| 1 | EthereumL1 | $62.0B | A- | 13 | Regulatory risk — potential for future unfavorable classification by major regulators |
| 2 | Aave V3Lending | $25.8B | B- | 29 | CAPO (Chainlink Adaptive Price Oracle) layer misfired March 10, 2026, causing $27M in wrongful liquidations across 34 accounts; snapshot-ratio/timestamp desynchronization in Aave's custom adaptive oracle layer proved a real failure mode beyond standard Chainlink feeds, with DAO reimbursing ~345 ETH from treasury. |
| 3 | LidoLiquid Staking | $18.3B | B | 23 | 28%+ of all staked ETH controlled by one protocol creates Ethereum-level systemic centralization risk |
| 4 | EigenLayerRestaking | $15.3B | B- | 33 | EigenLayer introduced restaking as a novel mechanism category where staked ETH simultaneously secures multiple Actively Validated Services (AVSs), creating correlated slashing risk — an operator slashed on one AVS could trigger cascading unstaking across other AVSs they secure, though the April 2025 slashing upgrade introduced unique allocated stake per AVS to contain blast radius. |
| 5 | SSV NetworkLiquid Staking | $13.7B | B | 24 | DVT splits validator keys across 4+ operators via Shamir Secret Sharing — a compromised threshold (3-of-4) of operators could forge attestations or double-sign, risking slashing of the 5M+ ETH secured by SSV. |
| 6 | EigenCloudRestaking | $8.9B | C+ | 41 | Protocol generates $0 in organic revenue — the $78.9M in annualized 'fees' are EIGEN token emissions, not payments from AVSs for security |
| 7 | RedStone OracleDeFi | $8.0B | C | 48 | Pull-based oracle model requires on-chain transaction to include price data — malformed or stale data passed by callers |
| 8 | SolanaL1 | $8.0B | B- | 33 | Network reliability — history of extended outages requiring validator coordination to restart |
| 9 | Binance Staked ETHLiquid Staking | $7.7B | C+ | 36 | Centralized custody: all staked ETH is managed by Binance validators, creating a single-entity dependency for ~$7B in assets |
| 10 | SkyCDP | $7.1B | B- | 30 | USDS freeze function introduces censorship risk that undermines decentralization, splitting the community between DAI purists and USDS adopters |
| 11 | MorphoLending | $6.8B | B- | 32 | P2P matching engine adds complexity: if matching fails, fallback to pool rates may surprise users |
| 12 | EthenaStablecoin | $6.1B | C- | 52 | Reserve fund ($62M) covers 0.96% of $6.5B USDe supply — depletes in 33 days under the protocol's own V1 stress test at -10% annualized funding |
| 13 | HyperliquidDerivatives | $6.0B | C- | 52 | Custom L1 with limited validator set creates centralization and censorship risk |
| 14 | ether.fiRestaking | $5.8B | C- | 54 | EigenLayer restaking with socialized slashing: all eETH holders share proportional losses if an AVS is slashed. EigenLayer's live slashing system (since April 2025) makes this an active risk — a major AVS incident could reduce eETH's value for all holders simultaneously. |
| 15 | MakerDAOCDP | $5.5B | B | 27 | Oracle-dependent liquidation system: Maker relies on a custom oracle module (Medianizer/OSM with 1-hour delay) feeding ETH and other collateral prices. During Black Thursday (March 2020), oracle lag combined with network congestion led to $8.3M in zero-bid liquidation auctions. The system has since been rebuilt with Liquidations 2.0 (Dutch auction format) and Chainlink integration, substantially mitigating but not eliminating oracle-related liquidation risk. |
| 16 | BNB ChainL1 | $5.0B | C+ | 37 | Centralization — only 21 active validators, all effectively controlled by Binance ecosystem |
| 17 | TronL1 | $4.1B | B- | 30 | SEC fraud charges against founder Justin Sun allege 600,000+ wash trades inflating TRX prices between 2018-2019, generating $31 million in illicit profits. The case is in settlement negotiations as of early 2025, and additional allegations of market manipulation surfaced in February 2026. This creates ongoing regulatory and reputational risk for the entire network. |
| 18 | BaseL2 | $3.9B | B- | 33 | Coinbase is sole sequencer with no permissionless fallback, creating a corporate single point of failure for $4.6B in TVL. |
| 19 | Tether GoldRWA | $3.6B | C+ | 42 | Tether corporate contagion risk: despite separate legal structure, XAUt's association with Tether (USDT issuer) creates reputational and regulatory risk if parent company faces enforcement actions or banking failures |
| 20 | JustLendLending | $3.2B | C+ | 40 | Heavy governance centralization under Justin Sun and TRON Foundation with no documented multisig; single-entity risk to $5B+ TVL |