Curve Finance founder Michael Egorov is urging the decentralized finance sector to adopt shared, industry-level security standards following a new wave of exploits, including the market disruption tied to KelpDAO. His warning focuses on a recurring weakness in DeFi architecture: systems marketed as decentralized can still rely on centralized dependencies or single points of failure that create outsized risk when something goes wrong.
According to Egorov, the industry needs to move beyond a reactive model in which teams patch vulnerabilities only after losses occur. He argued that preventable problems should be addressed at the design stage, with critical dependencies distributed wherever possible. In situations where centralization cannot be fully removed, trust should be spread across multiple parties and supported by clearer operational best practices. His comments suggest that DeFi’s security challenge now extends well beyond smart contract code and includes the broader system design surrounding protocols.
A Push for Ecosystem Coordination
Egorov said the next step should involve coordinated action led by major ecosystem institutions, including the Ethereum Foundation and the Solana Foundation. The goal would be to establish common guidelines for building, auditing, and validating secure protocols, giving developers, auditors, and risk managers a shared framework to follow.
That message comes at a time when the resilience of DeFi infrastructure is under greater scrutiny. As the sector expands and attracts more institutional attention, tolerance for avoidable failures appears to be falling. While smart contract audits have become increasingly common, Egorov suggested that the configuration of external components and the consistency of overall system architecture remain uneven across the industry.
The debate intensified after the KelpDAO-related incident, which the source material says resulted in losses of more than $300 million. The event also triggered heavy outflows across DeFi, with total value locked dropping by $14.17 billion across dozens of protocols. Lending markets were affected, and Aave was cited as one of the platforms hit particularly hard as confidence weakened.
Are Failures a Warning Sign or a Normal Stage of Growth?
Not everyone in crypto sees recent exploits as evidence of structural decline. Haseeb Qureshi, managing partner at venture firm Dragonfly, argued that failures have long been part of DeFi’s development cycle. In his view, the sector has repeatedly absorbed major shocks before, including the collapse of Terra and earlier periods of market turbulence, and has continued to adapt over time.
Qureshi’s argument is that the most important question is not whether failures happen, but whether they become existential for the system as a whole. He drew a comparison with traditional finance, which also evolved through repeated banking crises and market disruptions. By that logic, losses in DeFi can be severe without necessarily threatening the entire ecosystem’s survival.
He also pointed to a trend toward stronger protocol safeguards. More DeFi platforms now use mechanisms such as overcollateralization and safety reserves to absorb stress events. These buffers can help isolate damage and reduce the chance that a single failure turns into wider contagion.
Security Expectations Are Rising
The tension highlighted by this debate is central to DeFi’s next stage of growth. On one side, developers are pushing for higher standards, better coordination, and stronger preventive design in order to reduce avoidable risk. On the other, investors and long-time participants often see periodic breakdowns as part of the natural process of experimentation, iteration, and refinement that has defined the sector from the beginning.
What appears to be changing is the market’s tolerance threshold. As more capital flows into decentralized markets, expectations around reliability, governance, and infrastructure quality are rising. Incidents that may once have been dismissed as growing pains are now being treated as evidence that DeFi needs more mature operational standards.
Egorov’s comments capture that shift. His core message is that decentralization alone is not enough if the underlying architecture still contains fragile bottlenecks. For DeFi to continue maturing, the industry may need to agree on a baseline set of security principles that apply not just to smart contracts, but to every critical dependency surrounding a protocol.
Whether those standards emerge through informal best practices, ecosystem-led coordination, or broader market pressure remains to be seen. But the KelpDAO fallout has made one point harder to ignore: as DeFi grows larger and more interconnected, the cost of avoidable design failures is increasing, and the call for shared security rules is likely to become louder.