A $285 Million Crypto Hack and Falling Yields Rock DeFi Industry

(Bloomberg) -- Decentralized finance, once among the most dynamic corners of the digital-asset industry, is under pressure from almost every direction.

Yields on some of DeFi’s most popular lending products have fallen near that of a vanilla government bond. Activity across a slew of blockchain networks has slowed. A $285 million hack blamed on North Korean state-backed operatives has renewed doubts the security of a sector that has spent years insisting it was maturing.

The lending market shows the strain. On Aave, the largest decentralized lending platform with around $26 billion in deposits, the rate on USDT — a widely used dollar-pegged token — has fallen to roughly 2.45%. With the Federal Reserve’s benchmark between 3.5% and 3.75%, even the most conservative traditional investments now offer more.

DeFi once attracted waves of speculative capital with double- and triple-digit yields. Now, with some of its most popular products paying less than a government bond — and security risks that could wipe out the principal overnight — it is a harder sell, even when more complex products can offer competitive returns.

“Squeezing 4% to 8% while risking your entire principal is looking very unattractive right now,” said Christine Fang, head of capital formation at crypto hedge fund Third Eye Capital. “Deals that ask to commit capital to lock in for at least a few months for yields even as much as 15% are also heavily scrutinized these days.” Her fund, she said, has turned down three such offers in the past month.

The falling yields reflect a double squeeze. Demand for crypto-based leveraged trading has collapsed, particularly after the market crash in October, meaning fewer borrowers and less interest income for lenders But the supply side has moved against them too. Stablecoin deposits have flooded into lending pools faster than borrowers have shown up to use them, pushing rates down mechanically.

The security picture has compounded the pressure. On April 1, hackers stole approximately $285 million from Drift, a derivatives exchange on the Solana blockchain, in what Drift later described as an attack six months in the making. The thieves posed as a legitimate trading firm, met Drift staff at industry conferences, deposited more than $1 million to build trust, and spent months embedded inside the project before striking. They compromised staff devices through malicious software disguised as a wallet app, and a shared code repository, then used the access to hijack the administrative controls that governed the platform’s funds.