What Is DeFi? A Beginner's Guide to Decentralized Finance

Yield farming is a DeFi strategy where users deposit crypto assets into liquidity pools to earn passive income through trading fees and platform rewards. Liquidity pools are decentralized pools that enable peer-to-peer trading without intermediaries, allowing users to provide liquidity and earn a percentage of transaction fees. DeFi platforms like Curve Finance, Uniswap, and Aave facilitate these activities through smart contracts, offering flexible investment options with varying risk levels.

Yield farming is a method where users perform actions (typically providing liquidity) and earn rewards. In decentralized exchanges, users provide liquidity to automated market makers like Uniswap, earning transaction fees plus incentive tokens. Liquidity providers enable trading by depositing funds into pools, and earn fees from trades executed using their deposited funds. The more liquidity in a trading pair, the more tightly prices are bonded between tokens. Platforms implement yield farming to incentivize user participation and platform stickiness, with successful DEXs like SushiSwap, QuickSwap, and PancakeSwap all offering these incentives.

This comprehensive section covers the complete execution of yield farming operations. Users learn to create liquidity pools by depositing equal value in both tokens of a trading pair (typically 50/50 ratio), understanding that pools require liquidity in both directions to facilitate trades. The process involves enabling token contracts, confirming liquidity addition transactions, and receiving LP tokens representing pool shares. Users then stake LP tokens in farming pools, understanding that unlike traditional investments, yield farming typically has no lock-up periods. The section covers harvesting rewards, noting that frequent harvesting may not be optimal due to gas fees, and recommends weekly harvesting for small investments. Rewards are typically paid in exchange native tokens that should be sold rather than held due to high inflation. The section concludes with exiting positions by unstaking LP tokens and removing them from liquidity pools.

Liquidity pools are market-making mechanisms that enable instant trading by providing buyers and sellers for cryptocurrencies. Users provide equal dollar value of two tokens to create a pool, receiving LP tokens representing their share. Farming rewards come from trading commissions paid by traders using the pool. APY (Annual Percentage Yield) shows current returns but fluctuates constantly based on trading volume and pool size. Higher yields indicate higher risk and competition.

DeFi yield farming is a decentralized finance strategy where users provide liquidity to automated market maker pools (like Uniswap or Balancer) on the Ethereum blockchain, earning income through three mechanisms: appreciation of the underlying assets, trading fees paid by users (typically 0.3% on Uniswap), and additional yield tokens distributed by the protocol. Liquidity providers contribute capital to pools that enable sophisticated traders to execute trades, with smart contracts automatically distributing fees based on each provider's percentage of the pool. This approach allows participants to earn passive income while their capital remains invested and potentially appreciates over time.

In decentralized finance, users must over-collateralize their positions because the system has high latency in detecting when someone needs to be liquidated. On centralized platforms, users can borrow 3-100 units of something for 1 unit deposited. On decentralized platforms, users need to enter 1.5x units to borrow 1 unit. This extreme lower margin and higher latency makes it extremely hard to get over-leveraged, providing safety through censorship resistance and less counterparty risk. When positions move against users, they need to keep putting in more collateral or get liquidated. When liquidated, users lose their money plus the premium that incentivizes liquidators. This is why Celsius went bankrupt—they weren't over-collateralized and couldn't pay off debts even if they sold everything they owned.

DeFi lending protocols like Aave and Compound enable users to deposit crypto assets as collateral and borrow against them without selling. Three key concepts govern this system: LTV (Loan-to-Value) measures debt relative to collateral value, calculated as Debt/Collateral. LT (Liquidation Threshold) indicates when protocols liquidate loans, varying by asset volatility. HF (Health Factor) measures loan health using the formula: (Collateral × LT) / Loan. Smart contracts automatically execute liquidation without human intervention when collateral value drops too low. Each asset has specific LTs based on historical volatility, with more volatile assets having higher thresholds. During market crashes, protocols may liquidate before reaching standard thresholds to protect against rapid price drops. Understanding these metrics is essential for managing loan risk and avoiding liquidation.

In DeFi lending, loans are currently overcollateralized, meaning borrowers must supply tokens worth more than the actual loan amount they wish to take. This requirement exists because users often don't want to sell their tokens but need liquidity for unexpected expenses, want to avoid or delay capital gains taxes, or seek to increase leverage in their positions. The collateral requirement ensures that even if token values fluctuate, there is sufficient value to cover the loan.

DeFi lending protocols require borrowers to deposit more collateral than the value of what they borrow (overcollateralization). For example, with 70% borrowing power, a $2,000 ETH deposit allows borrowing up to $1,400 worth of USDT. However, if the collateral's value drops below a liquidation threshold due to price declines, the smart contract automatically sells some collateral to repay the loan without grace periods or human intervention. This mechanism protects lenders but exposes borrowers to liquidation risk.

Over-collateralized lending allows people to borrow tokens by putting up more collateral than the loan value (e.g., put up $200 to borrow $150). This is necessary because you can't trust anyone - the protocol must protect itself. If the borrowed tokens become worth less than the collateral, anyone can liquidate the loan to prevent the protocol from going underwater. This mechanism enables speculation and leveraged positions while maintaining protocol security through liquidation incentives.

DeFi faces significant risks beyond technology. Impermanent loss occurs when liquidity providers earn less than holding tokens directly due to AMM rebalancing. Smart contract vulnerabilities pose major risks, as skilled hackers can exploit code that even multiple audit teams miss—the DX Bunny attack lost $8.4 million in seconds. Gas fees can exceed trade values, pushing users to alternative networks. Liquidity fragmentation scatters funds across dozens of platforms, requiring users to check multiple sources for good prices. Legally, DeFi lacks recourse for hacked or scammed users, representing both freedom and vulnerability.

Smart contracts on secure base layers like Ethereum do not inherit that security—they are only as secure as their code. Since code is publicly visible, any hacker or AI can analyze it for vulnerabilities. DeFi losses have trended upward: 3.3B in 2021, 3.7B in 2022, 1.8B in 2023, and over 2.2B in 2024. Institutions will not adopt systems where a single protocol hack can steal 18% of a token supply and collapse billions in TVL. The Calp Dao hack proves current DeFi models lack reliability for institutional-grade financial systems.

DeFi protocol exploits represent sophisticated attacks on decentralized financial systems, exemplified by the $112 million Mango Markets exploit on Solana investigated by reporter Chris Burnett within 24 hours. Three main attack types exist: price manipulation (artificially inflating token prices to drain lending pools, classified as market manipulation), smart contract vulnerabilities (exploiting poor coding like the 2016 DAO re-entrancy attack, legally closest to hacking), and social engineering (phishing, romance scams, and pig butchering scams, punishable as fraud). Prosecuting DeFi crimes faces two fundamental challenges: jurisdiction complexity across decentralized networks and the lack of regulatory frameworks. Crypto markets remain predominantly unregulated, making it difficult to seek remedies or enforce penalties. Some countries like the US are taking aggressive enforcement approaches, creating uncertainty that may stifle innovation. The fundamental question remains whether DeFi exploits are legal, with answers depending on jurisdiction, attack type, and evolving regulatory frameworks.

This comprehensive segment examines the technical and systemic foundations of DeFi security. It explains zero-day compiler bugs in the Viper language and reentrancy attacks that allow attackers to repeatedly call smart contracts and steal assets. Research reveals that 47% of $4B in 2022 DeFi exploits ($1.8B) occurred through smart contracts, representing systemic risk. The Curve Finance hack demonstrates how even well-audited protocols can fail when zero-day bugs slip through, with founder collateral creating cascading liquidation risks. Unlike traditional finance where margin calls can be negotiated, DeFi triggers automatic liquidation when prices drop below thresholds, forcing massive token sales on illiquid markets and potentially collapsing entire ecosystems. Effective security requires improved auditing, responsible vulnerability disclosure policies, and holistic detection/deterrence protocols to stay ahead of increasingly sophisticated attackers.

DeFi platforms face unique risks: (1) Smart contract bugs - poorly written code can be exploited by hackers, potentially draining liquidity pools, (2) Impermanent loss - when providing liquidity for trading pairs, if one coin appreciates significantly more than the other, you may end up with less value than if you had simply held the coins. For example, providing liquidity for ETH/BNB pair could result in impermanent loss if ETH outperforms BNB significantly. These risks are specific to DeFi and don't exist in traditional finance.