Detecting DeFi Risk, Before It Breaks
Annual Report · Methodology v1.1

State of DeFi Risk 2026

Most of the largest DeFi protocols can meet their obligations. Very few are growing, and one category sits almost entirely below investment grade. This report sets out what bond-style grades say about 51 protocols, what changed between our July and November screens, and what our own ratings got wrong.

Published November 13, 2026 Protocols 51 Data As Of November 12, 2026 Full Table defiscoreaudit.com/ratings
Summary

Five Findings

1. Solvency is the strong axis. 31 of 51 protocols are investment grade (BBB or better) on Solvency, our credit grade.
2. Restaking is the weak pocket. 6 of the 7 restaking and liquid-restaking protocols we rate are below investment grade on Solvency. ether.fi is the exception. The result held in both the July 27, 2026 and November 12, 2026 screens.
3. Almost nothing is growing. 46 of the 50 screened protocols hold less TVL than a year ago; the median change is -51%. Only 4 of 51 are investment grade on Growth: Morpho, Hyperliquid, JustLend and Ondo.
4. Safe and shrinking is the common case. 27 protocols are investment grade on Solvency and below it on Growth. A single blended score would hide that.
5. The November re-screen cut more grades than it raised. 15 Solvency grades fell and 6 rose between the two screens. 6 protocols lost investment grade: Drift, Euler, Yearn, Fluid, dYdX and Benqi.
Method

What Is Being Graded

Each protocol gets three separate grades on the AAA-to-D scale used in bond markets. Solvency is the credit grade: can the protocol survive stress and pay its users back. Legitimacy grades whether it is what it claims to be. Growth is an outlook on adoption. The three are never averaged.

50 of the 51 are screen grades: the methodology applied in reduced form, with 11 inputs per protocol, so the whole table stays comparable. They are provisional. One, Aave, is a full rating, refreshed November 13, 2026.

TVL, 12-month TVL change and 90-day drawdown come from DefiLlama, parent-level listing, as of November 12, 2026. For 11 protocols every other input is now listed with its source or marked as an analyst estimate (checked November 13, 2026). For the rest, the remaining inputs are analyst estimates from July 27, 2026. No protocol pays for a rating.

Finding 1

31 Of 51 Are Investment Grade On Solvency

The distribution is centred on A and BBB. The highest grade awarded is AA and the lowest is B.

Solvency GradeProtocolsNames
AA
1
Uniswap
A
13
Lido, Sky (MakerDAO), Morpho, ether.fi, Ethena, Hyperliquid, JustLend, Spark, Jupiter, Maple, PancakeSwap, Venus, Aave
BBB
17
Pendle, Jito, Curve, Kamino, Raydium, Rocket Pool, Marinade, Compound, Convex, Sanctum, Aerodrome, mETH Protocol, Frax, GMX, Liquity, StakeWise, Ondo
BB
13
Lombard, Kelp DAO, Drift, Renzo, Fluid, Balancer, Suilend, dYdX, Euler, Benqi, Yearn, Moonwell, SushiSwap
B
7
EigenLayer, Babylon, Symbiotic, Solv, Puffer, Bedrock, NAVI

Blue bars are investment grade, gold bars are below it. Legitimacy is stronger still: 43 of 51 are investment grade on that axis.

Finding 2

Restaking: 6 Of 7 Below Investment Grade

Restaking protocols share the same problem in the data: deposits have left. Every protocol in the table below holds less TVL than a year ago, and most have lost more than half.

ProtocolCategorySolvencyTVL12-Month TVL ChangeWorst 90-Day Drawdown
ether.fiLRTA 70$4.3B-49%24%
Kelp DAOLRTBB 52$0.75B-40%36%
RenzoLRTBB 45$0.09B-92%30%
BedrockLRTB 41.5$0.3B-52%31%
SymbioticRestakingB 39.8$0.27B-69%44%
PufferLRTB 38.3$0.02B-85%67%
EigenLayerRestakingB 37.5$5.2B-63%28%

Kelp DAO's risk score is under review: it does not yet reflect the April 2026 bridge exploit described below. A change there can only lower its grade.

Findings 3 And 4

Solvent, But Not Growing

46 of 50 screened protocols have a lower TVL than twelve months ago, and 26 have lost half or more. Growth grades reflect that: 47 of 51 are below investment grade on Growth.

Growth GradeProtocolsNames
AAA
1
Hyperliquid
A
2
Morpho, Ondo
BBB
1
JustLend
BB
15
Lido, Sky (MakerDAO), EigenLayer, ether.fi, Ethena, Pendle, Babylon, Uniswap, Spark, Jupiter, Maple, PancakeSwap, Lombard, Sanctum, Aave
B
14
Jito, Curve, Kamino, Raydium, Marinade, Compound, Kelp DAO, Aerodrome, Solv, Drift, mETH Protocol, Fluid, GMX, Euler
CCC
18
Rocket Pool, Venus, Symbiotic, Convex, Renzo, Balancer, Frax, Suilend, Puffer, Bedrock, Liquity, dYdX, Benqi, NAVI, Yearn, StakeWise, Moonwell, SushiSwap

A weak Growth grade is not a statement about safety. 27 protocols are investment grade on Solvency while below it on Growth. A lender and a growth investor are asking different questions of the same protocol, which is why the grades are published separately.

By Category

Where The Investment-Grade Names Are

CategoryRatedInvestment Grade On SolvencyStrongestWeakest
Lending127 of 12Spark ANAVI B
Liquid Staking77 of 7Lido AJito BBB
DEX75 of 7Uniswap AABalancer BB
LRT51 of 5ether.fi APuffer B
Derivatives42 of 4Hyperliquid ADrift BB
Yield32 of 3Pendle BBBYearn BB
CDP22 of 2Sky (MakerDAO) ALiquity BBB
Restaking20 of 2Symbiotic BEigenLayer B

Categories with a single rated protocol: Ethena (Yield / Synthetic Dollar, A); Babylon (BTC Staking, B); Jupiter (DEX Aggregator, A); Maple (Credit, A); Lombard (BTC LST, BB); Solv (BTC Yield, B); Fluid (Lending / DEX, BB); Frax (CDP / LSD, BBB); Ondo (RWA, BBB).

Finding 5

What Changed Between July 27, 2026 And November 12, 2026

15 Solvency grades fell and 6 rose. Two things drove the downgrades. TVL kept falling, and Methodology v1.1 now scores TVL stability on the worse of the 90-day drawdown and the 12-month decline. In every downgrade below, the 12-month decline is the larger of the two.

DowngradedCategorySolvency12-Month TVL Change90-Day DrawdownDrawdown Scored
PendleYieldA → BBB-82%25%82%
DriftDerivativesBBB → BB-79%33%79%
EulerLendingBBB → BB-76%36%76%
NAVILendingBB → B-75%43%75%
YearnYieldA → BB-72%33%72%
SolvBTC YieldBB → B-66%18%66%
EigenLayerRestakingBB → B-63%28%63%
FluidLending / DEXA → BB-63%21%63%
dYdXDerivativesBBB → BB-62%34%62%
BenqiLendingBBB → BB-55%28%55%
ConvexYieldA → BBB-54%23%54%
Rocket PoolLiquid StakingA → BBB-53%32%53%
LiquityCDPA → BBB-45%27%45%
CompoundLendingA → BBB-42%24%42%
mETH ProtocolLiquid StakingA → BBB-42%24%42%
UpgradedCategorySolvency12-Month TVL Change90-Day DrawdownDrawdown Scored
MorphoLendingBBB → A+55%8%8%
ether.fiLRTBBB → A-49%24%49%
EthenaYield / Synthetic DollarBBB → A-39%9%39%
JupiterDEX AggregatorBBB → A-30%25%30%
SanctumLiquid StakingBB → BBB-13%27%27%
RenzoLRTB → BB-92%30%92%

Each protocol page shows its July 27, 2026 and November 12, 2026 inputs side by side. Some upgrades also reflect inputs that were replaced with sourced figures on November 13, 2026; the page for each says which.

Corrections

What Our Own Ratings Got Wrong

A ratings publisher should show its errors. These are ours so far.

  • A drawdown measure with no memory. Methodology v1.0 looked only at the last 90 days, so a protocol that had lost most of its deposits over a year scored better after one quiet quarter. v1.1 corrects this. It is the main reason 15 grades fell.
  • The April 2026 rsETH exploit was not in our scores. On April 18, 2026 an attacker drained 116,500 rsETH, about $292M, through Kelp DAO's bridge and borrowed against it on Aave, leaving Aave with estimated bad debt of $124M to $230M until an industry-funded recovery restored rsETH's backing (The Block; Aave incident report). Our July 27, 2026 screen scored Kelp's risk without mentioning it, and our Aave rating gave full marks for exploit history. Aave's rating has since been refreshed and now stands at Solvency A; Kelp's risk score is still under review.
  • Estimates that did not survive a source check. When we checked unlock schedules and category share against public data for 11 protocols, several July estimates were wrong, in both directions. The corrected values and the old ones are shown on each page.
Limits

What This Report Cannot Tell You

  • Screen grades are provisional. Six of the eleven inputs are analyst judgment scored out of ten.
  • The sustainability input depends on whether revenue means what a protocol keeps or all fees its users pay. That definition is not yet settled, and for some protocols it would change the grade.
  • TVL is a blunt measure. It moves with token prices as well as with deposits.
  • Grades are a point-in-time view as of November 12, 2026 and do not update between published screens.
  • These are opinions on relative risk. They are not investment advice.

How to cite.

DeFiScoreAudit, "State of DeFi Risk 2026", November 13, 2026. https://defiscoreaudit.com/reports/state-of-defi-risk-2026

Found an error? Tell us. Corrections are published with a date.