For years, DeFi’s growth strategy was to pull users on-chain, and the next institutional wave is testing where users may never know they’re touching DeFi at all.
Matt Fisher, CEO of Katana, shared with CryptoSlate how the front end owns the user. If a credit card, a fintech app, or an exchange routes deposits into Morpho or another lending protocol, the customer remembers the card.
The credibility problem underneath the optimism
Fortune reported that Morpho closed a $175 million raise on June 9, backed by Paradigm, a16z crypto, Ribbit Capital, VanEck, Apollo Global Management, and Circle Ventures, among others spanning crypto-native funds and traditional finance.
Fisher said:
“On-chain, DeFi is facing its biggest threat. The latest run of hacks and exploits has been a huge tax on the credibility and confidence.”
He was referring to the Drift and KelpDAO exploits, which TRM Labs linked to North Korean state actors and which together accounted for roughly 76% of 2026’s hack losses through April.
The KelpDAO hit was estimated at around $290 million, built on unbacked rsETH used as collateral across Aave, Compound, and Euler. The episode resulted in $200 million in bad debt on Aave, which demanded a joint effort from protocols and retail users to cover.
Composability, which makes DeFi efficient by enabling capital to move faster via shared liquidity and cross-protocol collateral, was the cause of the bad debt.
A failure in one corner of the system cascades through markets with no direct exposure to the original problem.
Fisher still sees a path forward for the thesis:
“I think there’s a degree of survivorship bias in people who have kind of been building for a long time that are still hard at work.”
He also predicted market consolidation toward a power law, with a handful of protocols absorbing most of the volume and trust.
| Stress point | What happened | Why it matters for the article |
|---|---|---|
| 2026 hack concentration | Drift and KelpDAO accounted for roughly 76% of 2026 crypto hack losses through April, according to TRM Labs. | Shows that DeFi’s credibility problem is not abstract; a small number of large incidents can define institutional risk perception. |
| KelpDAO exploit size | The KelpDAO hit was estimated at around $290 million. | Gives readers a concrete scale for the event Fisher referenced. |
| Collateral contagion | Unbacked rsETH was reportedly used as collateral across lending venues including Aave, Compound, and Euler. | Shows how composability can transmit risk across protocols that were not the original target. |
| Aave spillover | The episode left roughly $200 million in bad debt on Aave. | Makes the retail/institutional trust issue tangible: users and protocols can inherit losses from elsewhere in the stack. |
| Forward-looking risk | Future curator, bridge, oracle, or wrapped-collateral failures could make distributors more conservative. | Sets up the article’s bear case: exchanges and fintechs may hide or limit DeFi exposure to protect their brands. |
Why the plumbing stays hidden
Ordinary users want the card to work and the loan to fund without having to understand why or worry about risk curators, bridge assumptions, oracle feeds, or liquidation thresholds before depositing money.
Fisher makes an analogy with a debit or credit card that lends out deposits on Morpho under the hood. If the card switches lending protocols behind the scenes, the user doesn’t notice or care because the card owns the relationship.
Coinbase operates a USDC lending product powered by Morpho and Steakhouse vaults on Base, and Morpho says the integration has originated over $1.2 billion in USDC loans, with over $800 million still active and over $1.4 billion in cbBTC as collateral.
A Coinbase user borrowing against Bitcoin sees a Coinbase interface, while the collateral transfer and liquidation rules run inside Morpho’s smart contracts. Bitcoin, in that flow, stops being just an asset people hold and becomes collateral that fintech rails route automatically.
Kraken runs a parallel version through its DeFi Earn product, which tells users they don’t need seed phrases or manual contract signatures while routing assets through vaults and lending protocols via infrastructure built by Veda and Sentora.
Once again, the exchange keeps the user, and the lending protocol becomes invisible plumbing.
Fisher’s noted:
“Crypto is moving into utility now. Distribution is a real moat in branding and trust.”
Protocols can build the lending engine, but they can’t easily build the customer relationship that an app or exchange has already spent years earning.
| User-facing product | Who owns the user relationship | DeFi/backend layer | What the user sees | What happens underneath |
|---|---|---|---|---|
| Coinbase USDC lending / Bitcoin-backed borrow | Coinbase | Morpho + Steakhouse on Base | Coinbase app, loan, yield product | Collateral transfer, interest, liquidation rules via Morpho contracts |
| Kraken DeFi Earn | Kraken | Veda, Sentora, lending protocols | Exchange yield product | Vault routing without seed phrases or manual contract signatures |
| Future fintech card / credit app | Card issuer or fintech | Morpho, Aave, or other lending layer | Card, deposits, credit line | Deposits routed into curated DeFi credit markets |
| Asset-manager vault | Asset manager / curator | Morpho-style vault infrastructure | Risk-managed yield product | Curated collateral, vault parameters, compliance controls |
What retail users gain
Fisher pushed back against the idea that institutional liquidity is primarily a retail giveaway, arguing for stability.
Pooled liquidity among institutional and retail depositors reduces volatility caused by large players moving in and out. If a major depositor exits all at once, deeper aggregated liquidity absorbs the shock and prevents borrowing rates from spiking for everyone left behind.
Fisher argued that scale forces builders to harden systems and test under conditions that smaller protocols never face, and that incidents resembling Aave’s exposure to KelpDAO will become rarer as infrastructure matures under institutional weight.
He also pointed to insurance as an emerging layer, with institutions entering curated vaults offering depositors coverage that didn’t exist before, using their own brand to backstop risks the protocol doesn’t absorb directly.
Morpho V2 adds fixed-rate lending and flexible collateral terms, giving institutions tools that more closely resemble traditional credit markets.
Composability also creates a problem institutions can’t ignore: shared liquidity pools expose position size, timing, and strategy to anyone watching the chain.
Fisher pointed to Zama’s integration with Morpho as a fix that doesn’t require institutions to wall off their own liquidity.
Starting June 23, depositors can put confidential USDC into a Steakhouse vault where deposit size, direction, and entry timing stay encrypted, while the capital still flows into the same shared Morpho vault as everyone else’s.
Zama’s documentation notes that privacy comes from batching deposits and reducing public signaling. Institutions can participate in pooled liquidity without broadcasting their positions, removing one of the biggest objections to using public chains at all.
How this could play out
The bear case is that another exploit on the scale of KelpDAO, a major curator failure, or an oracle breakdown, could push exchanges and fintechs to pull back from DeFi to protect their brands.
DeFi lending’s total value locked (TVL) could contract meaningfully if distributors decide that reputational risk outweighs yield. Bitcoin-backed credit products would probably survive, but with lower loan-to-value ratios, higher rates, and tighter controls than those offered by today’s Coinbase integration.
The bull case rests on the same forces already in motion accelerating, such as stablecoin clarity under the GENIUS Act, which requires permitted payment stablecoin issuers to meet Bank Secrecy Act obligations as financial institutions, giving compliance-minded protocols a clearer path to institutional distribution.
Confidential deposit infrastructure like Zama’s, fixed-rate products from Morpho V2, and deeper fintech integrations could push DeFi lending toward the $50 billion range without a single new retail user needing to learn what a vault curator does.
Fisher sees venture firms playing a role beyond capital, connecting DeFi protocols with front-end providers, presenting decentralized credit to millions of users who will never open a DeFi dashboard.
| Scenario | Trigger | DeFi lending TVL direction | What happens to users | Bitcoin credit impact |
|---|---|---|---|---|
| Bear case | Another major exploit, curator failure, oracle issue, or wrapped-collateral shock | Contracts meaningfully from current levels | Exchanges and fintechs reduce DeFi exposure to protect their brands | BTC-backed loans survive, but with lower LTVs, higher rates, and tighter controls |
| Base case | More curated vaults, cautious exchange integrations, gradual compliance buildout | Moves modestly higher | Users access DeFi credit through familiar apps without seeing the protocol layer | Bitcoin collateral becomes more common inside exchange lending products |
| Bull case | Stablecoin clarity, confidential deposits, fixed-rate lending, stronger fintech distribution | Pushes toward the ~$50B range | DeFi becomes embedded credit infrastructure for apps, cards, and exchanges | BTC becomes a more widely routed collateral asset across fintech rails |
The actual prize
Moody’s projects private credit assets under management could exceed $2 trillion in 2026 and approach $4 trillion by 2030. Morpho’s $7.1 billion in TVL is a rounding error against that figure, and that gap explains why distribution outweighs brand-building as a strategy.
Protocols chasing retail attention are competing for a market that barely registers compared to the credit infrastructure already running the global economy, and the contest playing out now is over who becomes the plumbing inside that larger system.
Fisher’s read is that the winners will be the ones embedded so deeply inside cards, fintech apps, and exchange products that users stop noticing they’re there.
DeFi spent its first decade convincing people to come on-chain, and its next decade may depend on ensuring they never have to know they did.