Decentralized finance protocols have shed roughly $45 billion in total value locked across all chains since January, the steepest drawdown since the 2022 bear market.
Back
DeFi TVL drops 39% to $70B as hacks and market rout erase $45B
Decentralized finance protocols have shed roughly $45 billion in total value locked across all chains since January, the steepest drawdown since the 2022 bear market.
DeFi total value locked fell 39 percent year-to-date to about $70 billion, erasing $45 billion from the January peak of $115 billion, CryptoRank data shows.
"The decline reflects a dual shock of macro deleveraging and record exploit activity that compressed months of outflows into days," Nicolai Søndergaard, senior research analyst at Nansen, said.
Among the ten largest blockchains by TVL, only Tron and Hyperliquid posted positive growth this year. Tron gained about 5 percent to $4.63 billion, driven by its role in USDT settlement. Hyperliquid rose roughly 7 percent to $1.52 billion on demand for on-chain perpetual futures. Arbitrum took the steepest hit, dropping 55.3 percent to $1.3 billion. Ethereum, the largest DeFi chain, fell 43 percent to $38.9 billion, while Solana declined 40.5 percent to $4.93 billion.
The outflows follow a broader crypto market correction that began after Bitcoin hit an all-time high above $122,000 in October 2025. The total crypto market capitalization has fallen nearly 50 percent from its $4.21 trillion peak to $2.15 trillion, with Bitcoin down over 28 percent year-to-date and Ethereum down 43 percent.
Record exploit wave deepens capital flight
The crypto industry recorded 121 hacks in 2026 through late June, with combined losses reaching approximately $942 million, according to CryptoRank. The second quarter alone accounted for 85 of those incidents and roughly $775 million in stolen funds.
The KelpDAO exploit on April 18, which drained $293 million through a LayerZero cross-chain bridge vulnerability, triggered the most acute outflows. In the four days following the attack, Aave users withdrew about $15 billion in deposits, Søndergaard said. Aave's TVL subsequently dropped from $26.4 billion to $14.3 billion, a 46 percent decline, as depositors pulled funds.
The Drift Protocol breach, which cost $280 million, pushed Q2 losses further. Together, the two exploits accounted for more than three-quarters of the quarter's total stolen value.
Dmytro Matviiv, chief executive officer of crowdsourced security platform HackenProof, said the falling aggregate losses are "misread as progress" because only the leading protocols have become harder to exploit, forcing attackers to expand their attack surface.
Alvin Kan, chief operating officer at Bitget Wallet, said the cyber exploits are making users more cautious but may also accelerate consolidation, with capital leaving "weaker" DeFi protocols for those with "stronger venues and clearer yield models."
What comes next for DeFi
The sector's ability to attract capital in the second half of 2026 will depend on whether real-world asset tokenization can draw institutional demand. Tokenization of traditional finance assets has gained traction this year, supported by clearer US regulatory guidance. But the immediate pressure remains: with 121 exploits year-to-date and a market cap that has halved from its peak, DeFi protocols face a trust deficit that no single upgrade can repair.
This article is for informational purposes only and does not constitute investment advice.
