Subscribe to Bankless or sign in
This week has plenty of DeFi veterans feeling nostalgic about the early days.
Crypto-economic systems were created to preserve principles that truly matter: permissionless access, credible neutrality, and user sovereignty. These are the qualities that drew many of us to the industry, but lately it feels like DeFi is no longer being designed with those values at the forefront.
Today, users transact further from the base layer than ever before, and much of what passes for "crypto" no longer meaningfully relies on cryptography at all, instead resembling centralized applications deployed via blockchains in a bid for regulatory arbitrage.
In the aftermath of a series of devastating exploits, perhaps it’s time for the crypto industry to acknowledge that the
Ethereum DeFi ecosystem might benefit from looking to its past for inspiration.
✨ DeFi's Golden Age?
As the name suggests, decentralized finance was designed to eliminate trust.
Unlike traditional financial systems – which rely on intermediaries to operate and introduce points of centralized control that allow bad actors, regulators, or institutions to debank users, freeze trading, and otherwise restrict access – truly decentralized systems are designed to function without dependence on any single actor.
Back in 2020 to 2021, it felt like Ethereum smart contract design was defined by an obsessive, single-minded focus on entirely eliminating trust. The goal was to build immutable smart contracts that would execute exactly as written, regardless of who tried to interfere.
One shining example of a protocol that embodied this ethos to the maximum is
Uniswap V3, the leading automated market making protocol to this day that allows for anyone to permissionlessly swap tokens. Another standout specimen is RAI, the "non-pegged stable asset" created by
Reflexer Labs* for decentralization purists backed exclusively by ETH that uses onchain logic to programmatically devalue and revalue itself in an attempt to maintain a fixed exchange rate with fiat currencies.
Removing central points of failure is the mission of defi
— Hayden Adams 🦄 (@haydenzadams) April 21, 2026
Its the best approach to security and legal risk, and achieves the best user outcomes
Its a bit easier for spot trading then other primitives, so I get the challenges
But its a good week to remember the mission
🕰️ Turn Back the Clock
This year’s highest profile exploits – Drift and KelpDAO – have been the direct result of overly centralized systems that don't resemble the pure DeFi examples above.
In both instances, attackers gained unauthorized access to critical control points, allowing them to manipulate and disrupt core protocol functions. These exploits were not failures of cryptography, rather, they were failures of centralized systems that depended on privileged access and admin keys.
Centralized systems with embedded control introduce multiple avenues for exploitation. Not only can malicious external attackers target infrastructure, insiders themselves pose a major potential risk vector.
Because centralized systems rely on human discretion, their users are exposed to misaligned incentives, external coercion, and regulatory pressure. Operators can unilaterally decide to freeze funds, alter protocol behavior, or intervene in ways users cannot prevent.
Lazarus Group behind $290M
— Vladimir S. | Officer's Notes (@officer_secret) April 20, 2026KelpDAO exploit!
TraderTraitor poisoned the RPC infrastructure (I tend to think that it’s their internal rpc, otherwise it would he named in bold text) used by LayerZero's DVN a
- DDoSing legitimate nodes to force failover onto compromised ones, then… https://t.co/0fm8dpKYS7 pic.twitter.com/pDfqB7xiBp
Enshrined centralization has become the unfortunate reality for many modern crypto systems. Looking to the past, however, presents pragmatic engineering learnings for the future.
By eliminating privileged access, minimizing governance, and committing to immutable execution, golden age DeFi protocols like Uniswap V3 and RAI proved that it is possible to build systems without operators. Such schemes are not necessarily fast and flexible, but they are certainly resilient.
It's time for the crypto ecosystem – capital allocators, developers, and users – to recommit to first principles:
- Prioritize Immutability: Protocol logic should be deployed as immutable contracts, with formal verification and rigorous audits to ensure correctness from the outset. Upgradeability may be appropriate for non-critical components, but only when constrained by timelocks and robust, decentralized governance.
- Measure Success by Resilience: Reward designs that can survive indefinitely without intervention. Users should vote with their capital, while VCs and influencers must stop glorifying systems that move fast at the expense of decentralization. Celebrate builders who ship set-it-and-forget-it systems.
- Minimize Trust Assumptions: Eliminate or drastically reduce the role of admin keys and reliance on offchain components. Design systems that can run autonomously. Favor permissionless access for all participants, even adversarial ones.
- Return to the Base Layer: Build high-value DeFi primitives directly on the Ethereum L1, where finality and security are strongest.
By returning to these roots, crypto can build truly decentralized financial systems that eliminate intermediaries, withstand adversarial pressure, and deliver on the industry’s original promise of permissionless, sovereign finance.
Bring back Single-Collateral DAI
— David Hoffman (@TrustlessState) April 20, 2026
KelpDAO