Moderate risk — smart account architecture and anonymous team offset by aggregator-only model with no pooled user liquidity risk and $4B monthly perp volume demonstrating genuine product-market fit.
Risk Breakdown
Top Risks
EIP-4337 smart wallet contract risk: DeFi.app uses account abstraction smart wallets on EVM chains. A bug in the EntryPoint contract or DeFi.app's wallet factory could allow draining of user funds. The Cantina audit competition surfaced 276 findings, though resolved issues are not individually published.
Turnkey MPC custody on Solana: DeFi.app's Solana integration uses Turnkey for key management, creating a custodial dependency — if Turnkey is compromised or goes offline, Solana users lose access to funds. This is qualitatively different from the EVM self-custody model.
June 2026 insider cliff unlock: Core Contributors (20% = 2B tokens) and Early Backers (10% = 1B tokens) complete their 12-month lockup in June 2026 and receive 25% cliff unlocks simultaneously — ~750M tokens entering circulation, representing ~$36M at current prices that may create sell pressure.
Anonymous team: DeFi.app has no publicly identified founders or team members. This limits accountability and makes third-party assessment of execution risk and long-term commitment difficult.
Frequently Asked Questions
Is DeFi.app safe to use?
What are the main risks of using DeFi.app?
What is DeFi.app's risk score breakdown?
How does DeFi.app compare to other DEX protocols?
Has DeFi.app ever been hacked or exploited?
Get risk alerts before it's too late
Weekly grade changes, downgrade alerts, and new protocol risk findings. Free.