What Is DeFi and How Does It Work?

Decentralized finance, or DeFi, is an attempt to rebuild the core services of a bank — lending, borrowing, trading, earning — as open software that runs on a public blockchain instead of inside a company. There is no branch, no account manager, and no application form. There is code, a wallet, and a set of rules that anyone can read. That openness is the whole point, and it is also the reason DeFi demands more care than a traditional account. This explainer looks at how the pieces fit together at two focal lengths: the close-up mechanics of each service, and the wide shot of why they matter and where they can break.

The Close-Up: What DeFi Actually Is

At its narrowest, DeFi is a collection of programs called smart contracts — self-executing code deployed to a blockchain. A smart contract holds funds and follows fixed logic: if certain conditions are met, it releases or moves assets automatically. Nobody has to approve the transaction after the fact, because the approval is the code itself.

Three properties make this distinct from an app on a bank’s server. First, it is permissionless: anyone with a compatible wallet can interact with the contract, without asking a gatekeeper. Second, it is non-custodial: you typically keep control of your own assets in your own wallet rather than handing them to an institution. Third, it is transparent: the contract’s code and its transaction history are public, so anyone can inspect what happened and when.

The trade-off arrives immediately. Because you hold your own keys, you carry your own responsibility. There is no support line to reverse a mistaken transfer and no institution obliged to make you whole if something goes wrong. Understanding what a smart-contract blockchain can and cannot do is the foundation everything else rests on.

Lending and Borrowing Without a Bank

DeFi lending replaces the loan officer with a shared pool. Lenders deposit assets into a smart contract; borrowers draw from the same pool. An algorithm sets the interest rate based on how much of the pool is being used — the more that is borrowed, the higher the rate climbs to attract new deposits and reward existing ones.

Why over-collateralization matters

Because the protocol cannot check your credit history or chase you in court, it protects lenders with collateral. To borrow, you first lock up assets worth more than the loan itself. If the value of your collateral falls too close to the value of what you owe, the protocol can automatically sell part of it — a process called liquidation — to keep the pool solvent. This is why DeFi borrowing is usually over-collateralized: you deposit more than you take out. It sounds backward until you remember the system has no other way to enforce repayment.

Decentralized Exchanges (DEXs)

A decentralized exchange lets people swap one token for another without an intermediary holding their funds. Most DEXs do not use a traditional order book matching buyers to sellers. Instead they use an automated market maker (AMM): a smart contract holding a pool of two assets, where a mathematical formula sets the price based on the ratio between them. When you trade, you are trading against the pool, and the ratio shifts slightly with every swap.

The pools are filled by liquidity providers — users who deposit a pair of assets and, in return, earn a share of the trading fees. This is elegant, but it introduces a subtlety unique to AMMs called impermanent loss: when the relative prices of the two pooled assets diverge, a liquidity provider can end up with less value than if they had simply held the assets in a wallet. The loss is “impermanent” only in that it can shrink if prices return to their original ratio — and permanent if they do not. Anyone comparing the mechanics of on-chain swaps against centralized venues will find the difference stark when they look at live markets.

Yield: Where the Returns Come From

“Yield” is DeFi shorthand for the return earned by putting assets to work. Crucially, yield is never free money — it always has a source, and identifying that source is the single most useful habit a newcomer can build. Legitimate yield generally comes from one of a few places:

• Lending interest — paid by borrowers who draw from a pool you supplied.
• Trading fees — a cut of the fees paid by traders using a liquidity pool you funded.
• Protocol incentives — extra tokens a project hands out to attract users, sometimes called liquidity mining or “farming.”
• Staking rewards — payments for helping secure certain networks by locking up assets.

The first two are earnings from real economic activity. The third is a marketing budget, and it can stop at any time. If a headline yield looks far higher than anything in the traditional world, the wide-shot question is always the same: who is paying it, and why? When the answer is unclear, treat the number as a warning rather than a promise. Tools such as a DCA calculator can help frame contributions in plain terms rather than chasing a rate.

Composability: The “Money Lego” Idea

The feature that makes DeFi more than the sum of its parts is composability. Because every protocol is open software speaking a common language, one application can plug directly into another. The token you receive for lending on one platform can become collateral on a second, which can then be deposited into a third. Builders describe this as “money legos” — snapping simple pieces into complex structures.

The close-up benefit is speed: developers reuse existing building blocks instead of starting from scratch, and useful ideas spread quickly. The wide-shot cost is fragility. When protocols stack on top of one another, a failure in a foundational layer can ripple upward through everything built on it. Composability multiplies both innovation and interconnected risk in equal measure — a genuine strength that is also a genuine hazard.

The Risks, Read Honestly

DeFi’s openness removes some old risks and introduces new ones. None of these should be read as reasons to avoid learning about the space — only as the terrain to map before stepping onto it.

• Smart-contract risk. Code can contain bugs. A flaw in a contract holding funds can be exploited, and once assets move on-chain, transactions are typically irreversible.
• Custody and key risk. Holding your own keys means that losing them, or exposing them to a scam, can mean losing access permanently. Self-custody is a responsibility as much as a freedom.
• Market and liquidation risk. Collateral values move. A sharp drop can trigger liquidations, sometimes faster than a user can react.
• Oracle risk. Contracts often rely on external price feeds, called oracles, to know an asset’s value. If a feed is manipulated or fails, the contract may act on wrong information.
• Governance and admin risk. Some protocols retain privileged controls or “admin keys,” meaning the system is less decentralized in practice than it appears in theory.

A calm reader treats these not as deal-breakers but as a checklist. The most durable habit in DeFi is asking, before committing anything, which of these risks applies and whether you can live with it. For a fuller map of the wider ecosystem, our DeFi coverage follows how these building blocks evolve, and our methodology explains how roo2ya frames every explainer.

The Wide Shot: Why DeFi Matters

Step back and DeFi is less a set of products than a proposition: that financial services can be expressed as open, inspectable rules rather than closed institutional promises. That proposition brings real benefits — access without gatekeepers, transparency by default, and the ability for anyone to build. It also asks users to absorb responsibilities that banks normally handle behind the scenes.

Neither hype nor doom captures it well. DeFi is an ongoing experiment in rebuilding finance in the open, still maturing, still discovering its own failure modes. Understanding the close-up mechanics and the wide-shot trade-offs is what lets you look at any DeFi product and judge it clearly, on its own terms. This article is informational and not financial advice — the sensible next step is always to do your own research before using any protocol.