DeFi Lending Vaults Top $10 Billion, Up Sevenfold in Two Years

Vault Deposits Grow Sevenfold in Two Years

Deposits in decentralized finance lending vaults have climbed past $10 billion, up from about $4 billion in early 2025, as fintech companies, digital asset treasury firms and hedge funds put idle tokens to work through yield farming. The vaults run as smart contracts on DeFi platforms: each is steered by a curator, a role modeled on the traditional fund manager, who picks lending strategies, sets risk limits and takes a cut of the interest. A depositor moves stablecoins or other tokens out of a personal crypto wallet and into the contract, then collects an annualized return without touching the mechanics underneath. Standard strategies pay 3% to 10%, while vaults that accept heavier risk advertise yields of 20% or more. The scaling has been rapid by any measure: S&P Global Ratings, which launched a dedicated Vault Risk Assessment framework for digital asset markets on October 4, put total lending vault deposits at roughly $1.5 billion in September 2024 and $10 billion in September 2026, a near sevenfold rise. DefiLlama data recorded on October 19 shows the lending protocol Morpho carrying about $11.04 billion in total value locked, roughly $5.61 billion in outstanding borrowings and $22.2 million in lending fees over the past 30 days, about 21.5% of the $51.32 billion now parked across DeFi lending as a whole. Institutions are building on the same rails. Two Prime, a bitcoin lending firm run by traditional finance veterans, rolled out a bitcoin lending vault on the Pareto protocol in September, targeting 1.5% to 2% annualized returns on wrapped bitcoin with a 5 WBTC minimum deposit. The firm committed around $10 million of its own capital to absorb early losses, an acknowledgment that first-of-kind vaults need a cushion while track records form. For readers new to the mechanics, our beginner's guide to lending and borrowing on Compound Finance covers these strategies step by step.

Collateral Quality and the SEC's Curator Test

The speed of the build-out is what concerns regulators, because returns depend on collateral most depositors never inspect. Lending vaults accept guarantees that can include highly illiquid tokens, crypto-backed stablecoins and tokenized private credit. When markets fall, smart contracts liquidate borrower positions automatically; if several vaults hold the same thin collateral, forced selling pushes prices down further and trips the next round of liquidations. That chain reaction played out through the LUNA collapse in 2022 and the BendDAO NFT liquidation wave. Public code is not the same as a fully audited contract, and mispriced oracles or outright exploits remain live risks. The comparison hanging over the sector is Celsius: Celsius, Voyager and Genesis all failed in 2022 after opaque rehypothecation of customer funds. Many on-chain vaults run overcollateralized with automatic liquidations and transparent fund flows, though, so the analogy only stretches so far. A Bank of Canada staff analytical paper published in 2026 lands on a similar middle position, finding that DeFi lending can function under sound governance while still carrying circular leverage, concentrated liquidations and systemic fragility. SEC Commissioner Hester Peirce said in a July 22 statement that some DeFi vaults and on-chain lending arrangements may meet the legal definitions of an investment contract, an investment company or an investment adviser. The decisive factor, she wrote, is whether the curator holds real decision rights: choosing assets, adjusting collateral ratios, setting lending rates or moving liquidation thresholds. Even where the underlying tokens are not securities, the yield product itself is not automatically outside securities law. European regulators have gone further, with a proposal to bring intermediaries providing access to DeFi into scope, which would expose curators and platforms to KYC and AML duties, manager registration and disclosure requirements. S&P's October framework adds a market-side check, scoring underlying credit risk, protocol and chain security, governance arrangements, including whether a DAO or a single manager controls allocations, and the curator's ability to hold its stated risk profile.

The deposit curve and the compliance timetable are converging on the same weak point: the curator. The marginal dollar entering at a 20% headline yield is buying collateral liquidity risk that no on-chain dashboard prices today, and Peirce's July 22 statement moves the compliance test off the smart contract and onto whoever steers the strategy. Vaults with passive, rule-bound curators sit in a stronger legal position than discretionary ones. Two Prime's $10 million first-loss commitment shows how institutions are already pricing that gap: they insure themselves rather than trust the stack. The segment some analysts frame as DeFi 2.0 will be judged on how withdrawals behave in the next drawdown, not on APY marketing.