CoinDesk
Less than 2% of DeFi's total value locked sits behind any insurance policy, leaving a market that has lost $7.7 billion to lending-protocol exploits over the past six years almost entirely exposed. DeFiLlama data shows the sector has absorbed $600 million in losses already this April, with the Drift and Kelp DAO exploits leading the month. The coverage gap is stark: 28 insurance protocols share $123.5 million in TVL — and Nexus Mutual alone accounts for nearly all of it, or 0.14% of DeFi's broader $83 billion market.
Why it matters
The coverage gap exists because DeFi insurance was built for a threat model that no longer matches reality. Early products priced smart-contract bugs, which were auditable and quantifiable. Attackers have since shifted to offchain failures — private key compromises, phishing, and social engineering — that are far harder to underwrite. "The premiums required become prohibitively expensive," Nexus Mutual founder Hugh Karp told CoinDesk, noting that the largest hacks now originate from operational-security lapses rather than code. The Kelp DAO exploit made the gap concrete: attackers manipulated a bridge mechanism, parked stolen collateral on Aave, and the resulting bad debt fell outside standard cover. Many DeFi users compound the problem by treating insurance as a yield drag — giving up 2-3% of return to cover tail risk is a trade most yield-driven participants won't make, according to CertiK's Dan She.
Market impact
The structural flaw runs deeper than low take-up: insurance pools frequently sit on the same rails as the protocols they cover, so capital backing cover can evaporate in the same event. Cover Protocol was hacked and collapsed, Armor.fi, Bridge Mutual, and Tidal flatlined or vanished between 2021 and 2024, and even Nexus Mutual's $6.5 billion in cumulative coverage and $18.5 million in payouts is a fraction of what Karp says the market needs. When exploits do land, the cost cascades — safety modules absorb the first hit, treasuries the next, and uninformed depositors the rest.
Frequently asked questions
-
How much of DeFi is actually insured?
Less than 2% of total value locked sits behind any insurance policy, according to Nexus Mutual founder Hugh Karp. DeFiLlama lists 28 insurance protocols sharing $123.5 million in TVL, with Nexus Mutual alone accounting for nearly all of it — 0.14% of DeFi's broader $83 billion market.
-
How much have DeFi lending protocols lost to hacks?
DeFiLlama data shows $7.7 billion in losses across uninsured lending protocols since 2020. April 2026 alone saw over $600 million in security events, led by exploits against Drift and Kelp DAO.
-
Why is so little DeFi actually covered?
Early products priced smart-contract bugs, but attackers have shifted to offchain failures — private key compromises, phishing, and social engineering — that are far harder to underwrite. Nexus Mutual's Hugh Karp said the resulting premiums become prohibitively expensive, and many users refuse to give up 2-3% of yield…
-
What happened to the original DeFi insurance protocols?
Cover Protocol was hacked and collapsed; Armor.fi, Bridge Mutual, and Tidal flatlined or vanished between 2021 and 2024 amid unsustainable tokenomics and conflicts of interest. Nexus Mutual remains the dominant survivor with $6.5 billion in cumulative coverage and $18.5 million in payouts since 2019.
-
What changes are being proposed to close the coverage gap?
Industry voices are pushing three paths: embedding insurance directly into DeFi products rather than selling it separately, narrowing policies to cover specific risk types, and integrating traditional offchain insurers. The goal is pricing models that can absorb offchain operational failures, not just smart-contract…
CryptoSlate
Crypto News
WuBlockchain
TheBlock