| 1 | EthereumL1 | $62.0B | A- | 15 | Regulatory risk — potential for future unfavorable classification by major regulators |
| 2 | LidoLiquid Staking | $22.3B | B | 25 | 28%+ of all staked ETH controlled by one protocol creates Ethereum-level systemic centralization risk |
| 3 | SSV NetworkLiquid Staking | $17.5B | B | 26 | DVT splits validator keys across 4+ operators via Shamir Secret Sharing — a compromised threshold (3-of-4) of operators could forge attestations or double-sign, risking slashing of the 5M+ ETH secured by SSV. |
| 4 | Aave V3Lending | $13.9B | C- | 53 | Accepted stolen rsETH as e-mode collateral on April 18, 2026 after Kelp DAO's LayerZero bridge was exploited for $292M; attacker borrowed WETH against now-worthless collateral, leaving Aave V3 with $177-200M in bad debt. WETH pool hit 100% utilization, $6.2B in withdrawals, AAVE -17.7%. Umbrella backstop may not fully cover the shortfall, raising the prospect that stkAAVE holders absorb losses. |
| 5 | EigenCloudRestaking | $9.1B | C+ | 41 | Protocol generates $0 in organic revenue — the $78.9M in annualized 'fees' are EIGEN token emissions, not payments from AVSs for security |
| 6 | EigenLayerRestaking | $9.1B | B- | 34 | EigenLayer introduced restaking as a novel mechanism category where staked ETH simultaneously secures multiple Actively Validated Services (AVSs), creating correlated slashing risk — an operator slashed on one AVS could trigger cascading unstaking across other AVSs they secure, though the April 2025 slashing upgrade introduced unique allocated stake per AVS to contain blast radius. |
| 7 | Binance Staked ETHLiquid Staking | $8.7B | C+ | 36 | Centralized custody: all staked ETH is managed by Binance validators, creating a single-entity dependency for ~$7.7B in assets |
| 8 | SolanaL1 | $8.0B | B- | 35 | Network reliability — history of extended outages requiring validator coordination to restart |
| 9 | MorphoLending | $6.6B | B- | 32 | P2P matching engine adds complexity: if matching fails, fallback to pool rates may surprise users |
| 10 | MakerDAOCDP | $5.3B | B- | 29 | Oracle-dependent liquidation system: Maker relies on a custom oracle module (Medianizer/OSM with 1-hour delay) feeding ETH and other collateral prices. During Black Thursday (March 2020), oracle lag combined with network congestion led to $8.3M in zero-bid liquidation auctions. The system has since been rebuilt with Liquidations 2.0 (Dutch auction format) and Chainlink integration, substantially mitigating but not eliminating oracle-related liquidation risk. |
| 11 | SkyCDP | $5.2B | B- | 30 | USDS freeze function introduces censorship risk that undermines decentralization, splitting the community between DAI purists and USDS adopters |
| 12 | ether.fiRestaking | $5.2B | C- | 56 | EigenLayer restaking with socialized slashing: all eETH holders share proportional losses if an AVS is slashed. EigenLayer's live slashing system (since April 2025) makes this an active risk — a major AVS incident could reduce eETH's value for all holders simultaneously. |
| 13 | TronL1 | $5.1B | B- | 28 | Rainberry Inc. (Tron-associated) reached a $10M SEC settlement on March 5, 2026 with all charges dismissed with prejudice — the primary regulatory overhang is resolved, but Justin Sun's ongoing wash-trading controversy (coordinated trading across Binance accounts) and House Democrat scrutiny introduce fresh reputational risk. |
| 14 | BNB ChainL1 | $5.0B | C+ | 39 | Centralization — only 21 active validators, all effectively controlled by Binance ecosystem |
| 15 | BabylonRestaking | $4.8B | C- | 53 | Self-custodial BTC staking script is a novel primitive with no battle-tested precedent — any cryptographic flaw in the slashing/extraction logic could forfeit staked BTC |
| 16 | HyperliquidDerivatives | $4.7B | C- | 52 | Custom L1 with limited validator set creates centralization and censorship risk |
| 17 | World Liberty FinancialStablecoin | $4.2B | C- | 55 | Trump-family political risk: protocol faces sanctions/OFAC exposure, congressional scrutiny, and regulatory retaliation risk tied to presidential term cycles |
| 18 | Babylon ProtocolRestaking | $4.1B | C- | 54 | BLS vote extension vulnerability allows validators to bypass consensus by omitting block hash fields, undermining the security model at its core. |
| 19 | EthenaStablecoin | $4.0B | C | 49 | Reserve fund ($62M) covers 0.96% of $6.5B USDe supply — depletes in 33 days under the protocol's own V1 stress test at -10% annualized funding |
| 20 | Spark ProtocolLending | $3.6B | B- | 31 | Deep dependency on Sky (MakerDAO) ecosystem: protocol solvency is backstopped by Sky's $6.5B reserve, creating single-entity systemic risk |