Finance without the intermediary
DeFi — decentralized finance — provides financial services without relying on a traditional intermediary, using smart contracts: code on a blockchain that executes financial logic automatically. Swapping tokens, lending against collateral, earning yield on deposits — many DeFi protocols are permissionless at the smart-contract level, meaning a wallet is generally all that's needed to participate, though particular interfaces and jurisdictions can impose their own restrictions.
That openness is the appeal and the hazard in one package. The same properties that remove gatekeepers also remove safety nets: no fraud department, no chargebacks, no deposit insurance. In DeFi, the code is the counterparty — and code has bugs.
The building blocks
- Smart contracts — self-executing programs on-chain; they form the core logic of DeFi services.
- Liquidity pools — user-deposited pairs of tokens that trades execute against; depositors earn a cut of trading fees.
- AMMs (automated market makers) — the pricing mechanism of decentralized exchanges like Uniswap: no order book, just a formula over pool balances.
- Yield farming — moving capital across protocols to harvest reward tokens; the highest advertised yields in crypto, with commensurate risk.
- Staking — locking coins to secure a proof-of-stake network; covered separately in the staking guide.
- Stablecoins — dollar-pegged tokens (USDT, USDC) that serve as DeFi's unit of account and base collateral.
What people actually do in DeFi
| Activity | What it is | Primary risk |
|---|---|---|
| Swapping | Token-for-token trades against a pool | Slippage; fake token contracts |
| Providing liquidity | Depositing token pairs to earn fees | Impermanent loss |
| Lending / borrowing | Earning on deposits; borrowing against collateral | Collateral liquidation on price drops |
| Yield farming | Chasing reward-token emissions across protocols | Reward-token collapse; contract exploits |
Impermanent loss deserves its own sentence, because it surprises everyone once: when the two tokens in a pool diverge in price, the pool mechanically rebalances against you, and you can end up with less value than if you'd simply held the tokens — fees are supposed to compensate, and don't always.
The threat landscape
- Contract exploits. Bugs in protocol code have caused losses ranging from small incidents to some of the largest thefts in crypto's history. Audits reduce risk; nothing eliminates it.
- Rug pulls. Anonymous teams launch a token, attract liquidity, and withdraw it all. Anonymity plus high emissions is the classic profile.
- Phishing and fake frontends. Search-ad clones of real DeFi sites harvest wallet connections; a single malicious approval can drain an address. (Approval hygiene is covered in the wallet guide.)
- Gas costs. On Ethereum mainnet, transaction fees can run tens of dollars in busy periods — small positions get eaten alive by round-trip costs, one reason much activity has moved to L2s and alternative chains.
- Regulatory drift. The rules around DeFi remain unsettled in most jurisdictions and can change what's accessible with little notice.
A sane on-ramp
- Set up a non-custodial wallet and secure the seed phrase properly — this is the foundation everything else stands on.
- Fund it with a small amount of a major asset (ETH, SOL) from your exchange.
- Do one tiny swap and one tiny deposit on a large, long-established protocol — the goal is to feel the mechanics: gas, approvals, confirmations.
- Scale only what you understand, and spread across protocols rather than concentrating.
- Treat yield as a risk signal: very high advertised APYs warrant close scrutiny of where the yield actually comes from and what risks fund it.
DeFi involves significant technical and financial risks alongside its flexibility. Start with money you can afford to lose entirely, because in the failure cases, you do. For the vocabulary along the way, the glossary covers the terms this guide had to rush past.