Crypto lending exposes both borrowers and lenders to a range of risks, including forced liquidations, potential software vulnerabilities, and the possibility of fund loss if a provider fails. The level of exposure varies depending on whether lending occurs through centralized companies or decentralized onchain protocols. Displayed interest rates do not represent the full risk profile of crypto lending.
Key risk factors in crypto lending
Collateral loss remains a primary concern, especially during sharp price declines. Borrowers risk having their collateral liquidated if asset values fall below required thresholds. Lenders, on the other hand, depend on the platform or protocol’s ability to manage these positions and, ultimately, to return their assets.
Determining who controls the collateral or deposited tokens is essential. Many platforms can pause withdrawals at their discretion, further complicating access to funds. A 2025 SEC disclosure from a digital asset company noted that some loans may be unsecured and subordinate to other debt, making asset recovery difficult in insolvency cases.
The accuracy and reliability of price feeds, often called oracles, are crucial in valuing collateral. The European Banking Authority (EBA) and the European Securities and Markets Authority (ESMA) jointly warned that manipulated or delayed price feeds can cause incorrect liquidations or mispricing.
Smart contracts underpinning DeFi lending introduce their own technical vulnerabilities. In 2024, the EBA and ESMA documented 34 DeFi hacks exploiting contract weaknesses, resulting in approximately $346 million in losses. These vulnerabilities can propagate across interconnected protocols.
Mini dictionary: EBA and ESMA are regulatory authorities in the European Union. The EBA focuses on banking supervision, while ESMA oversees securities markets and ensures investor protection.
Joint research from the EBA and ESMA stated that “vulnerabilities can spread across interconnected protocols, magnifying loss potential for both borrowers and lenders.”
Operational and technical vulnerabilities
DeFi lending platforms often depend on smart contracts, which if exploited, can result in significant financial loss. For example, on July 11, 2026, Bonzo Finance—a decentralized lending protocol—reported an attack where a manipulated Hedera price allowed an attacker to borrow $9.05 million using undercollateralized assets. In response, Bonzo Finance paused its lending pool and announced it would assess when liquidity providers could withdraw their funds.
Mini dictionary: Bonzo Finance is a decentralized finance (DeFi) protocol that allows users to lend and borrow crypto assets using smart contracts, aiming to automate and secure lending operations on the blockchain.
Regulatory protections also vary. The US Federal Deposit Insurance Corporation (FDIC) clarified in a 2022 fact sheet that deposit insurance does not cover crypto assets held at nonbank entities, leaving users exposed if a provider defaults or becomes insolvent. The Financial Action Task Force (FATF) found inconsistent adoption of standards for DeFi platforms across surveyed countries in 2026.
Comparison of risks by lending model
Centralized and decentralized lending models present distinct risk profiles. Centralized providers manage assets and facilitate offchain loans, while DeFi protocols use automated smart contracts on blockchains. Regardless of the model, neither structure eliminates the possibility of losses.
| Risk | Borrower exposure | Lender exposure |
|---|---|---|
| Collateral and liquidation | Collateral may be sold after a price decline as per service rules. | Market stress could disrupt loan management or withdrawals. |
| Platform or borrower failure | Access to assets can be lost if platforms or borrowers default. | Unsecured loans may be difficult to recover if parties fail. |
| Smart contract or oracle fault | Technical errors can change loan terms or trigger unwanted liquidations. | Contract exploits or faulty oracles may drain or misprice pools. |
| Liquidity and access | Loans or collateral may not be available when needed. | Withdrawals may be paused or delayed during disputes. |
Common pitfalls in crypto lending
Overcollateralization, often perceived as a safeguard, does not eliminate risk. A 2026 study from the Bank of Canada observed that borrowers frequently used recursive leverage despite overcollateralization rules. Liquidations tended to occur in concentrated periods, worsening market stress.
Interest rates on many platforms are variable and depend on changing market conditions and policy decisions, so displayed rates may not guarantee returns or immediate withdrawals.
Confusing a token balance on a platform with a traditional insured bank deposit can be dangerous. The FDIC underlines that nonbank-held crypto assets do not carry deposit insurance, making it critical to review terms and identify which entity controls the assets.
Legal clarity around DeFi platforms remains limited, as the FATF reported uneven implementation of regulatory standards in 2026, underscoring the importance of understanding country-specific rules.
Lending apps often rely on multiple external contracts or data providers, so failures in connected services can propagate and affect user funds. General assurances of security may not address every route of loss.
