Total value locked (TVL) in decentralized finance (DeFi) has fallen by about 39% in 2026 so far, declining to just over $70 billion from roughly $115 billion in January.
A Wednesday report from crypto data aggregator CryptoRank attributed the decline to the broader market correction that followed the October 2025 crypto market peak.
After Bitcoin reached a record high above $122,000, a market-wide liquidation event on Oct. 10, 2025, erased more than $19 billion in leveraged positions and accelerated a deleveraging cycle across digital assets.
Despite the decline, CryptoRank noted that the current drawdown remains far smaller than during the 2021-2022 bear market, suggesting a more resilient DeFi market.
DeFi TVL, 1-year chart, monthly. Source: CryptoRank
Fallout from Kelp DAO exploit accelerated the DeFi TVL decline: analyst
CryptoRank said security incidents added another layer of pressure on DeFi in 2026, with 121 hacks and roughly $942 million in losses year-to-date. While exploits were not the primary driver of the decline, the data provider said their frequency likely weighed on user confidence and reinforced capital outflows from DeFi.
According to Nicolai Søndergaard, senior research analyst at crypto intelligence platform Nansen, the fallout from the $293 million Kelp DAO exploit on April 18 compressed into days what would otherwise have been weeks of DeFi outflows. Aave users withdrew about $15 billion in deposits in the four days following the exploit.
Related: CryptoQuant warns on Strategy’s dividend coverage as cash reserve falls 38%
The second quarter of 2026 became the most-hacked quarter on record by incident count, with 83 exploits targeting crypto protocols. However, the $755 million stolen during the quarter remained well below the $3.56 billion lost in the fourth quarter of 2020, the costliest quarter for crypto hacks on record.
The falling total value stolen is not due to more robust industry security but a sign that hackers are expanding their attack surface, according to Dmytro Matviiv, CEO of crowdsourced security and bug bounty platform HackenProof. He told Cointelegraph that the lower aggregate losses are “misread as progress,” but only the leading protocols have become harder to exploit, forcing attackers to expand their attack surface.
Alvin Kan, chief operating officer at Bitget Wallet, said that the cyber exploits are making users more cautious, but added that these may also result in capital leaving “weaker” DeFi protocols for those with “stronger venues and clearer yield models,” leading to more industry consolidation.
Magazine: Bitcoin, the ‘canary in the coal mine,’ XRP transaction demand falls 91.5%: Market Moves
