Decoding Defi Lending: Motivations, Risks, And Investor Behaviours

The Enterprise Ethereum Alliance (EEA)is publishing this Discussion Paper that highlights observed and aspirational best practices for identifying,understanding and managing risks arising from the use of DeFi protocols. Users, protocols and investors SHOULD hold a range of tokens or other hedges against a liquidity problem in a given Protocol. In any financial system, there are certain actions that users can take to improve their understanding of,and effectively manage their exposure to, the inevitable risks. Managing these risks for blockchain based products is an essential step in ensuring end-to-end security.By testing the applications in a controlled environment,companies can identify potential vulnerabilities that can be exploited by malicious actors before deploying them.

7 External Factors: Compliance

By replacing traditional financial institutions and banking fees with public blockchains and open-source software, just about anyone with an Internet connection can participate for free, advocates argue. The market for decentralized finance is valued at $77 billion, according to crypto analytics firm DeFi Pulse. Now, “this new financial infrastructure proposes to get rid of the intermediaries and institutions and replace them with a network of decentralized participants on the blockchain, especially in DeFi,” Schoar explained. That’s the Everestex trading platform premise of decentralized finance, a $77 billion market that has been touted as a more efficient alternative to traditional banking.

• It is important to describe the mechanisms in place to incentivize market-makers, ensure sufficient liquidity in lending pools,and address potential default risk.
• For a protocol to be executed, a minimum number of votes is required, commonly referred to as a quorum.
• This category includes ‘financial illiteracy risks’, black swans & dynamic interactions.

Examples Of Infrastructure And Oracles

The current research fills this gap by conducting a comprehensive and empirical study on DeFi risks. However, the majority of these research studies are conceptual and stress on one or two categories of risks. Several researchers have made attempts to ascertain DeFi risks (Aramonte et al. 2021; Carter and Jeng 2021; Werner et al. 2021). In short, all these hurdles are a significant challenge in the mainstream adoption of DeFi protocols. According to one estimate by Barclays, internal revenue services may miss a revenue of $50 billion due to the pseudonymous nature of DeFi protocols. In addition to this, the collection of taxes is also a major concern in DeFi protocols.

In DeFi, oracles are service providers that provide outside information to a smart contract. If the base-layer settlement network is successfully attacked, allows for double-spending, becomes too expensive for transactions, or lacks the necessary throughput, those failures will affect the application layer. Miners take proposed transactions and decide the order in which to execute them (Consensys, The q1 2020). Thus, composability exposes DeFi to a potential risk that can undo all of the innovation in DeFi as fast as it has accelerated it (Meegan and Koens 2021; Gudgeon et al. 2020; Meegan 2020). An attacker may obtain a number of governance tokens sufficient to propose and execute malicious contract code and steal a contract’s funds (Gudgeon et al. 2020; Werner et al. 2021). For a protocol to be executed, a minimum number of votes is required, commonly referred to as a quorum.

A3 Defined Terms

In the FATF’s view, DeFi platforms that remain under the control of one person, or a group of people, are virtual asset service providers (VASPs), and so a broad playbook already exists to subject them to regulatory oversight. For example, smart contracts can monitor loan agreements and release collateral upon full repayment. This article provides an overview of the common elements of DeFi, the benefits and risks of the sector, and potential future DeFi regulations. In the US, for example, financial institutions are still debating whose regulatory purview it falls under. With an increasing number of institutional investors entering the DeFi industry, it’s a market that’s expected to grow to $800 billion in 2022.

Some of the information necessary to assess risk is historical, so it will not be available until the Protocol is operational.Other information is related to the design of the Protocol, and SHOULD be available before the Protocol is operational. DeFi can be susceptible to excessive leverage of cryptocurrenciesor stablecoins used as collateral on DeFi trading platforms. While Overcollateralization in lending DeFi applications helps mitigate Liquidity Risk,it might not function as an effective failstop in certain situations like sudden prices shocks and fast moving markets.With insufficient timely demand from liquidators in the market, the liquidation mechanism can fail. This limits the ability of DeFi applications to respond to unanticipated market conditionsor user behavior. Fixed liquidity adjustment mechanisms are often hard-coded into the structureof the DeFi Protocol. Many DeFi systems, particularly Decentralized Lending Platforms, rely on sharing risk among many participants as a strategy to minimize it.

Stablecoins provide a bridge between volatile crypto markets and traditional finance while offering the benefits of blockchain technology. Decentralized finance (DeFi) is a system of financial products and services built on blockchain networks (primarily Ethereum) that operate without banks or other intermediaries. Zerocap is a market-leading digital asset firm, providing trading, liquidity and custody to forward-thinking institutions and investors globally. DeFi platforms require users to manage their own funds and private keys, which adds a layer of operational risk. Schoar said that there are ways to regulate the DeFi system that would preserve most of the features of blockchain architecture but encourage accountability and regulatory compliance. Unlike traditional finance, DeFi governance takes place via decentralized autonomous organizations.

Lending And Borrowing Platforms

With Trustless Bridges, and there is also potential§ 3.2 Governance risk. External data sources, such as APIs or websites, that oracles rely on for data, are potentially vulnerable to security breaches,hacking, or data tampering. Note that in many jurisdictions, interfaces that are not useful for users with disabilityis also a Compliance Risk, as described in § 3.3 Compliance and Legal Risk.

• It is not as detailed a set of requirements as EthTrust,but it is helpful for the specific case of working across two (or more) blockchains.
• However, it is important to consider Protocol Reviews and Reportsproduced by third parties.In fully automated decentralized cases, it is possible there is no Protocol Operator generating the reports,as there would be in a traditional public company.
• The high collateral requirements for DeFi lending and the need for secure management of private keys further complicate user participation and expose them to potential financial loss​​.
• As the regulatory focus on AML in DeFi intensifies, platforms must prioritize AML compliance to safeguard against regulatory scrutiny and mitigate the potential risks of illicit financial activities.
• Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN), are increasingly focusing on DeFi platforms to ensure compliance with AML regulations.

Technical Risks

While DeFi activity is pseudonymous, transactions are publicly recorded on-chain — enabling end-to-end tracing when paired with the right tools. While Bitcoin may appear in DeFi via wrapped assets, the two require distinct investigative approaches. For investigators, DeFi introduces more complex transactional behavior, including multi-step interactions, automated liquidations, and protocol-to-protocol flows.

Moreover, the decentralized nature of DeFi means there’s no central authority to intervene or assist in case of errors or disputes. The high collateral requirements for DeFi lending and the need for secure management of private keys further complicate user participation and expose them to potential financial loss​​. This lack of oversight results in minimal consumer protection against fraud, scams, and financial mismanagement.

To meet regulators’ expectations, DeFi platforms need to implement AML tools and procedures that align with traditional compliance methodologies. The decentralized nature of DEXs, which allows for peer-to-peer transactions without the need for intermediaries, makes it challenging to implement robust AML controls. This makes them an attractive option for illicit finance, allowing individuals to obscure the origins of funds and engage in illicit transactions. DeFi platforms need to navigate these challenges and establish robust AML practices to protect against regulatory scrutiny and potential legal action.

• In any financial system, there are certain actions that users can take to improve their understanding of,and effectively manage their exposure to, the inevitable risks.
• In an industry built on decentralization and trustlessness, maintaining a strong compliance posture is crucial to foster confidence among users and attract institutional investors.
• Ensuring that transactions are processed in the order received can help mitigatetiming attacks such as front-running.
• It is important to describe sources of yield (e.g. Issuance, Lending, Providing liquidity),yield rates, the frequency or dates of rewards with their overall value, and irregular income such as insurance payments received.

Protocols SHOULD implement KYC/AML procedures appropriate to the jurisdictions relevant to their investors and users,including covering Protocol Operators. Protocols, investors and users SHOULD have a robust process in place toassess potentially relevant court decisions, laws and regulations,and monitor pending legislation and rule-making. Identifying whether DeFi assets meet requirements defined for accounting standards can help ensure that accounting proceduresare recognisably reasonable attempts to follow applicable standards.

• In the next part, the study thoroughly examined the literature and classified the research studies into various risk categories.
• Where third parties are involved in preparing financial information(for example fund administrators or digital asset accounting software providers),entities SHOULD evaluate these relationships and obtain a complete understanding of both parties’ responsibilitieswith regards to designing and implementing relevant internal controls over financial reporting.
• Protocols SHOULD ensure that ownership of governance tokens is distributed among independent parties,and resistant to concentration.