In May 2021, Donald, a father of two, lost $50,000 to a DeFi project. He planned to use the profit from his investment to care for his disabled daughter, Lisa, and send his son, Edward, to college.
Donald was smart. He didn't go all in at once. He threw in $1,000 first and cashed out the capital plus the promised 8% daily reward. Now convinced everything was perfect, he put in the whole $50,000.
On the day of his supposed withdrawal, he tried all he could but never withdrew a dime. He did some quick research and found out his money was long gone. Heartbreaking? Sounds stupid?
Whether you've lost money in DeFi, like Donald, or you're starting and want to avoid such mistakes, I've got you.
In this article, I’ll show you seven common DeFi risks, how to identify them, and how to manage or avoid them. The risks include:
1. Smart contract risk
2. Liquidation risk
3. Volatility risk
4. Slippage risk
5. Maximal extractable values (MEV) risk
6. Regulatory risk
7. Impermanent loss risk.
7 DeFi risks affecting users
1. Smart contract risk
A smart contract is a written agreement made on a blockchain using computer codes. Smart contracts make it easy to automate transactions and tasks on the blockchain.
Consider a smart contract like a device with a power button and a lock. Once you switch on and lock it, no one can stop it from doing its job. Assuming participants in a transaction meet the specified conditions, the smart contract delivers on the instructions.
For example, you can write a smart contract instructing it to lock away $10 in BNB for every $1,000 it receives. When you send in $1,000, which meets the condition in the smart contract, $10 worth of BNB locks away.
Smart contracts are still evolving, hence the various risks they carry. Based on a study, blockchain projects and users have lost billions of dollars to smart contract risks.
Smart contract risk is the probability that a smart contract will malfunction when put to work. Such risks include:
Causes and effects of smart contract risk
Transaction irreversibility
Susceptibility to bugs
Ability to malfunction during interaction
How to manage smart contract risk
Here are the best ways to manage smart contract risks:
2. Liquidation risk
Liquidation in DeFi is a situation where a smart contract uses collateral to pay back debt. Let's assume you borrowed crypto from a lending protocol like Aave. When it's time to pay up, and you don't, the smart contract takes your collateral to pay the debt.
Liquidation risk is the probability that a DeFi protocol will take away your collateral to pay up debt.
Causes of liquidation risk
Liquidation happens for two reasons:
Effects of liquidation risk
Liquidation makes you lose your collateral. And your collateral is always worth more than the borrowed fund. For instance, you borrowed $1,000 in the example above but lost $1,500.
In a study of DeFi liquidations, the researchers showed that four DeFi platforms made over 28,138 liquidations in about 3 years. Hence, borrowers lost over $220,000.
Managing liquidation risk
There are three popular ways to manage liquidation risks in DeFi:
3. Volatility risk
Volatility is the rapid up-and-down movement of crypto prices. For example, Bitcoin can lose or gain $1000 in minutes.
Volatility risk is the probability that the value of your crypto investment will drop due to these rapid movements.
Causes of volatility risk
The human emotions of fear and greed drive volatility.
For example, fear that crypto prices may drop after a piece of bad news may push investors to sell large amounts of their crypto. Hence, causing rapid drops in prices.
Greed to make so much money quickly may cause investors to throw large sums of money into the crypto market. Hence, causing prices to shoot up.
Effects of volatility risk
Volatility leads to temporary or even a permanent loss of funds.
At the end of 2021, the price of Bitcoin shot up to $69,000. But as I write this in December 2022, the price of Bitcoin is about $17,000. So, if you had 1 Bitcoin from 2021 to now, its value has dropped by $52,000.
But does volatility affect DeFi? Yes.
Before using any DeFi service like lending, borrowing, or yield farming, you need to buy some crypto. Holding these cryptos exposes you to risks of volatility.
Managing volatility risk
There are two effective ways to manage volatility risks in DeFi:
Recommended by LinkedIn
4. Slippage risk
Slippage occurs when you request to swap your crypto at a price, but the smart contract completes the transaction at a different price.
Let's assume you want to swap some USDT for ETH. At that point, 1 ETH is trading for 1,000 USDT. Instead of your order filling at 1 ETH for 1,000 USDT, it fills at 1 ETH for 1100 USDT. That means you buy less ETH than you planned to.
Slippage risk is the probability that you'll lose money when swapping crypto.
Causes of slippage risk
The leading cause of slippage is price volatility. That is the rapid up-and-down movement of crypto prices.
Strong price movement makes the market unstable. Hence, causing you to buy at a different price than you intended. Slippage happens mostly with instant swaps (market order).
Low liquidity is another cause of slippage. That is a less-than-required amount of crypto in a smart contract.
Let's assume you place an order to swap 10 ETH for USDT using a protocol. The protocol will partially fill your order if it has a low amount of USDT. Hence, you may succeed in swapping say 6 ETH while 4 ETH becomes a pending transaction.
Because the 4 ETH order is pending, whenever USDT flows into the contract the 4 ETH will be swapped automatically. But at the initial price of ETH instead of the current price after USDT flowed in. And that may result in some loss.
Effects of slippage risk
Slippage causes you to swap your assets at an unintended price, making you lose money.
Let's assume you want to swap 1 ETH to USDT at 1 ETH to $1000. If your order fills at $990 due to slippage, you’ll lose $10. Imagine the compounding effect if you swap up to 100 ETH.
Managing slippage risk
There are three trusted ways to manage the effects of slippage:
5. Maximal extractable value (MEV) risk
Maximal extractable values are various ways miners/validators (blockchain network controllers) make extra profit from crypto transactions by including, excluding, and reordering transactions in the records.
In a smart contract-supporting blockchain like Ethereum, validators can decide which transactions to add to the blockchain first. Assuming you pay more than the required transaction fee (gas fee), they complete your transactions faster.
MEV risk is the probability that you’ll lose money due to the actions of blockchain network controllers.
Causes of MEV risk
MEV risk is caused by attackers trying to take advantage of validators'/miners' power over transactions to the detriment of other users. They achieve this using tactics such as front-running and sandwiching, among others.
Confused? Let's take an example. Let's assume you and your friend decide to carry out simultaneous instant swaps using a DeFi protocol. The base gas fee for the transaction is 0.002 ETH. Your friend can make his transaction faster by increasing the gas fee to 0.004 ETH.
Once he does that, validators will pick up his transactions first for confirmation. Because they’ll get a bigger reward from him. So, he'll swap at a better price than you.
Effects of MEV risk
MEV attacks lead to loss of funds. For example, in this MEV attack, the loss was as high as $1.5M.
Managing MEV risk
There are two practical ways to limit MEV risks:
6. Regulatory risk
Introducing regulation into DeFi may help protect users and their funds. But that will be counterproductive as DeFi was designed to give users freedom in using their money.
Regulatory risk in DeFi is the probability of losing money because the government doesn't have your back. It’s difficult for governments and regulators to regulate DeFi.
Cause of regulatory risk
DeFi was designed against regulation. So, it takes a lot of work to regulate DeFi transactions and activities.
Effects of regulatory risk
Poor regulation of DeFi activities has caused a lot of users and investors to lose significant amounts of funds. According to Chainalysis, attackers stole $3.8B from DeFi in 2022.
Managing regulatory risks
The best way to manage them is by taking responsibility for funds. Two steps are essential to help a user like you stay safe:
7. Impermanent loss risk
Impermanent loss results when the value of assets you deposit to a liquidity pool (smart contract) depreciates compared to when you deposited them. The depreciation is caused by:
Impermanent loss risk is the probability that you'll lose money due to the change in the price of cryptos after depositing in a liquidity pool.
Causes of impermanent loss risk
Let's assume a liquidity pool has two cryptos ETH and BUSD. The pool determines the price of the assets using a simple formula that considers the ratio of the two assets.
For example, in a constant product liquidity pool, X Y = constant. So, the product of two cryptos in the pool must always equal a constant number. Assuming 1 ETH equals 100 BUSD, and you provide liquidity of 1 ETH and 100 BUSD, the constant product is 1ETH 100 BUSD = 100.
Whenever you swap BUSD to ETH, the smart contract rebalances the constant to 100. It never changes. If the constant doesn't change, it means the ratios of ETH and BUSD have to change with each swap to balance the constant to 100.
This change in the number of original ETH and BUSD in the pool to balance the constant is how impermanent steps in.
Effects of impermanent loss risk
Impermanent loss only becomes permanent when you remove liquidity (your assets) from a pool. In other words, you lose part of your initial capital.
The higher the changes in the market prices of the assets used in providing liquidity, the more the impermanent loss. So, impermanent loss is lower in stablecoins than in volatile coins like Bitcoin and Ether.
Managing impermanent loss risk
You should provide liquidity with assets of low volatility like stablecoins. Low-volatility assets are more resistant to impermanent loss. A pool with stablecoins, like DAI and USDT, is less prone to impermanent loss than a pool with volatile assets like $ETH and $UNI.
The bottom line
As the famous investor Warren Buffet said, “Never invest in what you don't understand.” Before interacting or investing in DeFi protocols, understand their associated risks. When you understand these risks, you'll know how to avoid them and keep your funds safe. And following this guide will help you do those effectively.