DeFi Glossary

The simple annualized interest rate earned on a deposit or paid on a loan, before compounding. APR excludes fees and is calculated as periodic rate periods per year. It differs from APY in that APY accounts for intra-year compounding, making it larger when rewards are distributed more frequently than annually.

The effective annualized return on a deposit or strategy, including compounding. APY = (1 + r/n)^n 1 where r is the nominal rate and n is compounding frequency. DeFi protocols often compound rewards continuously or on each block, so APY can be significantly higher than the stated APR. Always check compounding frequency before comparing APYs across protocols.

A decentralized lending protocol where users supply assets to pooled lending markets and earn variable or stable borrow rates. Borrowers deposit collateral (over-collateralized) and receive loans up to a maximum LTV. Health factor = (collateral liquidation threshold) / borrowed value. Aave V3 introduced portaling (cross-chain liquidity), efficiency mode (collateral switching), and high-efficiency mode for isolated assets. GHO is Aave's native stablecoin.

The practice of buying an asset cheaply on one market and selling it dear on another simultaneously. In DeFi, arbitrageurs exploit price discrepancies between DEXs, CEXs, or across bridges. Their activity keeps DEX prices aligned with broader markets but also extracts value that could otherwise accrue to LPs. When arbitrage opportunities are large, MEV searchers compete via gas auctions.

A formal security review of a protocol's smart contract code. Audits are conducted by specialized firms (e.g., Trail of Bits, OpenZeppelin, Spearbit) and typically involve static analysis, fuzzing, invariant checking, and manual code review. An audit is not a guarantee of safety - novel attack vectors, economic exploits, and oracle failures often fall outside code-audit scope. Look for multiple audits from reputable firms and active bug bounty programs.

See APR entry above.

See APY entry above.

A cryptographic signature scheme used in Ethereum's Proof of Stake consensus layer (PoS). BLS signatures aggregate efficiently - thousands of validator signatures can be combined into a single signature, reducing the data size of attestations and block attestations. This aggregation is essential for Ethereum's scalability and is also used in EigenLayer's restaking slasher design.

A protocol that enables token transfers and arbitrary message passing between different blockchains. Bridges work in several modes: lock-and-mint (lock assets on source, mint canonical representation on destination), burn-and-mint (source burn, dest mint), and liquidity networks (user deposits liquidity on both sides). Wormhole, LayerZero, Axelar, and Hyperlane are multi-chain bridging protocols. Bridge risk includes canonicalization risk, liquidity risk, and bridge-hack risk - the largest DeFi losses have come from bridge exploits.

A MEV extraction technique where searchers pass a bundle (or series of bundles) to each other across sequential blocks, with each searcher taking a cut before passing the bundle onward. Also called a 'relay chain' or 'bundle waterfall.' Used when a single searcher cannot capture the full opportunity alone - e.g., a loan liquidation that requires cross-block execution. Bucket brigades complicate fairness and can result in censorship-like behavior if relays are colluding.

An exchange operated by a centralized company (e.g., Coinbase, Binance, Kraken) where orders are matched through a central order book and cleared by the exchange itself. CEXs hold user funds in custodial wallets, offer high liquidity and fast execution, but introduce counterparty risk (the exchange can freeze funds) and require KYC. DeFi aims to eliminate these trust assumptions by using non-custodial, algorithmic matching. Many CEXs now offer 'CEX-to-DeFi' on-ramps via bridges.

A MakerDAO governance proposal that increases the Collateralization Ratio (C-Ratio) for a specific vault type. When the governance community decides that a collateral type carries higher risk (e.g., more price volatility, lower liquidity), a CIP may raise the minimum collateralization requirement, forcing vault owners to add more collateral or face liquidation. CIPs are passed via MKR token governance.

A term associated with the governance token mechanism in Compound Finance's utility and governance design. CNI in MakerDAO context refers to the Compound-style interest rate model where borrowing rates are algorithmic and respond to utilization. MakerDAO adapted some of Compound's interest rate mechanics for its DAI Credit System, and later integrated DSR (DSR is separate). Note: CNI was also used in the old Arrakis Finance context as 'Community Named Index'. This entry covers the MakerDAO variant.

A DEX aggregator that uses a solver network to find the best execution path for trades. Unlike standard DEX aggregators that route through multiple DEXs, CoW Swap can match trades peer-to-peer when two users have complementary orders (CoW = Coincidence of Wants), resulting in zero slippage for those trades. Orders that cannot be matched CoW are placed on-chain via solvers competing in an auction. CoW Swap is notable for its intent-based interface - users sign a trade intent and solvers fill it.

An asset deposited by a borrower to secure a loan. If the borrower fails to maintain required collateralization ratios (or health factor), the collateral becomes subject to liquidation. In DeFi lending protocols (Aave, Compound, Morpho), collateral is locked in a smart contract. Over-collateralization is standard - borrowers must deposit more than they borrow to absorb price volatility. Newer protocols like Euler and Gearbox introduce under-collateralized and leveraged positions.

A decentralized lending protocol where interest rates are algorithmic and respond to utilization. Suppliers (depositors) receive cTokens representing their share of the lending pool; cTokens accrue interest in real time. Borrowers pay interest determined by a piecewise linear rate model - low utilization -> low rates, high utilization -> sharp rate increases to disincentivize borrowing. Compound Governance (COMP token) controls rate parameters, collateral factors, and market listings. Compound III (V3) introduced isolated markets and a gas-optimized architecture.

A Uniswap V3 feature where LPs specify a price range for their capital, concentrating liquidity within that range and earning more fees per tick. Unlike V2 where liquidity is spread uniformly across all prices (0 to , concentrated liquidity requires LPs to actively manage their positions as price moves. Positions are represented as NFTs. While concentrated liquidity increases capital efficiency (more fees on the same capital), it also amplifies impermanent loss and requires active position management.

A decentralized, over-collateralized stablecoin issued by MakerDAO. DAI is soft-pegged to the US Dollar and maintained through a system of Collateralized Debt Positions (CDPs). Users lock collateral (ETH, wBTC, stablecoins, RWA) into vaults and generate DAI debt against it. The Dai Savings Rate (DSR) allows DAI holders to earn savings by depositing DAI into the DSR contract. DAI is unique among major stablecoins in being governed by a DAO (MK R token holders) rather than a centralized company.

An organization governed by smart contracts and token holders rather than a centralized management team. DAO members vote on proposals (typically on-chain) to determine protocol changes, treasury allocations, parameter updates, and partnership decisions. DAOs replace corporate hierarchy with code-enforced rules. Uniswap DAO, MakerDAO, Compound Governance, and Aave Arc are examples of DeFi DAOs. Quorum requirements and voting power distribution (one-token-one-vote vs. conviction voting) are key design parameters.

An ecosystem of financial protocols built on public blockchains that operate without centralized intermediaries. DeFi applications use smart contracts to provide lending, borrowing, trading, derivatives, insurance, and yield generation in a non-custodial, permissionless, and transparent manner. The composability (or 'money legos') of DeFi protocols - where outputs of one contract become inputs to another - creates complex, interconnected financial systems with emergent properties and risks.

A non-custodial exchange where trades occur directly between users via smart contracts, typically using AMM or order-book mechanisms. DEXs eliminate the need for a trusted intermediary to hold funds. Uniswap, Curve, and Balancer are AMM-style DEXs; Hyperliquid and dYdX use on-chain order books. DEX volume rivals CEX volume in some markets. Key metrics: TVL (total value locked), 24h volume, and slippage at various trade sizes.

A MakerDAO feature that allows DAI holders to earn a savings rate by locking DAI in the DSR contract. The DSR is a variable rate set by MKR governance; it acts as the baseline risk-free rate in the DAI ecosystem. Deposited DAI can be withdrawn at any time without penalty. The DSR is funded by the stability fees collected from CDP holders - when utilization of DAI as collateral (D3M - DAI Direct Deposit Module) is active, borrowing fees subsidize the DSR. The DSR is distinct from variable borrow rates on Aave.

A price-discovery mechanism where an item (or token) starts at a high price and decreases over time until a buyer accepts the price. In DeFi, Dutch auctions are used for initial token offerings (e.g., Gitcoin Grants uses a Dutch auction for quadratic funding rounds), protocol fee auctions, and liquidations. The alternative to Dutch auctions is fixed-price or first-come-first-served sales. Dutch auctions prevent front-running by making early bidders pay a higher price.

A decentralized perpetuals exchange that migrated to its own app-chain (Cosmos SDK) using the dYdX Chain. Originally built as an Ethereum L2, dYdX V4 implements a full-order-book matching engine with off-chain order book and on-chain settlement. The exchange supports up to 20x leverage on perpetual contracts. DYDX token holders govern the protocol. The migration to a sovereign chain was controversial as it centralized the exchange around validator operators.

A design document providing information or describing changes to the Ethereum protocol. EIPs are the primary mechanism for proposing protocol upgrades. EIP-20 defines the ERC-20 token standard; EIP-4626 defines the tokenized vault standard; EIP-4844 (Proto-Danksharding) introduced blob-carrying transactions for L2 fee reduction. EIPs go through stages: Draft -> Accepted -> Final. Ethereum's consensus client teams implement accepted EIPs.

A decentralized naming system that maps human-readable names (e.g., vitalik.eth) to Ethereum addresses, content hashes, and other identifiers. ENS uses a hierarchical DNS-like structure with .eth as the TLD, managed by a DAO. Registration happens on-chain via a Vickrey auction. ENS names can be used as identities in DeFi (display names, domain resolution in wallets). ENS DAO governs the protocol and manages the ENS treasury.

The state machine that executes smart contract bytecode on Ethereum. Every Ethereum-compatible L1 and L2 (Arbitrum, Optimism, Base, zkSync, Polygon) implements the EVM so that contracts written for Ethereum can run without modification. Non-EVM chains (Solana, Cosmos, Aptos) have their own execution runtimes and cannot run EVM contracts natively - they require wrapping or porting. The EVM's 256-bit word size, gas metering, and opcodes define the execution environment DeFi operates in.

The fungible token standard on Ethereum (EIP-20). Defines a minimal interface: balanceOf, transfer, transferFrom, approve, allowance, totalSupply, and the events Transfer and Approval. Any contract implementing these functions is ERC-20 compliant and interoperable with wallets, DEXs, and other DeFi protocols. ERC-20 tokens include stablecoins (USDC, USDT), governance tokens (UNI, MKR), and yield tokens (cTokens, aTokens). The standard has been extended with ERC-20 Permit (EIP-2612) for gasless approvals.

The native cryptocurrency of the Ethereum blockchain. ETH is used to pay for transaction fees (gas) and, post-Merge, serves as the security bond for Ethereum's Proof of Stake consensus. Validators stake 32 ETH to participate in consensus and earn staking rewards. ETH also serves as the primary collateral in many DeFi protocols (Aave, MakerDAO, Compound accept WETH as collateral). ETH's value derives from its utility as gas, its monetary properties, and its role in DeFi.

A middleware protocol that extends Ethereum's security to external systems (called Actively Validated Services, or AVSs) via restaking. ETH stakers and LST holders (stETH, rETH, mETH) can opt into EigenLayer and delegate to operators who run AVS node software. Restakers earn additional yield but accept additional slashing conditions. EigenDA is the first AVS, providing data availability for L2s. EigenLayer's re-staking mechanism creates a shared security model and is central to Ethereum's cryptoeconomic security narrative.

A decentralized lending protocol that introduced uncollateralized and partially-collateralized lending via a risk tier system. Euler's tiers: Tier 0 (cross-collateralized, like Aave), Tier 1 (isolated collateral, can be borrowed against), Tier 2 (collateral-only, no borrowing). Euler also introduced a 'donate' mechanism for passive liquidity provision and was exploited in March 2023 for ~$197M via a sophisticated flash-loan attack exploiting its eToken exchange rate math.

A loan that must be borrowed and repaid within a single transaction (one block). No collateral is required because if the repayment fails, the entire transaction reverts - undoing the loan. Flash loans enable sophisticated strategies: arbitrage, collateral swaps, liquidations, and governance attacks - all without upfront capital. Aave V2 and dYdX are major flash-loan sources. Flash loans are a key tool in MEV strategies and have been used in some of DeFi's largest exploits.

A conceptual market mechanism where execution of specific protocol functions is competed for by third parties (keepers, solvers, searchers). Solvers bid in an auction for the right to execute a specific function (e.g., filling a user order, executing a liquidation, settling an auction). The winning solver captures the MEV and pays the protocol a fee. Function markets are central to CoW Swap's solver network and UniswapX'sDutch auction-style order filling. FM creates programmable, permissionless competition for any computable function.

In MakerDAO's governance context, the First Out File is a risk management framework that defines which vault types have first claim on liquidation revenues. In standard MakerDAO, all vault types share liquidation surplus proportionally. FOF proposals would create priority ordering - certain vault types get paid first from liquidation proceeds. This is a MakerDAO governance risk management tool and relates to how DAI's stability is maintained across different collateral qualities.

The practice of submitting a transaction with a higher gas price to execute before a pending victim transaction, to profit from the price movement caused by the victim's transaction. In DeFi, this typically occurs when a trader sees a large AMM trade about to be confirmed and sandwiches it with a buy (front-run) followed by a sell (back-run). Front-running is a form of illegal market manipulation in traditional finance but is pervasive in DeFi due to transaction-ordering control by block builders.

The fee paid to execute a transaction or smart contract on Ethereum (or any EVM chain). Gas measures computational work - each opcode has a base gas cost, and multiplies by the current network demand. Users set a gas price (gwei = 0.000000001 ETH) and gas limit. Validators prioritize transactions by highest gas price. Total fees = gas used gas price. L2s (Arbitrum, Optimism) use blobs (EIP-4844) to dramatically reduce transaction costs by compressing data and posting to Ethereum. zk rollups further reduce gas by only posting validity proofs.

A decentralized perpetuals exchange on Arbitrum and Avalanche. GMX uses a unique model where liquidity providers (LPs) act as the counterparty to traders' PnL - LPs earn 70% of trading fees and bear traders' losses, while traders get up to 50x leverage with zero funding payments. The price feed comes from Chainlink oracles. GMX's GLP token is the LP token, representing a basket of assets (ETH, BTC, USDC, etc.) used for leverage. GMX V2 introduced concentrated liquidity for LPs.

The system of rules, voting mechanisms, and treasury management that determines how a protocol evolves. DeFi governance typically uses token-weighted voting (more tokens = more voting power), where proposals that meet quorum thresholds are executed automatically. Governance attacks - acquiring voting power to push through malicious changes - are a known risk. Uniswap, Aave, Compound, and MakerDAO each have their own governance tokens and on-chain voting systems. Quadratic voting and conviction voting are emerging alternatives.

The LP token of the GMX protocol. GLP holders provide the liquidity pool that serves as the counterparty to GMX traders' positions. The GLP pool contains a weighted basket of assets (roughly 50% stablecoins, 25% ETH, 12.5% BTC, 12.5% other assets) - GLP holders bear the risk of trader losses. In return, they earn 70% of trading fees. When traders lose, the GLP pool profits; when traders win, the GLP pool loses. This structure means GLP holders have long exposure to crypto markets.

A cross-chain communication standard that allows arbitrary data (not just token transfers) to be sent between blockchains. GMP is used by bridges to pass messages between chains, enabling use cases beyond simple swaps: cross-chain oracle updates, governance voting on multiple chains, and unified liquidity. LayerZero, Wormhole, and Hyperlane implement GMP. GMP enables complex multi-chain DeFi strategies like cross-chain yield aggregation and unified collateral positions.

A generalized leverage protocol. Users can supply capital to accounts and borrowers can then use that capital with up to 10x leverage in a permissionless, composable way. Gearbox uses account abstraction (smart wallet per user) to isolate leverage positions and prevent cross-account contamination. The protocol separates creditors (LPs) and debtors (leveraged traders) cleanly. Credit accounts can interact with any DeFi protocol (DEXs, lending, perpetuals) while staying within Gearbox's risk engine.

A numeric ratio that determines whether a position can be liquidated. In Aave, Health Factor = (Sum of (collateral value liquidation threshold)) / (Total borrowed value). When HF < 1.0, the position becomes eligible for liquidation. Liquidation threshold varies by asset (e.g., ETH collateral typically has 0.825 threshold on Aave V3). A Health Factor of 1.5 means a 50% buffer before liquidation - but if collateral price drops 15%, HF drops to ~1.0 and liquidations begin. Borrowers monitor Health Factor to avoid sudden liquidation.

A strategy of holding an asset long-term rather than actively trading or deploying it into yield strategies. Originally coined from a typo of 'hold' in a Bitcoin forum, HODL implies 'don't sell.' In DeFi, HODLing has an opportunity cost - the same capital could be earning yield (e.g., supplying ETH to Aave, staking ETH with Lido, or providing liquidity). Whether HODLing beats yield strategies depends on asset price appreciation, impermanent loss, and the risk-adjusted net yield.

A metric used in some structured yield products (e.g., Pendle) to represent the intrinsic value of a yield token relative to the underlying asset. The HVF represents the present value of principal (the 'hold' component) in a yield tokenized position. For a PT (principal token), HVF 1.0 when maturity approaches. For YT (yield token), HVF 0 near inception and approaches 0 as yield accrues. Understanding HVF is central to evaluating whether PT/YT prices fairly represent the value of separated yield and principal streams.

A high-performance on-chain perpetuals exchange operating as a Cosmos-based L1 blockchain. Hyperliquid uses a custom BFT consensus (HyperBFT) that achieves sub-second finality and low fees. The exchange has a centralized order book (matching runs on validator nodes) but settles on-chain. The HLP vault is a keeper vault that provides user-facing liquidity; traders can deposit to HLP to earn. The exchange supports up to 50x leverage on perps. Hyperliquid's HYPE token is used for governance and fee discounts.

The loss in value experienced by an LP compared to simply holding the same two assets in a wallet. It occurs because AMM price moves cause the LP to hold more of the depreciated asset and less of the appreciated asset. IL is 'impermanent' because it only becomes a real loss if the LP withdraws; if prices return to the original ratio, the loss disappears. However in trending markets, IL is rarely recovered. A constant-product AMM with a 2x price move in one asset causes ~5.7% IL. Concentrated liquidity amplifies IL.

DeFi insurance protocols allow users to buy protection against smart contract failures, oracle failures, or protocol exploits. Nexus Mutual and Cover Protocol are the major options. Policyholders pay premiums (usually in cover tokens) and are compensated if a covered event occurs (as determined by claims assessment). Insurance is priced based on the risk of the covered protocol - blue-chip protocols have cheaper premiums than newer, unaudited protocols. Insurance does not cover impermanent loss or market risk.

A user-defined objective (e.g., 'swap X tokens for at least Y tokens, before deadline T') that solvers or searchers fulfill on behalf of the user. Unlike a traditional transaction where the user specifies exact on-chain actions, an intent-based interface lets the solver choose the optimal path (DEX routing, RFQ, CoW matching). The user signs an off-chain message expressing their intent, and the solver executes the trade. Intent-based systems reduce gas costs for users and create competition among solvers.

A measure of the expected volatility of an asset, derived from option prices in traditional finance. In DeFi, IV is often used in options protocols (Lyra, Dopex, Premia) to price options. High IV -> expensive options (more premium). IV in crypto is typically higher than in equities due to 24/7 markets, leverage availability, and lack of market makers. The volatility surface (IV vs. strike price) in DeFi options often exhibits skew - puts are typically more expensive than calls at the same delta.

A governance mechanism used in EigenLayer where AVS operators sign an Individual Validation Agreement committing to validate specific AVS tasks. IVAs define the slashing conditions, rewards, and duration of the validation service. The IVA is a direct bilateral agreement (between operator and AVS) that supplements the general EigenLayer slashing mechanism. Different AVSs can have different IVAs, allowing granular security provision.

A MEV extraction strategy where a searcher or arbitrageur provides liquidity to a specific AMM pool right before a large trade executes, then removes it immediately after. The searcher earns the trading fees from that single large trade, while avoiding the impermanent loss risk of being a permanent LP. JIT was popularized on Uniswap V2. It requires flash-loan-like capital (borrow -> LP -> trade -> remove -> repay) executed within a single block. JIT increases effective LP fees for traders but captures MEV that would otherwise go to regular LPs.

A Solana-based DEX aggregator and routing engine that finds the best swap execution across Solana DEXs. Jupiter aggregates liquidity from Raydium, Orca, Phoenix, and other Solana protocols. Jupiter is known for its DCA (dollar-cost averaging) product and perps interface (Jupiter Perps). The JUP token is used for governance and fee discounts. Jupiter's routing engine is considered one of the best in Solana DeFi, handling large trade sizes with minimal slippage.

An automated bot that performs certain protocol functions in exchange for a fee. Keepers monitor for conditions (liquidations, arbitrage opportunities, auction settlements) and trigger transactions when those conditions are met. Aave Keepers earn the liquidation bonus (~10% of the borrower's collateral). Keeper-as-a-service is a business model: bots run by service providers (e.g., Gelato, Keep3r Network) that protocols and users can hire. Keepers are essential infrastructure for liquidations and price stability.

Identity verification requirements imposed by regulators and some DeFi protocols. KYC collects identifying information (government ID, proof of address, facial verification) to comply with AML/CFT regulations. Some DeFi protocols (Aave Arc, Compound Treasury) implement KYC for institutional users. However most DeFi is pseudonymous and non-KYC by default. The debate in DeFi is between compliance (institutional capital access) and censorship resistance (no identity requirements).

A scaling solution that runs on top of an L1 blockchain (Ethereum) to increase throughput and reduce costs while inheriting Ethereum's security. L2s execute transactions off the main chain and post compressed data (or validity proofs) back to Ethereum. Rollups are the dominant L2 category: optimistic rollups (Arbitrum, Optimism, Base) post transaction data and require fraud proofs; ZK rollups (zkSync Era, Starknet, Linea) post validity proofs. EIP-4844 (blob transactions) reduced L2 fees by ~10-100x.

A core DeFi primitive. Supply assets to a pool -> earn interest. Borrow assets -> pay interest. Lending protocols (Aave, Compound, Morpho, Euler) match lenders and borrowers algorithmically without a bank. Interest rates are set by supply/demand in the pool. Over-collateralization is required (borrow more -> deposit more). Lending can be used for leverage (borrow stablecoin to buy more crypto), liquidity (unlock capital from held assets without selling), or yield (earn interest on holdings).

The process of selling a borrower's collateral when their Health Factor falls below 1.0. Liquidators pay off the debt and receive the collateral at a discount (liquidation bonus, typically 5-15%). Liquidations protect lenders from bad debt. On Aave V3, liquidations are capped at 50% of collateral per step. Some protocols use English auctions (MakerDAO) to find the best price; others use instant liquidation (Compound). Liquidators are typically MEV searchers using sophisticated bots.

Capital available for trading or lending. High liquidity means large trades execute with minimal price impact. In DeFi, liquidity is provided by LPs who deposit assets into AMM pools or lending markets. TVL (Total Value Locked) is a proxy for protocol liquidity. Liquidity can be fragmented across chains and protocols. Cross-chain bridges attempt to unify liquidity. Liquidity is earned through trading fees (AMM LPs) or interest (lending LPs). Impermanent loss affects AMM LP returns.

A smart contract holding two or more tokens that enables trading via an AMM algorithm. LPs deposit tokens and earn fees from trades. The pool's pricing rule (invariant) determines how trade size affects price. Constant product pools (x-y=k) have infinite price range but low capital efficiency. StableSwap pools (Curve) are optimized for similar-priced assets (stablecoins) and offer very low slippage. Concentrated liquidity pools (Uniswap V3) focus capital in specific price ranges for higher efficiency.

An entity that deposits tokens into a liquidity pool. In return, LPs receive LP tokens representing their share of the pool. They earn trading fees proportional to their share of pool liquidity. The return on LPing is: trading fees earned minus impermanent loss. Active LPs (concentrated liquidity, JIT) may also earn additional yield. LP tokens can be used as collateral in lending protocols (Aave accepts most major LP tokens) or staked in gauge systems (Curve's veCRV system).

A token issued when ETH is staked, representing the staked ETH and accumulated rewards. LSTs (stETH, rETH, mETH, swETH) enable liquid staking - stakers receive a tradable token that can be used in DeFi while the underlying ETH earns staking rewards. LSTs can be used as collateral in lending protocols, supplied to DEXs, or restaked in EigenLayer. LST APY varies by provider and network conditions (slashing events reduce effective APY). Lido is the largest LST issuer.

The governance token of the Lido protocol. LDO token holders vote on protocol upgrades, fee parameters, node operator admission, and treasury management. Lido uses a multi-DAO structure: Lido DAO governs the protocol and Lido on Ethereum (stETH), while each chain (Arbitrum, Optimism, etc.) has its own LDO instance for local governance. LDO does not confer claim on staked ETH or protocol revenue - it is purely a governance token.

The percentage of an asset's value that is considered as collateral for borrowing. On Aave, ETH has a liquidation threshold of 82.5% (V3). This means $100 of ETH only counts as $82.50 of collateral. The difference (haircut) accounts for price volatility and prevents immediate liquidations on small price moves. Lower liquidation thresholds = more conservative borrowing limits. Protocol governance sets thresholds per asset based on volatility analysis, liquidity, and oracle reliability.

The decentralized organization behind the DAI stablecoin. MakerDAO uses Collateralized Debt Positions (CDPs) - users lock collateral into a vault and generate DAI against it. A Stability Fee (interest) is paid on the DAI debt. If the vault's collateral ratio falls below the liquidation ratio, the collateral is auctioned off to cover the debt. MakerDAO has diversified into real-world asset (RWA) collateral (US Treasury bonds, etc.) and its MKR token absorbs stability fees and acts as the backstop in liquidation scenarios.

Collateral posted to open and maintain a leveraged position. Initial margin is the collateral needed to open a position; maintenance margin is the minimum collateral required to avoid liquidation. In DeFi perpetuals (GMX, dYdX, Hyperliquid), margin is deposited into a position contract and auto-liquidated if the position's loss exceeds maintenance margin. Cross-margin systems (using total account collateral to support all positions) are available on some protocols. Isolated margin limits losses to the margin posted for that specific position.

The maximum value a block producer can extract by ordering, including, or excluding transactions in a block. MEV exists because Ethereum's mempool is visible to block builders who can exploit the ordering - searching for arbitrage, liquidation, and sandwich opportunities before executing other users' transactions. Flashbots and PF-DAG (private fault-tolerant DAG) are relay infrastructure to distribute MEV fairly. Common MEV strategies: arbitrage, liquidation, sandwich, JIT, cross-exchange arbitrage. MEV is a tax on ordinary users.

The creation of new tokens via a smart contract. Minting can be permissionless (anyone can mint, like ERC-20 tokens with no supply cap) or permissioned (only the contract owner or governance can mint, like stablecoins with supply controls). In NFT contexts, minting is acquiring a freshly minted NFT. In lending, minting refers to generating a derivative token (cToken, aToken) representing deposited collateral. Understanding minting authority is critical - an unbounded minting function can create infinite supply.

A peer-to-peer (P2P) lending layer that sits on top of Aave and Compound pools. Morpho matches lenders and borrowers directly for better rates - borrowers get better rates than the Aave/Compound pool rate (often equal to pool supply rate), and lenders earn more than pool rates. If Morpho can't find a matching borrower/lender pair, it falls back to the underlying pool (Morpho-Compound = Compound pool, Morpho-Aave = Aave pool). Morpho-Blue introduced a new orderbook-based P2P matching engine for more granular rate matching. Morpho rewards are distributed via MORPHO token.

A unique digital asset stored on-chain, typically following the ERC-721 standard. NFTs represent ownership of digital art, collectibles, gaming items, and in DeFi, positions (Uniswap V3 LP positions are NFTs). The 'non-fungible' means each token is unique and not interchangeable. NFTfi is a sub-sector exploring NFT use cases: NFT lending (bendDAO, JPEG'd), perpetual financing, fractionalization, and royalty protocols. Uniswap V4 uses hook contracts that enable NFTs representing LP positions.

The intersection of NFTs and DeFi financial primitives. NFT lending protocols (bendDAO, Liquid Loans, JPEG'd) allow users to borrow against their NFTs as collateral. Floor perpetual protocols enable traders to go long/short on NFT floor prices without buying actual NFTs. Fractional.art and Fangible fractionally own high-value NFTs. The challenge in NFTfi is pricing illiquid, unique assets - oracle solutions for floor price feeds are actively being developed.

The value that can be extracted by manipulating or exploiting oracle price feeds. Oracles (Chainlink, Uniswap TWAP, Tellor) report external price data to DeFi protocols for pricing collateral and settling derivatives. Attackers can manipulate the oracle price briefly to exploit a protocol that reads that price. OEV can be positive (arbitrageurs keep oracle prices accurate) or negative (exploits cause protocol losses). OEV monetization is an emerging area - Chainlink's OCR (Off-Chain Reporting) reduces OEV by batching price updates.

The governance token of Optimism, the L2 rollup. OP token holders vote on governance proposals for the Optimism Collective, which manages the protocol's treasury (~$3B+) and roadmap. The Optimism Governance has a two-house system: the Token House (OP stakers) and the Citizens' House (NFT-gated), which together decide on retroPGF (retroactive public goods funding) and protocol upgrades. OP token is also used for sequencing fees.

A service that feeds external real-world data into smart contracts. Oracles solve the 'garbage in, garbage out' problem of DeFi - contracts need off-chain data (prices, weather, sports results) but blockchains can't fetch external data on their own. Chainlink uses decentralized oracle networks (DONs) with multiple node operators. Uniswap V3 TWAP is a decentralized oracle for AMM price feeds. Oracle manipulation is a major attack vector - most DeFi exploits involve oracle price manipulation. Solutions: TWAPs, moving averages, depth-weighted oracles, and multiple oracle sources.

An upgrade mechanism used in EigenLayer where AVS operator software can be updated without requiring operator re-registration or migration. In the context of EigenLayer restaking, OTA updates allow the AVS to evolve its validation logic without disrupting the existing set of restakers. This reduces friction for operators and allows faster AVS iteration. The term is also used in mobile software ecosystems to describe firmware updates delivered remotely.

A design pattern that separates the role of block proposing from block building to reduce MEV centralization. In Ethereum's current design, validators (proposers) both build blocks and extract MEV. PBS proposes to separate these roles: block builders compete to produce the most profitable block and sell it to proposers. This reduces the MEV advantage of sophisticated builders versus regular validators and makes MEV more democratized. Ethereum's endorsed builders (EIP-7555) is an implementation step toward PBS.

See EIP-4844. Proto-Danksharding introduced 'blob' transactions to Ethereum, which carry data for L2 rollups at a fraction of the cost of calldata. Blob data is kept for ~18 days (until the data is prunable) rather than permanently stored in Ethereum state, making it much cheaper for L2s to post data. EIP-4844 is a prerequisite for full Danksharding (which will eventually allow blobs to be even cheaper and more scalable). Arbitrum, Optimism, and Base all use EIP-4844 blobs.

A derivatives contract with no expiry date that allows traders to hold a position indefinitely, paying or receiving a funding rate to maintain the perpetual price near the underlying asset price. Perps on DeFi (GMX, dYdX, Hyperliquid, Gains Network) offer up to 50x leverage with on-chain settlement. Funding rates are typically paid every 8 hours: long traders pay short traders when perp > spot price (backwardation), or vice versa (contango). Perps are the largest product category in DeFi by volume.

The team behind GMX, a decentralized perpetuals exchange. PL built GMX on Arbitrum and later expanded to Avalanche. The GMX protocol is governed by the GLP token (LP token) and the GMX token (governance). PL's design principle: LPs act as the counterparty to all trader positions, removing the need for funding rate auctions. The GMX V2 introduced concentrated liquidity pools for LPs. PL also launched the alternative Perp (d/YdX, now separate), and the more recent GMX Blue.

A smart contract that holds deposited assets and enables permissionless lending/borrowing. In pool-based protocols (Aave, Compound), all lenders supply to a shared pool and earn the pool's variable interest rate; all borrowers pay the pool rate. Pools use utilization (U = borrowed / supplied) to set interest rates: when U is high, rates spike to attract more supply and discourage borrowing. Pools can be shared (same asset on multiple protocols) or isolated (single asset, single market).

Principal Token issued by Pendle. When you deposit an asset that has yield (e.g., stETH from Lido), Pendle splits it into PT (principal) and YT (yield token). PT represents the underlying principal, locked until maturity. YT represents the right to claim the yield (staking rewards, interest) during the period. PT trades at a discount to face value (its price = PV of principal). YT price reflects expected future yield. PT can be used as a low-risk fixed-rate instrument - you buy PT cheap and receive full principal at maturity.

The change in price caused by executing a trade. In AMMs, price impact is determined by the trade size relative to pool depth (liquidity). A large trade moves the AMM price along its invariant curve. Price impact = (execution price - mid price) / mid price, expressed as %. Thin pools (low liquidity) have high price impact even for small trades. DEXs display estimated price impact before trade confirmation. Minimizing price impact: use DEX aggregators (1inch, 0x), split orders, or use deep pools (stablecoin pairs on Curve).

A yield tokenization protocol that splits yield-bearing assets into PT (principal token) and YT (yield token). Users can deposit stETH (Lido staked ETH), wstETH, ampthETH, or other yield sources. Pendle V2 introduced a concentrated SY (Standardized Yield) system and GPT (generic principal token). Pendle's key use case: YT holders can speculate on yield direction, PT buyers lock in a fixed rate (by buying PT cheap). The AMM (Pendle AMM) provides liquidity for PT/YT trading, using a stable-swap invariant for PT pairs.

Assets deposited into a shared smart contract for permissionless lending/borrowing. The term is used in Aave (supplying assets to the Aave V3 Pool) and in staking (Lido's stETH pool). Pooled assets are represented by yield-bearing tokens (aTokens, cTokens) that accrue in real time as interest accrues. The key property of pooled assets is that any depositor can withdraw at any time (liquidity provided there is available liquidity), and any borrower can access funds without individual negotiation.

In Uniswap's V2 and V3 architecture, the Quoter contract estimates the output amount of a swap by executing a 'simulation' of a swap against the current pool state. The Quoter uses callbacks to read the pool state and returns an estimated output amount (but cannot actually execute the swap). In V3, QuoterV2 returns both the input amount and the gas estimate. The Quoter is read-only - it doesn't settle transactions. Newer architectures (UniswapX) use an off-chain quoter service that combines data from multiple sources.

A data structure that orders transactions or tasks. In MEV, transaction queues are submitted to the mempool (Ethereum's unconfirmed transaction pool) where block builders can see and order them. In Lido's withdrawal queue, users requesting ETH unstakes are processed in order (FIFO). In governance, time-lock queues delay execution of passed proposals to allow veto periods. The Queue is fundamental to ordered execution in DeFi - who controls the ordering controls MEV extraction.

A mechanism introduced by EigenLayer where ETH that is already staked for Ethereum consensus is 're-staked' to secure additional services (AVSs). Restakers opt into EigenLayer's slashing conditions to earn additional yield on top of their Ethereum staking rewards. Restaking extends Ethereum's security to application-specific chains and services without requiring those services to run their own validator set. Restaking is a form of shared security - ETH stakers act as a universal security backend.

A trading mechanism where a user requests a price from a market maker (RFQ) rather than trading against an AMM. The market maker responds with a quote; the user accepts or rejects. RFQ is used in CoW Swap, 0x Protocol, and institutional OTC trading. RFQ can offer better prices than AMM execution for large trades because market makers quote based on their actual inventory and risk management, not an algorithmic invariant. RFQ is a request for a firm price, not a firm order.

The possibility of financial loss in DeFi. Key risk categories: (1) Smart contract risk - bugs or exploits in the protocol code; (2) Oracle risk - price feeds can be manipulated; (3) Liquidity risk - insufficient liquidity causes high slippage or inability to exit; (4) Collateral risk - collateral can become under-collateralized due to price moves; (5) Governance risk - protocol changes can alter terms or seize assets; (6) Counterparty risk - CEX or bridge holds your funds; (7) IL risk - LP positions can lose value vs. HODLing.

An L2 scaling solution that executes transactions off Ethereum and posts transaction data (optimistic rollups) or validity proofs (ZK rollups) back to Ethereum mainnet. Rollups inherit Ethereum's security because the data posted is publicly available and verifiable. Optimistic rollups (Arbitrum, Optimism, Base) use fraud proofs - anyone can challenge an invalid block within a 7-day challenge window. ZK rollups (zkSync Era, Starknet, Linea, Polygon zkEVM) use cryptographic validity proofs that are instantly final. EIP-4844 (blob) dramatically reduced rollup data costs.

An interface that allows software (wallets, DApps) to communicate with a blockchain node. Ethereum RPC endpoints allow reading chain state (block number, gas price, token balances) and submitting transactions. Public RPCs (Infura, Alchemy, QuickNode) are used by most DeFi apps. RPC reliability is critical - if the RPC fails, the DApp fails. Flashbots RPC (https://rpc.flashbots.net) bundles transactions directly to miners/validers, bypassing the public mempool and protecting against front-running.

A decentralized ETH staking protocol where anyone can become a validator with only 16 ETH (minipools). The protocol operates a two-tier system: node operators (who put up 16 ETH and a bond) and rETH stakers (who supply the other 16 ETH). Rocket Pool is permissionless - anyone can spin up a minipool. rETH is the LP token representing staked ETH + rewards. Rocket Pool is one of the most decentralized ETH staking protocols, competing with Lido.

A two-sided MEV attack where a victim's pending AMM trade is front-run (buy) and back-run (sell) by a searcher. The searcher sandwiches the victim's trade: they buy just before the victim (pushing the price up), then sell to the victim at the higher price (back-run). The searcher profits by the spread between the front-run and back-run transactions. Sandwich attacks are the most common MEV strategy and are responsible for hundreds of millions in losses annually. Protection: use private RPCs, DEX aggregators, and RFQ/CoW orders.

A commitment made by a service provider (e.g., oracle network, data availability provider, bridge) to maintain certain performance standards. In DeFi, SLAs define uptime guarantees, data freshness windows, and penalties for non-compliance. EigenLayer's AVS slashing conditions implicitly define the SLA for restakers. Chainlink's SLA includes maximum deviation and heartbeat requirements. SLAs are becoming formalized in DeFi service contracts as the industry matures.

The difference between the expected price of a trade and the actual execution price. Slippage occurs because AMM prices move as the trade executes - larger trades cause more price movement. If slippage exceeds your tolerance, the trade reverts (AstroRouter and most DEX interfaces allow setting max slippage). Setting slippage too low causes trade failures in volatile markets; too high exposes you to sandwich attacks. DEX aggregators can reduce slippage by finding the best route.

An automated agent that finds optimal solutions for specific protocol tasks. In CoW Swap, solvers compete in an auction to find the best execution for user orders. In MakerDAO, solvers manage the DAI Direct Deposit Module (D3M), automatically moving liquidity between Aave and MakerDAO. In UniswapX, solvers fill user intents on-chain. Solvers are economic agents - they profit from the spread between their solution cost and the value they capture. Competition among solvers drives efficient execution.

The immediate (current) market price for an asset. Spot trading is the purchase or sale of an asset for immediate delivery and settlement. In DeFi, spot trading occurs on DEXs (AMMs, order books). Spot price is distinguished from futures price (which is the expected future price, often diverging due to funding rates). The 'spot' term is used in the context of 'spot market' vs. derivatives market.

The act of locking cryptocurrency to participate in network consensus (PoS) or earn yield (in DeFi protocols). In Ethereum PoS, validators stake 32 ETH and earn ~3-5% APY for attesting blocks and proposing. Slashing penalizes validators for downtime or malicious behavior. In DeFi, staking typically means locking tokens in a protocol to earn rewards (e.g., Lido staking, Curve gauge staking). Liquid staking protocols (Lido, Rocket Pool) issue a token representing the staked position.

A mining pool communication protocol used in Bitcoin mining, but also adapted for validator communication in some PoS contexts. In Ethereum's PBS (Proposer-Builder Separation) design, validators (proposers) use a stratum-like protocol to communicate with block builders - receiving block bids and selecting the most profitable block. The stratum protocol defines the message format between validators and builders in the post-PBS Ethereum world.

An exchange of one token for another on a DEX. Swaps execute against an AMM pool, with the trader receiving output tokens and the pool receiving input tokens. The price is determined by the pool's invariant (e.g., x-y=k). Slippage occurs if the trade is large relative to pool liquidity. DEX aggregators optimize swap routes across multiple pools for best execution. The Swap function is the core primitive of Uniswap, Curve, and most DEXs.

A cross-chain messaging protocol (formerly ThorChain for assets outside the Cosmos ecosystem). Synapse enables token transfers and arbitrary message passing between 30+ chains via a multi-chain liquidity network. Users deposit assets into Synapse pools and receive canonical assets on the destination chain. Synapse uses a Proof-of-Stake validator set to relay messages and process cross-chain swaps. The SYN token is used for protocol governance and staking.

The total value of assets deposited into a DeFi protocol, denominated in USD. TVL is the primary metric for protocol size and adoption. TVL = sum of all deposited collateral + supplied liquidity. High TVL indicates strong user trust and deep liquidity. TVL across DeFi is tracked by aggregators (DeFiLlama, DeBank). 'TVL ratio' (protocol TVL / token market cap) is a valuation metric used by analysts to assess whether a token is over- or under-valued relative to its economic activity.

An execution strategy that splits a large order into smaller orders over time, achieving an average price close to the market average. TWAP is used to minimize price impact of large trades. Uniswap V3 introduced TWAP oracles for on-chain price feeds - the TWAP over a time interval is calculated from the pair's historical tick data. TWAPs are resistant to short-term oracle manipulation but still vulnerable to longer-horizon attacks. TWAP oracles are used by options protocols and some lending protocols for collateral pricing.

An AMM design that executes large orders over time at a rate determined by an oracle, avoiding the price impact of a single large AMM trade. TWAMM splits a large order into infinite small sub-orders that trade over a time interval. The long-term nature of TWAMM execution makes it unsuitable for urgency-based MEV attacks. Uniswap V3's TWAP oracle is conceptually similar to TWAMM. TWAMM was described in an influential 2021 paper but not yet widely implemented as a production protocol.

A programmable digital asset on a blockchain. ERC-20 tokens are fungible (each unit is identical, like USDC). ERC-721 tokens are non-fungible (unique, like digital art). ERC-4626 is the tokenized vault standard for yield-bearing tokens (aTokens, cTokens). Tokens in DeFi serve many roles: governance (COMP, UNI), utility (LINK for oracle services), collateral (wETH, wBTC), and yield (stETH). Tokenomics - supply distribution, inflation schedule, utility, and governance - are critical to understanding a protocol.

An optimistic oracle protocol that enables the creation of synthetic assets and event-based derivatives. UMA uses a two-party dispute system: data requesters post a bond, reporters submit data, and disputers can challenge within a 2-hour window. If no dispute, the answer is accepted. If disputed, UMA token holders vote on the outcome. UMA's oracle design is intentionally slow (optimistic) to allow human verification, making it suitable for low-frequency, high-value data needs. It differs from Chainlink's fast aggregation approach.

The dominant decentralized exchange (DEX) on Ethereum and other EVM chains. Uniswap V2 introduced the constant product AMM (x-y=k) with factory/pair contracts. V3 introduced concentrated liquidity, allowing LPs to concentrate capital in specific price ranges for higher fee efficiency. V4 introduced hooks (custom logic attached to pool creation), enabling TWAMM, limit orders, and dynamic fees. Uniswap's governance token (UNI) is one of the most held tokens in DeFi. Uniswap Labs is the company behind the protocol.

A dollar-pegged stablecoin issued by Circle, a US-regulated fintech company. USDC is fully backed by cash, T-bills, and USDC reserves held in US regulated banks. Each USDC is 1:1 redeemable for USD. USDC is the dominant stablecoin for DeFi due to its transparency, regulatory compliance, and strong trust. Circle publishes monthly attestations of reserves. USDC is the primary trading pair on most DEXs and is accepted as collateral in Aave, Compound, and MakerDAO. USDC is an ERC-20 token on Ethereum.

A dollar-pegged stablecoin issued by Tether, the company behind the original 'stablecoin' concept. USDT exists on multiple blockchains (Ethereum, Tron, Solana, etc.). USDT's reserve composition has historically been less transparent than USDC, with historical attestations showing commercial paper and cash backing (now shifted to cash/T-bills post-2022). USDT is the most widely traded cryptocurrency by volume and is widely accepted in DeFi despite concerns about its reserve composition and centralization.

A node in a Proof of Stake blockchain that participates in consensus by attesting to blocks and (for selected validators) proposing blocks. Ethereum validators stake 32 ETH and earn rewards for correct behavior; they are penalized (slashed) for downtime or malicious behavior. In EigenLayer, validators can be restakers who opt into AVS validation and accept additional slashing conditions for extra yield. Validator economics: earnings = staking rewards + MEV (if block proposer) operational costs.

A smart contract that holds collateral and enables borrowing (in MakerDAO context). MakerDAO's CDP vaults lock collateral (ETH, wBTC, RWA) and generate DAI. Aave's collateral positions are managed in the Pool contract (not called vaults). Vaults have a liquidation ratio - if collateral falls below the ratio, the position is liquidated. The term also refers to Yearn Finance's yield-optimizing smart contracts (Yearn Vaults), which automatically move capital between yield strategies.

A price-discovery mechanism used in some perpetual protocols where the AMM is virtual - there is no actual liquidity pool backing it. Instead, the vAMM uses a constant product invariant with virtual reserves. Traders trade against the vAMM, and their PnL is settled against the pool's virtual liquidity. dYdX originally used a vAMM model before migrating to an order book. GMX uses real assets (not vAMM) - LPs are the actual counterparty. vAMM allows trading with no LP risk (all counterparty risk is trader vs. trader) but may have liquidity bootstrapping challenges.

An Aave V3 feature (also called 'borrow efficiency mode' or 'eMode') that allows users to borrow stablecoins at near-zero interest rates when they have collateral that is highly correlated with the borrowed stablecoin (e.g., USDC collateral -> USDC debt). In eMode, the LTV (loan-to-value) for correlated assets is significantly higher (e.g., 90-93%), and the interest rate is near the stablecoin borrow rate. eMode maximizes capital efficiency for traders who want to use their stablecoin collateral without converting to ETH.

Software or hardware that stores private keys and enables interaction with blockchains. DeFi wallets (MetaMask, Rabby, Frame, Ledger, Trezor) allow users to sign transactions, interact with DApps, and manage assets. Smart contract wallets (Argent, Safe) add programmable features: multisig, social recovery, daily limits. Wallets connect to DeFi via walletconnect, EIP-6963 (wallet provider discovery), or injected providers (window.ethereum). Your wallet is your identity in DeFi - it holds all your positions, tokens, and governance tokens.

A generic message-passing protocol that connects 30+ blockchains. Wormhole uses guardian validators to observe events on one chain and emit corresponding messages on others. Wormhole's Token Bridge allows users to transfer tokens between chains (e.g., ETH -> Solana via wrapped assets). Wormhole's xAssets are canonical representations of assets on destination chains. Wormhole was exploited for $320M in February 2022 due to a signing verification bug - the hack led to the recovery of funds via a governance proposal.

The return on capital deployed in DeFi. Yield can come from: (1) Trading fees (AMM LPs), (2) Interest (lending), (3) Staking rewards (PoS), (4) Governance token emissions (liquidity mining), (5) MEV rebates. 'Base yield' = real economic yield (fees + interest). 'Incentivized yield' = base yield + token emissions. High yield from token emissions is often unsustainable. APY vs. APR and compounding frequency matter when comparing yields. 'Yield strategies' combine multiple yield sources to maximize returns (e.g., ETH -> stETH -> supply to Aave -> borrow USDC -> LP on Curve).

An early fixed-rate yield protocol (now evolved into the Pendle ecosystem's predecessor concepts). The term 'YP' in the DeFi glossary context often refers to yield tokenization concepts - splitting an asset's yield from its principal. Pendle is the modern implementation of this concept. YP pioneered the idea that yield can be traded separately from principal, creating a fixed-rate market and a yield speculation market. Understanding YP's design helps explain how Pendle achieves the same outcomes more efficiently.

A cryptographic technique where one party (the prover) can prove to another (the verifier) that a statement is true without revealing any information beyond the statement's validity. In DeFi, ZK proofs enable: (1) ZK rollups (validity proofs posted on L1), (2) private transactions (zCloak, Railgun), (3) proof-of-reserves (Aztec). ZK proofs are computationally intensive but enable massive scalability - a single proof can verify thousands of transactions. zk-SNARK and zk-STARK are the two main proof systems used in DeFi.

An L2 scaling solution that batches thousands of transactions into a single cryptographic validity proof (ZK proof) posted on Ethereum. Unlike optimistic rollups (which assume transactions are valid unless proven otherwise), ZK rollups provide cryptographic certainty immediately. The proof verifies the integrity of the batch without requiring fraud proofs. zkSync Era, Starknet, Linea, and Polygon zkEVM are ZK rollups. ZK rollups are considered the long-term destination for L2 scaling due to their strong security properties.

A specific ZK proof system used in zkSync, Zcash, and other protocols. SNARKs produce small proofs (~200 bytes) that verify quickly. The trusted setup ceremony (for initial generation of proving keys) is a known security consideration - a compromised ceremony could allow counterfeiting. zkSync uses Groth16 and later PLONK SNARKs. SNARKs are the most widely deployed ZK system in production DeFi, though STARKs are emerging as a transparent (no trusted setup) alternative.

A ZK proof system that is transparent (no trusted setup) and scalable (proof verification time is poly-logarithmic in the statement size). STARKs are used by Starknet and StarkEx (dYdX, Immutable). Unlike SNARKs, STARKs rely on hash functions rather than elliptic curve pairings, making them quantum-resistant. The tradeoff: STARKs produce larger proofs (~10-100KB) than SNARKs (~200 bytes), which makes on-chain verification more expensive but still feasible.