Crypto Lending Surges 55% Since July: Have DeFi Risks Been Solved?

Crypto lending is back in fashion, with total value locked across DeFi protocols climbing more than 55% since the start of July to approximately $56 billion, according to Galaxy data. The rebound follows a brutal second quarter that saw $11.33 billion exit the sector, triggered in large part by the April Kelp DAO cross-chain exploit. During that attack, hackers minted 116,500 unbacked rsETH tokens worth roughly $290 million, many of which were posted as collateral on Aave markets. Even though Aave's own smart contracts were never breached, the protocol saw deposits fall by around $15 billion in the aftermath and was forced to freeze its rsETH and wrsETH markets.

The episode has exposed a growing concern for DeFi users: the interlinked nature of modern lending protocols means a single exploit can cascade across the ecosystem. Aave founder Stani Kulechov told Magazine that protocols must now evaluate not just the tokens they accept as collateral, but also their bridges, verifier configurations, oracles, and the operational security of the issuers behind them. "Our starting point is that security can't stop at the smart contract," Kulechov said, noting that traditional audits "missed the risk sitting in the bridges, verifier networks and other infrastructure an asset depends on."

Industry leaders are urging users to take a similarly holistic view. Thomas Wu, CFO of Bitcoin-backed lender Ledn, warned that "every wrapper, bridge and oracle between the lender and the underlying asset is another place a loan can go wrong." Sid Powell, CEO of crypto credit platform Maple, added that serious lenders should assume a borrower can fail at any time and build their risk models backward from worst-case scenarios. With the honeypot for attackers now larger than ever, and AI-assisted hacks adding a new dimension to the threat landscape, the question of whether DeFi lending can be made truly safe remains open heading into 2026.