Toward a Risk Assessment Framework for Institutional DeFi: A Nine-Dimension Approach
2026-05-06 • Distributed, Parallel, and Cluster Computing
Distributed, Parallel, and Cluster ComputingCryptography and SecurityComputers and SocietySoftware Engineering
AI summaryⓘ
The authors created a new way to measure risks in decentralized finance (DeFi), which currently manages over $100 billion. They improved existing methods by adding three new risk factors: how protocols connect (composability risk), how well they are understood (comprehension debt), and how risks change over time (temporal risk dynamics). Their method also separates how reliable the risk assessment is from how severe the risk is. They tested this framework on 12 big DeFi failures from 2024-2026 and found that the new risk factors were essential to fully explain some major incidents.
Decentralized FinanceDeFi ProtocolsRisk AssessmentComposability RiskComprehension DebtTemporal Risk DynamicsStablecoinsOntologyProtocol DependenciesSystemic Risk
Authors
Eva Oberholzer, Valeriy Zamaraiev
Abstract
Decentralized finance (DeFi) protocols now intermediate over USD 100 billion in value, including regulated stablecoins and tokenized assets deployed as collateral, yet no widely adopted framework operationalizes risk assessment at the rigor institutional adoption demands. Existing approaches emphasize protocol-specific parameter optimization or conceptual taxonomies without providing explainable, composability-aware, and structurally independent assessment methodologies. We propose a nine-dimension DeFi risk assessment framework extending the six-dimension taxonomy introduced by Moody's Analytics and Gauntlet with three novel dimensions: composability risk, comprehension debt, and temporal risk dynamics. We additionally introduce a transparency confidence modifier separating assessment reliability from risk severity. The framework is grounded in structural analysis of protocol dependencies conducted through an ontology-based protocol intelligence infrastructure covering more than 8,000 DeFi protocols. We retrospectively analyze 12 major DeFi-related incidents from 2024-2026 representing approximately USD 2.5 billion in direct losses. Five of the 12 incidents require at least one novel dimension for complete root-cause characterization, including the two highest-systemic-impact events in the dataset.