How crypto lending works today

Crypto lending is a financial transaction where one party lends cryptocurrency to another in exchange for compensation. While the concept mirrors traditional finance, the mechanics are split into two distinct ecosystems: centralized custodial platforms and decentralized protocols. Understanding this divide is the first step in assessing the real risk behind the yields.

Centralized custodial models

Centralized exchanges (CEXs) operate like traditional banks. You deposit your crypto into the platform’s wallet, and they lend it out to institutional borrowers or other users. In return, you earn interest, often paid in the same asset or a stablecoin. The primary advantage here is simplicity and user experience, but the trade-off is counterparty risk. You no longer hold the private keys; the platform does. If the custodian faces insolvency or regulatory action, your funds may be frozen or lost, as seen in several high-profile collapses. This model relies heavily on the financial health and transparency of the intermediary.

Decentralized lending protocols

Decentralized finance (DeFi) protocols remove the middleman. Instead of handing over your keys, you interact directly with smart contracts on a blockchain. You deposit assets into a liquidity pool, and borrowers borrow against collateral via code. Yields are often higher because there is no corporate overhead, but the risks shift to technology and market dynamics. Smart contract bugs, oracle failures, or sudden market crashes can lead to liquidations or protocol exploits. While you retain custody of your assets until the moment of deposit, the code itself becomes the sole arbiter of your safety.

The yield trade-off

The interest rates you see are rarely arbitrary. They reflect the risk premium of the underlying model. Lending stablecoins on centralized platforms typically yields 3% to 10% annually, driven by institutional demand for short-term liquidity. Volatile tokens in DeFi pools may offer double-digit APYs, but these often come with impermanent loss risks or exposure to untested smart contracts. As PwC notes in their accounting guide, these transactions are fundamentally about transferring value for a fee, but the fee structure must be weighed against the probability of default or technical failure.

Real world asset yields explained

The crypto lending landscape is shifting from speculative, high-yield experiments toward tokenized Real World Assets (RWA). This transition represents a structural change in how yield is generated, moving away from purely on-chain liquidity mining and toward assets backed by tangible value like government bonds or private credit. For investors, this shift offers a bridge between traditional finance stability and decentralized flexibility.

RWA yields typically track traditional finance rates, providing a more predictable income stream than volatile crypto assets. When you lend stablecoins backed by these assets, the yield often mirrors the interest rates set by central banks or the returns on short-term treasury bills. This creates a "yield floor" that is less susceptible to the wild swings seen in native DeFi protocols. However, this stability comes with a trade-off: you are exposed to smart contract risk and custody risks that do not exist in traditional banking.

The underlying collateral quality is the primary driver of value in this sector. Unlike uncollateralized lending, which relies on the creditworthiness of a borrower (a model fraught with counterparty risk in DeFi), RWA lending is overcollateralized. The tokenized asset—whether it’s a tokenized Treasury bill or a real estate deed—serves as the security. If the borrower defaults, the smart contract can liquidate the collateral to cover the loss. This mechanism mirrors traditional secured lending but operates on a public ledger, offering transparency that traditional finance often lacks.

Understanding the source of the yield is critical. In the RWA space, the yield doesn't come from "money printing" or inflationary token emissions. It comes from the underlying asset's cash flow. If you are lending against tokenized US Treasuries, your return is the interest paid by the US government. If you are lending against private credit, your return is the interest paid by the corporate borrower. This fundamental difference means that RWA yields are generally lower than speculative DeFi yields but significantly more sustainable over the long term.

Crypto Lending

DeFi Infrastructure Risks to Watch

Crypto lending platforms operate on a fragile stack of code and capital. While the yields can be attractive, the underlying infrastructure carries specific technical and operational risks that can wipe out principal in seconds. Understanding these vulnerabilities is essential before committing capital to decentralized lending protocols.

Smart Contract Vulnerabilities

Smart contracts are immutable once deployed, meaning any code flaw is a permanent liability. Audits reduce but do not eliminate this risk. Exploits often stem from reentrancy attacks, where a malicious contract calls back into the lending protocol before the initial transaction is complete, draining funds. Additionally, logic errors in interest rate models or collateral valuation can be exploited during high volatility. Always verify if a protocol has undergone third-party security audits and whether those audits have been published and reviewed by the community.

Oracle Failures

DeFi lending relies on oracles to provide real-time price data for collateral assets. If an oracle fails or is manipulated, the protocol may miscalculate loan-to-value ratios. A sudden price spike reported incorrectly by an oracle can trigger mass liquidations or allow undercollateralized loans to persist. This "oracle manipulation" risk is particularly acute for less liquid assets. Protocols using multiple decentralized oracle sources generally offer better resilience against single-point failures.

Liquidity Fragmentation

Liquidity in DeFi lending is often siloed across different blockchains and isolated lending markets. This fragmentation means that in a crisis, assets cannot be easily moved to cover shortfalls in another market. If a protocol becomes over-leveraged on a specific asset, the lack of deep, cross-chain liquidity can prevent orderly exits, leading to cascading defaults. This risk is compounded when stablecoins or other collateral assets lose their peg, as seen in past market crashes.

Choosing a lending platform safely

When you move beyond simple APY comparisons, the real question becomes: where is your capital actually sitting? High yields on crypto lending platforms often mask thin capitalization or opaque risk models. To evaluate a platform safely, you need to look past the marketing numbers and examine the structural safeguards that protect your principal during market downturns.

The first layer of defense is insurance coverage. Platforms that offer explicit insurance policies for deposits provide a clearer path to recovery in the event of a hack or insolvency compared to those relying solely on internal risk reserves. However, insurance limits and exclusions vary wildly, so reading the fine print is essential. Look for platforms that clearly state their coverage caps and whether they cover smart contract failures or only external theft.

Audit history is the second critical metric. A platform should undergo regular, independent security audits by reputable firms. These reports should be publicly available and, ideally, include remediation plans for any identified vulnerabilities. Platforms that have never been audited or that hide their audit reports are red flags. Transparency in code and security practices is non-negotiable for high-stakes financial decisions.

To help you compare these factors at a glance, here is a breakdown of key metrics for some of the more established platforms in the market. Note that TVL (Total Value Locked) and supported assets can fluctuate, so always verify current data on the platform’s official site.

PlatformInsurance CoverageAudit StatusTVL (Approx.)Supported Assets
AaveCommunity Insurance FundRegular, Public$5.5BETH, USDC, USDT, DAI
CompoundNo Direct InsuranceRegular, Public$2.1BETH, USDC, USDT, WBTC
MakerDAOSafety Module (MKR)Regular, Public$8.2BETH, WBTC, USDC
NexoUp to $700MAnnual, PublicN/A50+ Crypto Assets

When evaluating these options, consider the trade-off between yield and security. Platforms with robust insurance and frequent audits may offer slightly lower yields, but they provide a higher degree of certainty that your funds are protected. Always prioritize platforms with transparent governance and clear risk management frameworks over those promising unusually high returns.

Frequently asked: what to check next