Digital Finance Essentials  ·  Lesson 03

Decentralized Finance (DeFi)

How blockchain-based protocols provide exchange, lending and other financial functions — and where the risks reside.

Lesson Objective

By the end of this lesson, you should be able to describe DeFi in plain language, explain how decentralized exchanges, liquidity pools and overcollateralized lending work, distinguish a protocol from the people and services around it, and identify the principal technical, financial and governance risks.

The idea in plain language

Decentralized finance, commonly called DeFi, is a collection of blockchain-based applications that perform financial functions through smart contracts. These applications can support activities such as exchanging tokens, lending, borrowing, creating derivatives, managing collateral and transferring value.

A user generally interacts through a crypto wallet rather than opening a conventional account with a bank or broker. The smart contracts apply published rules to the transaction, while the blockchain records the resulting changes.

A Careful Definition

DeFi can reduce reliance on a traditional intermediary for transaction execution. It does not remove all intermediaries, decision-makers or dependencies. Developers, governance participants, interface operators, oracle providers, stablecoin issuers, validators, custodians and administrators may still influence how the arrangement works.

Traditional finance and DeFi

FeatureTraditional arrangementTypical DeFi arrangement
AccessAn institution establishes an account and applies eligibility and compliance processes.A compatible wallet can often interact with public smart contracts, although interfaces or assets may impose restrictions.
ExecutionInternal systems and intermediaries process instructions.Smart contracts execute predefined rules on a blockchain.
CustodyA bank, broker or custodian commonly holds assets or records entitlements.Users may control assets with private keys, delegate custody or deposit tokens into a protocol.
TransparencyRecords are mainly visible to institutions, clients, auditors and regulators according to access rights.Contract code and transactions may be publicly inspectable, but understanding exposures can still be difficult.
RecourseContracts, regulation, complaints processes and identifiable firms may provide remedies.Recourse may be uncertain, especially after an exploit, irreversible transaction or governance failure.

The main building blocks

Blockchain network: The base infrastructure records transactions and runs smart-contract instructions.

Smart contracts: Programs that hold assets and apply protocol rules. They can automate execution but may contain defects or privileged controls.

Wallet: The tool used to authorize transactions. A wallet controls keys; it does not physically store tokens inside the device.

Tokens and stablecoins: Digital assets used for trading, collateral, borrowing, payments or accounting within protocols.

Oracles: Services that provide external information, such as asset prices, to smart contracts. Incorrect or manipulated data can trigger losses.

Interfaces: Websites and applications that make protocols easier to use. The underlying contracts may remain available even if one interface disappears, but most users depend heavily on interfaces.

Governance: Processes for changing parameters, upgrading code, managing treasuries or responding to emergencies.

Decentralized exchanges and liquidity pools

A decentralized exchange, or DEX, allows users to exchange tokens through smart contracts. Many DEXs use an automated market maker rather than a conventional order book.

Liquidity providers deposit pairs or groups of tokens into a pool. Traders exchange against that pool and pay fees, a portion of which may be allocated to liquidity providers. A mathematical pricing rule adjusts the exchange rate as the pool's token balances change.

1

Liquidity is deposited.

Providers contribute eligible tokens to a smart contract and receive a record or token representing their pool position.

2

A trader requests an exchange.

The trader authorizes the DEX contract to exchange one token for another.

3

The formula determines the result.

The pool's rules calculate the amount received, the fee and the price impact.

4

Pool balances update.

The smart contract transfers tokens and records the new balances on the blockchain.

5

Providers may withdraw.

Subject to the protocol's operation and available liquidity, providers can redeem their pool position for a share of the remaining assets.

Liquidity-Provider Risk

Earning trading fees is not equivalent to earning a guaranteed return. The relative prices of deposited tokens can change, the pool can be exploited, a token can fail, liquidity can disappear, and the value received on withdrawal can be lower than the value of simply holding the original assets.

DeFi lending and borrowing

DeFi lending protocols pool supplied tokens and make them available to borrowers under smart-contract rules. Interest rates may adjust with supply and demand. Because many public protocols do not assess a borrower's income or credit history, loans are commonly overcollateralized: the borrower deposits crypto assets worth more than the amount borrowed.

A simplified lending example

1

A borrower deposits eligible collateral into a lending protocol.

2

The protocol calculates a borrowing limit using its collateral rules and oracle prices.

3

The borrower receives another token, often a stablecoin or liquid crypto asset.

4

Interest accrues according to the protocol's rate model.

5

If collateral value falls too far, a liquidation process can sell or transfer collateral to repay the debt.

Liquidation Risk

Liquidation protects the lending pool, not necessarily the borrower. Rapid price movements, network congestion or incorrect oracle data can cause forced sales, penalties and cascading market pressure.

Other common DeFi activities

Staking and liquid staking: Users may commit tokens to support a proof-of-stake network or receive a transferable representation of a staked position. Protocol, validator, slashing and token risks remain.

Derivatives: Smart contracts can create exposure to future prices, leverage or other financial outcomes. Complexity and liquidation risk can be substantial.

Yield strategies: Protocols may move or combine assets to pursue fees, incentives or interest. High advertised yields often reflect token incentives, leverage, illiquidity or risk rather than a low-risk income stream.

Insurance-like coverage: Some arrangements pool funds to compensate specified smart-contract or operational losses. Coverage terms, exclusions, claims governance and capital adequacy must be assessed.

Governance participation: Token holders may vote on parameters, upgrades or treasury decisions. Voting power and practical influence can be highly concentrated.

Composability: strength and vulnerability

DeFi protocols are often described as financial building blocks. One protocol's token or pool position can be used inside another protocol. This composability enables rapid experimentation and complex services without every developer rebuilding the entire stack.

The same connections can transmit failure. If a stablecoin loses value, an oracle reports a bad price or one protocol is exploited, connected lending, trading and collateral arrangements may also be affected. Apparent diversification can conceal a shared dependency.

Accounting and Records

A blockchain transaction history is not a complete accounting record by itself. Organizations still need reliable identification of wallets and counterparties, ownership and control evidence, transaction purpose, fair-value support, fees, rewards, liabilities, restrictions and tax information. Protocol-generated tokens may represent deposits, claims, collateral positions or rewards with different economic characteristics.

Is DeFi really decentralized?

Decentralization exists on a spectrum. A protocol may execute on a public blockchain while upgrades are controlled by a small group, governance tokens are concentrated, a website filters access, an oracle is operated by a limited set of providers or an administrator retains an emergency key.

The BIS has described a "decentralisation illusion": even automated systems require governance, and influence can concentrate. IOSCO similarly recommends examining the actual arrangement, functions and responsible persons rather than relying on labels.

Principal risks

Smart-contract risk: Code may contain exploitable errors, unexpected interactions or privileged functions.

Market and collateral risk: Volatile token prices can reduce collateral value and trigger liquidation.

Oracle risk: Bad, delayed or manipulated external data can cause incorrect pricing and execution.

Liquidity risk: A user may be unable to exchange or withdraw an asset at an expected price or time.

Stablecoin risk: A stablecoin can deviate from its reference value because of reserve, redemption, market or design problems.

Governance risk: Voting power, upgrade rights or emergency controls may be concentrated or used against some users.

Key and wallet risk: Loss, theft, phishing or malicious approvals can transfer control of assets.

Bridge and interoperability risk: Moving value between networks often introduces additional contracts, validators and failure points.

Legal and regulatory risk: The rights of users, status of activities and available remedies may be unclear or vary across jurisdictions.

Operational and interface risk: Websites, infrastructure providers and transaction relays can fail, censor or misrepresent activity.

A practical evaluation checklist

1

What financial function does the protocol perform, and what assets does it hold?

2

Who developed, administers and can upgrade or pause the contracts?

3

Has the code been independently reviewed, and what happened in earlier incidents?

4

Which oracles, stablecoins, bridges and other protocols does it depend on?

5

How are interest, fees, rewards and liquidation thresholds determined?

6

What does any receipt, liquidity-provider or governance token represent?

7

Can a position be exited under stressed market conditions?

8

What wallet permissions are requested, and can they be limited or revoked?

9

What legal rights, disclosures, protections and remedies exist?

10

Could you explain the complete loss scenario before committing funds?

Key takeaways

1

DeFi uses blockchain-based smart contracts to perform financial functions.

2

A wallet can interact directly with a protocol, but users still rely on networks, code, interfaces, oracles, stablecoins and governance.

3

Liquidity pools support automated exchanges; lending protocols commonly rely on overcollateralization and liquidation.

4

Composability enables innovation but can transmit failures across connected protocols.

5

Published code and visible transactions do not automatically make a system understandable, fair or safe.

6

Decentralization is a spectrum. Evaluate who exercises control in practice.

7

Yield is compensation or incentive — not proof of safety or guaranteed return.

Quick knowledge check

1

What role does a smart contract play in a DeFi transaction?

2

Why are many DeFi loans overcollateralized?

3

How can composability spread risk between protocols?

4

Name four participants or services that may influence a supposedly decentralized arrangement.

Glossary

Automated market maker (AMM)
A smart-contract system that uses a pool and pricing rule to facilitate token exchanges.
Composability
The ability to combine protocols, tokens and smart contracts as reusable building blocks.
Decentralized application (dApp)
An application whose core functions use smart contracts on a distributed network.
Liquidation
The forced sale or transfer of collateral when a borrowing position breaches required thresholds.
Liquidity pool
Tokens deposited into a smart contract to support exchange, lending or another protocol function.
Oracle
A mechanism that supplies external information to a smart contract.
Total value locked (TVL)
A measure of assets deposited in a protocol or set of protocols; it is not revenue, profit or insured value.

Educational purposes only. Not financial advice. DeFi can involve complete loss, irreversible transactions and uncertain legal remedies. This material does not constitute investment, legal, accounting or tax advice, or a recommendation to use any protocol or acquire any asset.

Fichtner Digital

Educating the Future of Digital Finance.

Disclaimer

Educational purposes only. Not financial advice. All content on this site is provided for informational and educational purposes. Nothing here constitutes investment advice, financial guidance, or a recommendation to buy or sell any asset.

© 2026 Fichtner Digital. All rights reserved.

Educational purposes only. Not financial advice.