Key Highlights
- JPMorgan analysis identifies security vulnerabilities as major barriers to DeFi institutional adoption.
- KelpDAO breach eliminated approximately $20 billion in total value locked across the ecosystem.
- Hackers created $292 million in fraudulent rsETH tokens, generating close to $200 million in uncollateralized debt.
- JPMorgan data shows 2025 exploit losses remain consistent with current year figures.
- Cross-chain bridge infrastructure represents the most significant security vulnerability according to the bank.
JPMorgan’s latest assessment reveals that continuous security incidents combined with stagnant total value locked metrics hamper decentralized finance advancement. The financial institution connects recurring protocol breaches to diminished institutional trust and constrained market development. Research teams also observed capital migration toward stablecoins including USDT following recent security events.
JPMorgan Identifies Systemic Vulnerabilities Following KelpDAO Attack
JPMorgan’s research indicates the KelpDAO security breach eliminated roughly $20 billion in total value locked over a brief timeframe. The institution characterizes this event as demonstrating fundamental weaknesses throughout interconnected protocol networks.
Threat actors compromised a cross-chain bridge infrastructure and generated $292 million worth of unauthorized rsETH tokens. These fraudulent assets were subsequently deployed as collateral across lending platforms, creating nearly $200 million in undercollateralized obligations.
The financial institution noted cascading effects extended far beyond initially targeted protocols due to shared liquidity pools and collateral dependencies. Consequently, platforms without direct vulnerability exposure still experienced significant impact.
Research headed by Nikolaos Panigirtzoglou observed, “Crypto participants have responded to recent exploits by seeking refuge in stablecoins.” The team drew parallels to traditional market behavior where investors rotate into cash equivalents during periods of heightened uncertainty.
JPMorgan data confirms current exploit statistics mirror those documented throughout 2025. The analysis emphasizes that infrastructure and bridge-related breaches constitute primary vulnerability categories even as smart contract auditing practices advance.
The bank clarified that while cross-chain bridges enhance protocol functionality, they simultaneously create expanded attack vectors. Sophisticated validation mechanisms and interconnected infrastructure components contribute to elevated risk profiles for substantial losses.
Stablecoin Demand Increases Amid Plateauing TVL Metrics
JPMorgan’s findings show total value locked has rebounded when measured in dollar terms while remaining stagnant in ether-denominated calculations. The institution interprets this divergence as evidence of limited genuine growth across decentralized finance ecosystems.
The assessment suggests subdued expansion raises concerns regarding DeFi’s preparedness for institutional-scale deployment. Researchers emphasize that institutional participation requires enhanced protective measures and consistent system performance.
Post-exploit market behavior showed substantial capital reallocation from lending protocols into Tether’s USDT. JPMorgan attributes this preference to USDT’s extensive liquidity infrastructure and efficient exit mechanisms during market turbulence.
The institution observes that stablecoins frequently serve as defensive positioning during unstable conditions. Market participants systematically redirect capital toward dollar-backed instruments when protocol risk assessments increase.
JPMorgan emphasized that successive security incidents undermine trust in automated code-based systems. The research indicates attackers frequently leverage isolated vulnerabilities to access substantial asset pools.
The bank further highlighted that phishing campaigns and bridge weaknesses create exposure for assets secured across multiple blockchain networks. The integrated architecture characteristic of DeFi magnifies financial damage once exploitation commences.
JPMorgan’s conclusion reinforces that security infrastructure represents a fundamental limitation on decentralized finance mainstream acceptance. The report validates that recent breach statistics correspond with earlier 2025 measurements.





