? DeFi Insurance

Why Insurance Matters in DeFi

DeFi protocols are public, audit-able smart contracts that hold billions of dollars of user funds. Unlike a bank, there is no FDIC insurance backstop, no customer support line to call, and no reverse transaction after a block confirmations - once funds are drained from a protocol via an exploit, they are almost always unrecoverable. This is not a hypothetical risk: DeFi has experienced over $12 billion in losses since 2021, across every major category of protocol - lending (Cream Finance, Compound), AMMs (Curve, Uniswap forks), bridges (Ronin, Wormhole, Poly Network), and yield aggregators (Yearn, Rari Capital).

The core structural risk that insurance addresses is smart contract failure risk - the possibility that a bug in the logic of a deployed protocol will allow an attacker to drain user funds. Smart contract risk is unique because it is simultaneously public (the code is on-chain for anyone to inspect), latent (bugs may not be discovered until triggered by a specific transaction), and catastrophic (the entire TVL of a protocol can be lost in a single transaction). Traditional financial risk management tools - diversification, hedging, insurance - are all applicable, but DeFi insurance has its own distinct mechanics.

The insurance coverage rate in DeFi remains extremely low - less than 1% of TVL is covered - which reflects both the cost of premiums relative to yield, and the complexity of claims processes. But for protocols and individuals with large DeFi positions, insurance is one of the few tools that can transfer the tail risk of smart contract failures.

Types of Coverage

Smart Contract Cover is the most purchased coverage type and the core product of Nexus Mutual. It covers losses resulting from bugs, logic errors, reentrancy vulnerabilities, and other failures in the deployed code of a DeFi protocol. The key word is "deployed code" - the insurance covers what the contract actually does, not what the marketing said it would do. Smart contract cover does not protect against rug pulls where the team marketed something different than what was deployed, or against market losses caused by normal price movements.

Custodian Cover addresses a different failure mode: centralized services that hold user funds off-chain. CEX hacks (Mt. Gox, Coincheck, FTX), bridge drains (Ronin, Wormhole), and yield aggregator insolvencies (Alchemix's misconfiguration, Swerve's admin key incident) are the primary events covered. The distinguishing feature of custodian cover is that the failure happens off-chain at a specific custodian - the cover is tied to a named entity, and the claim trigger is that entity's insolvency or theft event.

Depeg Cover is a parametric product that pays out when a stablecoin or derivative loses its peg beyond a defined threshold for a defined duration. This is a parametric product by nature - the trigger is automatic (on-chain price observation), and the payout does not require human assessment. Depeg risk is distinct from smart contract risk: UST's depeg in May 2022 was not a smart contract failure - it was a bank-run dynamics triggered by the collapse of the Anchor Protocol savings product - and insurance policies that exclude "economic design failures" would not pay out.

Oracle Cover covers failures in on-chain price feed systems. Oracle failures are a common exploit vector: if a price oracle can be manipulated cheaply, an attacker can trigger incorrect liquidations, borrow against inflated collateral, or drain liquidity pools. Oracle cover typically applies to the protocol's use of a specific oracle system and pays out when the oracle failure is demonstrated to have caused quantifiable losses.

How Insurance Works - Pooled Risk Mechanics

The pooled risk model pioneered by Nexus Mutual is the most capital-efficient approach to DeFi insurance. Rather than earmarking capital for each individual policy (like traditional insurance), the pooled model collects all premiums into a single cover pool that backs all active covers simultaneously. This works because the probability of all covered protocols being exploited simultaneously is extremely low - DeFi crashes tend to be idiosyncratic, not systemic. The same $100M in staked NXM can support $400M+ in total active cover across all protocols.

NXM token holders provide the solvency capital behind the cover pool by staking their tokens. In return, they earn a pro-rata share of all premiums paid into the pool - currently approximately 8-12% APR on staked NXM. This yield is the incentive for stakers to accept the risk that a large claim event could dilute their NXM holdings (when the protocol mints new NXM to restore solvency). The economics are similar to a mutual insurance company: members provide capital, earn a share of premiums, and bear risk proportional to their stake.

The alternative model - parametric insurance - does not use a pooled capital model. Instead, each parametric policy has a defined trigger event (e.g., "bridge contract emits Hack event" or "stablecoin price < $0.95 for > 24 hours") and a defined payout amount. When the trigger is met, the smart contract automatically sends the payout. No human claims assessment is needed, which makes parametric cover faster and cheaper, but it can only cover events that were explicitly anticipated when the policy was written.

Premium Pricing - How Risk Is Scored

DeFi insurance premiums are priced using a risk-scoring model that combines on-chain and off-chain factors into an annual percentage that is multiplied by the coverage amount. The key inputs are: audit history (number of auditors, auditor reputation, time since last audit), TVL history (larger, more stable pools are lower risk because they have been stress-tested at scale), code age (time since deployment with no incidents), governance decentralization (a protocol controlled by a 2-of-4 multisig is higher risk than one governed by a 7-of-9 timelock), and upgradeable proxy patterns (which introduce upgrade risk).

These factors are synthesized into an annual risk percentage that is then multiplied by the coverage amount. For a low-risk protocol like Aave V3 (battle-tested, large TVL, strong governance), the annual risk score is approximately 0.8%. For an experimental or complex protocol, scores can reach 8-15%. Duration discounts apply for 12-month policies, and volume discounts apply for coverage above $100,000.

Claims Process - From Incident to Payout

Nexus Mutual's claims process is deliberately slow and adversarial. The cover holder must file a claim within 45 days of the incident - not the discovery of the incident - with evidence including transaction hashes, on-chain data, and documentation of the loss. Two independent claim assessors then evaluate the evidence over a 7-day assessment period. If both assessors agree, the claim can be approved without a vote (for smaller claims). For larger or contested claims, the NXM governance vote determines the outcome, with voting weight proportional to staked NXM.

The slowness of the claims process is its most criticized feature. A cover holder who has lost funds must wait through the 45-day filing window, the 7-day assessment, and potentially weeks of governance discussion before receiving a payout. In fast-moving DeFi markets, this delay can mean that a recovered attacker has already laundered the funds through mixers before a claim is approved. The Nexus Mutual community has debated faster-track processes for clearly legitimate claims, but the adversarial structure is maintained to filter fraudulent filings.

Frequently asked questions

Why does DeFi need insurance?

DeFi protocols hold billions in user funds in publicly visible smart contracts. Since 2021, DeFi has lost over $12B to hacks, exploits, and rug pulls - most of which were attacks on smart contract logic, oracle manipulation, or bridge custodians. Traditional finance has FDIC insurance and SIPC protection; DeFi cover protocols provide an equivalent layer of risk transfer for on-chain assets.

What types of DeFi coverage exist?

There are four primary cover types: Smart Contract Cover protects against exploits stemming from bugs in deployed protocol code; Custodian Cover insures against theft or insolvency of centralized services like exchanges and bridges; Depeg Cover pays out when a stablecoin or derivative loses its peg; and Oracle Cover covers failures in on-chain price feed systems. Each type has different claim triggers and premium pricing.

How does pooled risk insurance work?

Pooled risk insurance (the Nexus Mutual model) collects premiums from all cover buyers into a single capital pool. NXM token holders stake their tokens as solvency capital behind that pool. When a claim is approved, it is paid from the shared pool - the same capital backs all active covers simultaneously. This is highly capital-efficient because the same NXM can support multiple overlapping covers. Premium income is distributed pro-rata to NXM stakers.

What is parametric insurance in DeFi?

Parametric insurance pays out automatically when a specific on-chain event is detected - for example, when a bridge contract emits a Hack event, or when a stablecoin's price drops below a threshold for more than a defined period. There is no human claims assessment: the trigger is defined in the smart contract and the payout is automatic. This is faster and cheaper but only covers explicitly specified events - novel exploit vectors are not covered.

What are the main limitations of DeFi insurance?

DeFi insurance has significant limitations: (1) Rug pulls and exit scams are almost always excluded - they are deemed fraud, not contract failures. (2) Impermanent loss is never covered - it's a market risk, not a bug. (3) Grace periods mean new coverage takes 14+ days before claims can be filed. (4) Claims definitions are complex and contentious - controversial claims can take months to resolve through governance. (5) Premium pricing is still somewhat opaque and non-standardized.

Which DeFi insurance protocol should I use?

For DeFi-native smart contract cover with the most robust claims process, Nexus Mutual is the standard choice - it is the most battle-tested, has paid out the most claims, and has the clearest definition framework. For simple parametric cover on bridges and custodians, NexusCover is faster and cheaper. For lower-cost portfolio cover across multiple protocols, InsurAce is competitive. For social-graph-based cover with community pricing, VouchForMe is experimental.