United

DeFi

Circuit

Flying Tulip

Standard

Andre Cronje says much of decentralized finance is “no longer DeFi” in the strict sense, as builders debate whether circuit breakers and other emergency controls are now necessary to protect users from exploits.
The Flying Tulip founder told Cointelegraph in an interview that many protocols are no longer immutable public goods, but rather “teams running for-profit businesses” with upgradeable contracts, offchain infrastructure and operational controls.
That shift changes the security model, he said. While early DeFi protocols were mostly defined by immutable smart contracts, newer systems often depend on proxy upgrades, multisigs, infrastructure providers, admin processes and human response teams, according to Cronje.&nbsp;
“I think what we have today, Flying Tulip included, is no longer DeFi. It’s not decentralized finance. It’s not immutable code,” Cronje said. “It’s teams running for-profit businesses.”&nbsp;
The comments come as April’s DeFi exploits pushed security narratives beyond smart contract audits and into questions of operational risk. On Thursday, Flying Tulip <a href="https://cointelegraph.com/news/flying-tulip-withdrawal-circuit-breaker-defi-hacks" rel="noopener noreferrer nofollow">added a withdrawal circuit breaker</a> designed to delay or queue withdrawals during abnormal outflows. The move follows major incidents involving <a href="https://cointelegraph.com/news/drift-protocol-exploit-preparation-preliminary-findings" rel="noopener noreferrer nofollow">decentralized exchange Drift Protocol</a> and <a href="https://cointelegraph.com/news/drift-protocol-exploit-preparation-preliminary-findings" rel="noopener noreferrer nofollow">restaking platform Kelp</a>, with estimated losses of about $280 million and $293 million, respectively.&nbsp;
<img alt="Andre Cronje says DeFi is ‘no longer DeFi’ as builders debate circuit breakers" height="563" src="https://payload.lum-tri.org/api/media/file/pasted-image-21.jpeg?prefix=media%2Fcontent" width="1071">
Flying Tulip’s Andre Cronje (left) and Cointelegraph’s Ezra Reguerra (right). Source: Cointelegraph
<h2 id="defi-risks-move-beyond-smart-contracts">DeFi risks move beyond smart contracts</h2>
Cronje said the industry focuses on audits when many systems can be changed by developers or controlled through administrative processes.&nbsp;
“The focus over all of the industry is still very much so on the contract side and not sort of the more TradFi side,” Cronje told Cointelegraph, adding that many recent exploits have involved “traditional Web2 stuff” such as infrastructure access, compromises and social engineering.
He said protocols with upgradeable contracts need traditional checks and balances around who can upgrade code, who approves changes and whether there are proper timelocks and multisig controls.&nbsp;
Related: <a href="https://cointelegraph.com/news/ethereum-backers-commit-up-to-30000-eth-to-rseth-recovery-after-bridge-incident" rel="noopener noreferrer nofollow">Ethereum backers pledge up to 30,000 ETH to rsETH recovery after bridge incident</a>
Curve Finance and Yield Basis founder Michael Egorov shared the view that recent incidents show the risks are increasingly tied to centralization and offchain dependencies rather than only smart contract bugs.
“The vast majority of the most recent DeFi exploits happened not due to errors in code,” Egorov told Cointelegraph. “They happened because of centralization risks — single points of failure which live off-chain.”
Egorov said Aave, Kelp and LayerZero smart contracts were not hacked in the recent rsETH incident, arguing that the compromise came from offchain infrastructure. He said DeFi protocols can be exposed to “a whole tree of risks,” with the largest risks often tied to humans rather than code.&nbsp;
<h2 id="circuit-breakers-divide-defi-builders">Circuit breakers divide DeFi builders</h2>
Cronje said Flying Tulip’s circuit breaker is not designed to permanently block withdrawals, but to create a response window when outflows exceed normal parameters. “Our circuit breaker isn’t actually designed so that we can stop or prevent anything from happening,” he said. “It’s to give us time to react.”
Flying Tulip’s system gives the team about six hours, although Cronje said smaller or less geographically distributed teams may need 12 to 24 hours, or even longer. He said the tool makes sense for contracts that hold user funds, but should be viewed as one layer among audits, distributed multisigs, timelocks and other controls.
“Security is always a layered approach,” Cronje said. “It’s never a ‘this is the one thing’ that makes you invulnerable.”
Related: <a href="https://cointelegraph.com/news/arbitrum-dao-asked-to-unfreeze-30k-eth-tied-to-kelp-hacker-direct-them-to-defi-united" rel="noopener noreferrer nofollow">Aave asks Arbitrum to send 30K ETH from Kelp exploiter to ‘DeFi United’</a>
Egorov was more cautious. He said circuit breakers can make sense in theory, but only if they are implemented in a way that does not create a new privileged attack surface. “The circuit breakers are controlled by humans, which means they could become a potential vulnerability themselves,” Egorov told Cointelegraph.&nbsp;
He warned that if emergency controls allow signers to change contract code or block withdrawals, compromised signers could turn the safeguard into a drainer or a centralized freeze mechanism. In his view, the better long-term answer is to design systems that can keep running safely without manual intervention.&nbsp;
“The goal of DeFi design should be to minimize human-centric points of failure, not add to them,” Egorov said. “DeFi needs to be safe, and safety comes from decentralization.”&nbsp;
<h2 id="standard-chartered-says-kelp-episode-shows-defi-resilience">Standard Chartered says Kelp episode shows DeFi resilience&nbsp;</h2>
Standard Chartered framed the Kelp episode as a sign of DeFi’s growing pains rather than a fatal failure.&nbsp;
In a Wednesday research note seen by Cointelegraph, the bank said the April 18 theft exposed systemic risks after the impact spread to Aave, but said the more than $300 million <a href="https://cointelegraph.com/news/aave-linked-defi-united-outlines-plan-to-restore-rseth-backing-after-293m-exploit" rel="noopener noreferrer nofollow">raised by the DeFi United coalition</a> and structural changes such as Aave V4 and the Ethereum Economic Zone suggest the sector is developing stronger defenses.&nbsp;
<img alt="Andre Cronje says DeFi is ‘no longer DeFi’ as builders debate circuit breakers" height="629" src="https://payload.lum-tri.org/api/media/file/pasted-image-22.jpeg?prefix=media%2Fcontent" width="1104">
DeFi United site shows over $321 million raised or committed. Source: DeFi United
The bank said those upgrades could reduce reliance on bridges, which it described as a major attack vector in recent crypto hacks.
Magazine: <a href="https://cointelegraph-magazine.com/exploits-uncovered-by-ai-could-kill-defi-unless-projects-act-now/" rel="noopener noreferrer nofollow">AI-driven hacks could kill DeFi — unless projects act now</a>

Andre Cronje says DeFi is ‘no longer DeFi’ as builders debate circuit breakers

Table of Contents

Cointelegraph

Other articles published on Apr 29, 2026

Join our free newsletter for daily crypto updates!