DeFi Risk Checklist: 7 Signals That Matter
Before you deposit into any DeFi protocol, check these 7 signals to separate safe yields from ticking time bombs.
The 7-Point DeFi Risk Checklist
Before depositing into any DeFi protocol, check these seven signals. Each one catches a different type of risk. Together, they give you a comprehensive picture of whether a yield opportunity is genuinely safe or a ticking time bomb.
1. Where Does the Yield Come From?
This is the single most important question. There are only three legitimate sources of yield in DeFi:
- Lending interest — borrowers pay you to use your capital (Aave, Compound, Morpho)
- Trading fees — you earn a share of swap fees by providing liquidity (Uniswap, Curve)
- Staking rewards — you earn protocol inflation for securing the network (Lido, Rocket Pool)
If the APY comes from "reward tokens" instead of one of these three sources, the yield is likely unsustainable. When rewards dry up, the APY collapses — and so does the token price of the rewards.
2. Check the Base APY vs Reward APY Split
ZARQ's Yield Risk Monitor breaks down every pool's APY into base (organic) and reward (token emissions). If the reward APY is higher than the base APY, most of the yield is coming from token printing — a red flag. Safe pools have base APY that makes economic sense on its own.
3. Impermanent Loss Exposure
If you're providing liquidity to a trading pair, you're exposed to impermanent loss (IL). When the prices of the two tokens diverge, you end up with less value than if you'd simply held them. IL can easily wipe out months of yield. Stablecoin pairs (USDC/USDT) have near-zero IL. Volatile pairs (ETH/MEME) can have devastating IL.
4. TVL Stability
Total Value Locked tells you how much capital other people trust the protocol with. High TVL (>$100M) from a diversified depositor base is a positive signal. Low TVL (<$1M) or rapidly declining TVL is a warning. On ZARQ's yield monitor, pools below $10M TVL are automatically flagged as elevated risk.
5. Check the Underlying Token's Risk Rating
Even a "safe" yield is worthless if the underlying token collapses. Before depositing into any pool, check the risk rating of the tokens involved on ZARQ's token ratings page. If the underlying token is rated WARNING or CRITICAL on the Crash Watch, your yield is at serious risk.
is rated Baa3 with 18% crash probability — low underlying risk. A yield from an ETH staking pool on a reputable protocol is much safer than an exotic yield on a token with structural warnings.
6. Audit History
Has the protocol been audited by a reputable firm? How many audits? Are the audit reports public? Protocols with zero audits or only self-audits carry significantly higher smart contract risk. Major protocols like Aave and Compound have multiple audits from firms like Trail of Bits and OpenZeppelin.
7. Protocol Age and Track Record
Protocols that have survived multiple market cycles are less likely to have critical vulnerabilities. New protocols (less than 6 months old) have not been battle-tested. The DeFi graveyard is full of protocols that offered amazing yields for a few months before collapsing.
Quick Risk Assessment Framework
- Green light: Base APY only, no IL, TVL > $100M, multiple audits, 1+ year old
- Yellow light: Some reward APY, moderate IL, TVL $10M-$100M, 1 audit, 6-12 months old
- Red light: Reward-dominated APY > 50%, high IL, TVL < $10M, no audits, < 6 months old
Use ZARQ's Yield Risk Monitor to see this analysis applied to thousands of live pools.