DeFi insurance is cover against specific on-chain risks: smart contract exploits, oracle manipulation, stablecoin depegs, and bridge failures. Unlike traditional insurance, DeFi cover is purchased on-chain, paid in crypto, and claims are assessed by governance votes or automated conditions. The largest DeFi insurer by cover volume is Nexus Mutual, a mutual fund model where members stake NXM tokens to underwrite risk and participate in claims assessment. As of 2026, total DeFi insurance cover outstanding across all providers is roughly $500 million, a fraction of total DeFi TVL.
How DeFi insurance works
Nexus Mutual sells cover per protocol per time period. Buying $10,000 of Aave v3 cover for 90 days costs roughly 2.5% to 4% of the covered amount annually, depending on the risk tier. If an exploit on Aave v3 causes you to lose funds during the cover period, you submit a claim with transaction evidence. A claims assessment committee of NXM stakers votes on whether the loss qualifies. If approved, the payout is made in ETH or DAI from the mutual’s capital pool.
Parametric cover protocols (Ensuro, Sherlock) automate claims using oracle-verified conditions rather than human assessment. Sherlock’s audit contest model is different: protocols pay for security audits and ongoing insurance; if an exploit occurs in code Sherlock audited, Sherlock’s capital pool covers the loss automatically up to the insured amount. This aligns Sherlock’s incentive (their capital is at risk) with audit quality. InsurAce and Neptune Mutual offer parametric cover triggered by on-chain price conditions or verified exploit events.
What this means for traders
DeFi insurance costs 2% to 8% APY depending on the protocol’s risk rating and cover duration. For positions earning real yield of 5% to 15%, the insurance cost reduces net returns but adds a defined floor: a smart contract exploit becomes a recoverable event rather than total loss. The decision depends on position size, protocol maturity, and audit quality. A $500 position in a well-audited protocol is probably not worth insuring; a $100,000 position in a newer protocol with a single audit is a different calculation.
Insurance does not cover price risk, impermanent loss, or governance decisions. If you hold USDC in Aave and USDC depegs due to Circle insolvency, that is not a smart contract exploit and most cover products would not pay. Flash loan exploits that drain a protocol’s funds are covered; rug pulls (where the team intentionally withdraws funds) are covered by some products and excluded by others. Reading the cover wording specifically is essential before purchasing. For the risk categories insurance addresses, see DeFi liquidation, flash loans, and price oracles.
A concrete example
In February 2022, Wormhole bridge lost $320 million in an exploit. Nexus Mutual members who had purchased Wormhole cover submitted claims. The claims assessment process: claimants posted evidence (transaction records showing loss), assessors reviewed whether the exploit qualified under the cover wording, and the majority voted to pay. Approximately $7.3 million in claims were paid to cover holders. The total cover in force for Wormhole at the time of the exploit was small relative to the $320 million loss, illustrating the scale gap between available DeFi insurance capacity and the size of major exploits. Most of the $320 million in losses was entirely uninsured.
Frequently asked questions
Can DeFi insurance be denied?
Yes. Claims are voted on by NXM stakers whose own capital is at risk if claims are approved. They have an incentive to reject marginal claims. Nexus Mutual’s claims history shows approximately 75% of claims paid when submitted with clear evidence of a qualifying smart contract exploit, and significantly lower rates for ambiguous events like depegs that could be interpreted as price risk rather than protocol failure. Disputed claims can go to a second vote with a higher threshold.
What is the difference between mutual and parametric cover?
Mutual cover requires human assessment of each claim. This is flexible (assessors can interpret nuanced situations) but introduces subjectivity and delay. Parametric cover triggers automatically when a defined condition is met: if the ETH price reported by Chainlink diverges from the AMM price by more than 30% for more than 15 minutes, the cover pays. Parametric cover is faster and more predictable but can only cover conditions precisely definable by oracle data, missing more complex exploit scenarios that require human interpretation.
How much of DeFi TVL is insured?
As of early 2026, active DeFi cover across all protocols covers roughly $400 to $600 million, compared to total DeFi TVL of approximately $100 to $150 billion. Less than 0.5% of DeFi capital has any insurance. This is partly due to cost (2% to 8% APY insurance on a 5% yield position is expensive), partly due to friction (buying cover requires additional transactions), and partly due to the limited capacity of insurance providers relative to the scale of covered protocols.
