What Is DeFi? Decentralized Finance Explained

What is DeFi? DeFi, short for decentralized finance, is a collection of financial services, such as trading, lending, borrowing and stablecoins, that run on public blockchains using smart contracts instead of banks, brokers or other intermediaries. Rather than trusting a company to hold your money and process transactions, you interact directly with open-source code that executes the rules automatically. This guide explains how DeFi works, how it differs from traditional finance and from centralized crypto exchanges, and the real risks involved. It is educational information only and not financial advice.

How does DeFi actually work?

Traditional finance relies on trusted middlemen. A bank records who owns what, a broker matches buyers and sellers, and a payment company moves funds between accounts. DeFi replaces those intermediaries with programs called smart contracts: self-executing code deployed on a blockchain such as Ethereum. When you use a DeFi service, your wallet signs a transaction that tells the contract what to do, and the network enforces the outcome. Because the code and the ledger are public, anyone can inspect the rules and verify balances.

This design has a few important consequences. The services run continuously rather than during business hours, they generally do not require an application or credit check, and they are composable, meaning one protocol can plug into another like building blocks. A single transaction can, for example, borrow an asset, swap it on an exchange and deposit the result into a lending pool, all enforced by code. That flexibility is part of what makes DeFi powerful, and also part of what makes it fragile, because a flaw in one building block can cascade into others. For a deeper look at the moving parts, see our guide to DeFi mechanics.

How is DeFi different from banks and centralized exchanges?

It helps to compare three models side by side: traditional finance, centralized crypto exchanges (often called CeFi), and DeFi. The key difference is who holds your assets and who you have to trust.

With a bank or a centralized exchange, a company takes custody of your money and you rely on it to behave honestly and stay solvent. In DeFi, you keep custody yourself and interact with code. That removes one kind of risk (a middleman misusing your funds) but introduces others, which the risk section below covers in detail.

What are the core building blocks of DeFi?

Most DeFi activity is built from a handful of recurring components.

Decentralized exchanges and AMMs

A decentralized exchange (DEX) lets you swap one token for another directly from your wallet. Many DEXs use an automated market maker (AMM), where prices are set by a mathematical formula against a pool of assets rather than by matching individual buy and sell orders. Because prices move as you trade, large swaps can suffer price impact. Our explainers on how automated market makers work and what slippage is in DeFi go deeper on these mechanics.

Lending and borrowing protocols

Lending protocols let users deposit assets into a shared pool that others can borrow from, usually by posting more collateral than they borrow (overcollateralization). Interest rates often adjust automatically based on supply and demand. If a borrower’s collateral falls below a required threshold, the protocol can liquidate it automatically, which can happen quickly during volatile markets. Some protocols also offer flash loans, an experimental feature that lets you borrow without upfront collateral as long as the loan is repaid within the same transaction; these have legitimate uses but have also been a common tool in exploits.

Stablecoins

A stablecoin is a token designed to hold a steady value, typically tracking a currency like the US dollar. Stablecoins give DeFi a less volatile unit for trading, saving and lending. They differ in how they are backed, from reserves of cash and bonds to crypto collateral or algorithms, and each model carries its own risks, including the peg breaking.

Liquidity pools

Liquidity pools are smart contracts holding pairs or baskets of tokens that power AMMs and lending markets. People who deposit tokens (liquidity providers) may earn a share of fees, but they take on specific risks such as impermanent loss, explained below.

What do self-custody and permissionless access mean?

Two ideas sit at the heart of DeFi. Self-custody means you hold your own assets and the private keys that control them; no company can freeze your wallet, but no company can recover your funds if you lose your keys or approve a malicious transaction. Permissionless access means anyone with a wallet and an internet connection can use the protocols, typically without identity verification or approval.

This openness is genuinely powerful, but it cuts both ways. The same lack of gatekeepers that makes DeFi accessible also means there is no one to vet projects, reverse mistakes, or step in when something goes wrong. Responsibility shifts entirely to the user.

What are the risks of using DeFi?

This is the part that matters most. Decentralized does not mean safe, and DeFi has lost users very large sums to the following risks. Treat every protocol as experimental.

• Smart-contract bugs and exploits. Contracts are code, and code can contain flaws. Attackers have drained funds through vulnerabilities such as reentrancy and faulty logic. Audits reduce but never eliminate this risk.
• Rug pulls and scams. Because anyone can launch a project, fraudulent teams can create a token or protocol, attract deposits, then disappear with the funds or disable withdrawals. Learn the warning signs in our guide on what a rug pull is and how to spot one.
• Impermanent loss. Providing liquidity to an AMM pool can leave you with less value than simply holding the tokens, depending on how their prices move. See impermanent loss explained for the details.
• Oracle manipulation. Many protocols rely on oracles to feed in outside price data. If an attacker can distort that price, they may be able to drain or wrongly liquidate positions. Flash-loan-funded oracle attacks have caused multimillion-dollar losses.
• Bridge risk. Bridges that move assets between blockchains have been among the most heavily exploited targets in crypto, because they concentrate large amounts of value in complex contracts.
• No support, no chargebacks, no insurance. There is usually no customer service, no way to reverse a transaction, and no deposit protection. A wrong address or a bad approval can mean permanent loss.
• Key and wallet risk. Self-custody means phishing, malware, or a lost seed phrase can cost you everything, with no recovery path.
• Regulatory uncertainty. Rules for DeFi are still developing and vary by country. Legal status, tax treatment and the availability of specific services can change.

Is DeFi safe to use?

There is no honest way to call any DeFi protocol safe. It offers real benefits, open access, transparency and self-custody, but it moves the burden of security and judgment onto you, and losses are frequently permanent. Anyone exploring DeFi should understand the mechanics first, assume that any protocol can fail or be exploited, and never commit funds they cannot afford to lose. You can browse more beginner explainers in our DeFi section. Nothing here is financial advice.

Sources

• Ethereum.org: Decentralized finance (DeFi)
• Ethereum.org: Introduction to smart contracts
• Ethereum.org: Stablecoins
• U.S. SEC Investor.gov: Crypto Assets
• Investopedia: Decentralized Finance (DeFi)