Institutional interest in decentralized finance (DeFi) is being undermined by frequent security breaches, particularly targeting cross-chain bridges, which have emerged as hackers’ favored attack points. In 2026 alone, there have been multiple high-profile DeFi bridge exploits, accumulating losses of over $300 million, raising doubts about the ecosystem’s readiness for large-scale institutional involvement.
The recent Versus-Ethereum bridge hack marked the eighth major incident this year, underscoring persistent vulnerabilities in bridging protocols designed to facilitate asset transfers across blockchains. These incidents have not only drained millions in digital assets but also shaken confidence as institutional players hesitate amid increasing risks outweighing potential returns.
One expert detailed how calls from major traditional finance institutions often get interrupted by news of fresh hacks, reflecting skepticism about the reliability of DeFi platforms. Their cautious stance could lead to the adoption of more regulated, traditional finance-like models that contrast with the original decentralized ethos of DeFi.
Further complicating the landscape are attacks by sophisticated groups such as North Korea’s Lazarus Group. They leveraged social engineering to infiltrate the Drift Protocol, exploiting a months-long campaign to access $285 million. Shortly after, the same group targeted KelpDAO, draining nearly $290 million from its cross-chain bridge, triggering a swift decline in the total value locked within DeFi—from nearly $100 billion to approximately $86 billion in days. This decline affected pools without direct exposure to compromised assets, emphasizing contagion risks within interconnected systems.
Experts agree the complexity of current DeFi infrastructures makes it nearly impossible for individual users or even institutions to fully assess risk independently. The once-standard mantra “do your own research” (DYOR) now falls short, as the layered protocols and extensive codebases obscure vulnerabilities. For example, depositing Ether into a yield product can expose users to breaches stemming from completely unrelated tokens or bridges they have not directly interacted with.
This increased complexity and interdependence of DeFi services pose a fundamental challenge to widespread adoption. While the sector continues to innovate with tokenized assets and stablecoins, security failures in critical infrastructure like bridges highlight the urgent need for improved safety measures and transparency to restore institutional trust.