed an attacker to mint $292 million in unbacked rsETH, leaving an estimated $230 million in bad debt across platforms like Aave. JPMorgan noted that this incident wiped about $20 billion from DeFi's total value locked within days and triggered capital outflows even from liquidity pools with no direct exposure, revealing systemic fragility.
Beyond security, the bank highlights stagnation in total value locked (TVL). While DeFi TVL has recovered in U.S. dollar terms due to price appreciation, it remains flat when measured in Ethereum (ETH) terms, suggesting a lack of organic, non-speculative expansion. For institutional allocators requiring deep, predictable liquidity, this stagnation raises questions about the sector's maturity.
A Bank for International Settlements (BIS) paper published the same day stated that large crypto service providers increasingly resemble traditional financial intermediaries, further underscoring the regulatory and structural challenges facing DeFi. JPMorgan concludes that until the ecosystem can demonstrate consistent asset safety and genuine expansion, it will likely remain an experimental niche rather than a core component of institutional finance.
