Thesis02Updated 10 Sep 20268 min read
Crypto is about to get boring. That's the point.
DeFi is the era that stuck. The next phase is not more decentralized or more exciting. It is institutional, regulated, and pulled forward by tokenization.
The 5-minute version
A note on how this was written. The thesis and the arguments are mine, dictated first and edited into essay form. I used AI (Claude) as a research assistant to verify figures, pull sources, and check dates. Every number below carries a date and a source at the end.
Crypto has reinvented itself every couple of years, and each reinvention has told us what the technology is actually for. I want to walk through those eras, argue that DeFi is the one that stuck, be honest about its biggest flaw, and then make a prediction: the next phase of crypto will not be more decentralized or more exciting. It will be more institutional, more regulated, and, if we do it right, boring in the best possible way. And the thing pulling institutions in is not a token or an app. It is tokenization itself.
The eras
The first craze was the ICO era. Every company wanted to launch a token, partly for the community, mostly for the extra equity and cash on hand. That blew up, and what followed split into two genres: NFTs and DeFi.
NFTs were the social boom of crypto. Trading goofy characters and watching prices inflate was fun, and it brought people in. But it was a culture, not a financial system.
DeFi was the serious one. It took the roles of the traditional banking world and opened them to anyone. You could be the lender or the borrower, the liquidity provider, or the one securing the network through staking. Yield came from on-chain mechanisms rather than bonds or bank deposits, enforced by the blockchain rather than an intermediary. In my wholehearted opinion this was the most transformational shift crypto has gone through, and it remains the foundation everything today is built on.
Then came memecoins, really an extension of NFTs: the same social energy as fungible tokens on launchpads like Pump.fun. The drop-off has been visible. Pump.fun's revenue fell about 80% from its January 2025 peak and memecoin market cap has shed over $100 billion from its high. Not as stark as NFTs, but the same pattern. Where did the attention go? Largely into perpetual futures.
DeFi's staying power, and its flaw
What separates DeFi from the fads is that usage survives the cycles. Total value locked swings with prices and is down sharply this year, from roughly $178 billion to the mid $70 billions by August 2026. But the activity underneath keeps setting records. Morpho's outstanding loans hit a record $5 billion on September 1, 2026, 95% of it in stablecoins, and its user count went from 67,000 to over 1.4 million in a year. Aave still carries over $11 billion in active loans. There is a loyal base that finds this genuinely useful, and they don't leave when prices drop.
My main critique is that it is still extremely risky. About $3.4 billion in crypto was stolen in 2025, and North Korean state-linked hackers took $2.02 billion of it. The recent incidents read like a rolling disaster log:
- Bybit, February 2025: $1.5 billion, the largest crypto theft ever. A centralized exchange, but it shows the attackers' scale.
- Cetus, May 2025: $223 million drained from Sui's largest DEX through a flawed overflow check.
- Balancer, November 2025: $128 million across multiple chains from a rounding bug in pool math that had been live and audited for years.
- Drift, April 1, 2026: about $285 million pulled from Solana's largest perp DEX in twelve minutes via a compromised admin key and oracle manipulation. Suspected North Korean involvement.
- KelpDAO and Aave, April 18, 2026: a misconfigured bridge let an attacker mint roughly $293 million of unbacked rsETH, post it as collateral on Aave, and borrow around $190 million in real assets. Aave faced an estimated $124 million to $230 million in bad debt.
The last two matter most. Drift and Aave were the blue chips of their categories. If the best-run protocols can lose nine figures in an afternoon, "trust the code" is not a pitch you can make to a pension fund. Security is not a feature of DeFi. It is the precondition for everything below.
Perpetuals: where the excitement went
The most exciting part of crypto right now is perpetual trading, a direct extension of DeFi. Hyperliquid has changed the trading world. As of mid-2026 it controls roughly 58% to 70% of on-chain perp volume and close to 6% of all perp volume including centralized exchanges. Open interest has reached $13 billion, in range of established centralized venues. It now lists perps on stocks and commodities, and tokenized real-world assets have at times made up over half its weekly volume. Serious institutional capital trades there, and its order book has become a pricing reference. Decentralized infrastructure is handling derivatives at institutional scale without the old trade-offs of slow execution and high cost.
Tokenization: the reason institutions can't stay out
Lending, staking, and perps are what crypto people talk about. Tokenization is what Wall Street talks about, and it is the bridge that makes the rest of this essay possible.
A tokenized asset is just a familiar thing, a Treasury bill, a share of Apple, a dollar in a bank account, represented as a token on a blockchain. The asset is the same. What changes is how it moves. And that change is the whole game, because the biggest costs in institutional finance are not in the assets. They are in the plumbing between them.
The numbers show how fast this is moving. Stablecoins, which are tokenized dollars, are at roughly $310 billion in circulation as of August 2026, about four times all of DeFi TVL, and the GENIUS Act signed in July 2025 gave them a federal framework. Tokenized Treasury products crossed $15 billion, up from about $1 billion two years ago. BlackRock's BUIDL fund is around $2.5 billion and backs over 90% of the reserves behind stablecoins like Ethena's USDtb and Jupiter's JupUSD: the world's largest asset manager is now a DeFi collateral provider. In March 2026 the SEC approved Nasdaq's plan to trade Russell 1000 stocks and major ETFs in tokenized form, cleared through DTC, with the same tickers, prices, and investor rights. Robinhood put about 200 U.S. stocks and ETFs on-chain in July. On-chain tokenized equity volume is up more than 800% this year. JPMorgan has processed over $300 billion of intraday repo on its Kinexys network using tokenized collateral, and Jamie Dimon said in April the bank needs to move faster. Wells Fargo committed to tokenized deposits, Citi created a tokenized class of private securities, and DTCC recruited over 50 firms for a production tokenization service.
Why are the most conservative institutions on earth doing this? Because the properties of a blockchain solve problems that have plagued their operations for decades:
- Settlement is atomic and final. A securities trade today takes a day or more to settle, with counterparty risk sitting in the gap. On-chain, the asset and the payment swap in one transaction. Either both sides complete or neither does.
- One shared ledger. Every counterparty sees the same record at the same moment. That removes the armies of people who reconcile books between institutions, and the errors reconciliation exists to catch.
- Collateral stops sitting idle. A tokenized Treasury can be posted as collateral, back a stablecoin, and earn yield at the same time without leaving custody. Capital that was trapped in silos becomes productive. This is what JPMorgan's $300 billion in repo is really about.
- Rules run as code. Collateral requirements, liquidation thresholds, and interest logic execute automatically and identically for every participant. Compliance becomes a property of the system rather than a quarterly audit.
- Markets never close. Global, 24/7 access is a real advantage for any institution with clients across time zones.
Here is the key point. Once an institution holds tokenized Treasuries and tokenized dollars, DeFi stops being a foreign, risky world and becomes the obvious place to put those assets to work. Coinbase's bitcoin-backed loans already route through Morpho with close to $2 billion of collateral. Société Générale's digital asset arm is on the same rails. Tokenization is the on-ramp, and DeFi is what you drive onto.
What comes next
So what will crypto be next? A fully decentralized world where everyone participates directly? Or something more institutionalized than we expected, with real safeguards, permissioned gardens where a bank runs its yield-bearing accounts on DeFi rails, and far more regulation?
I think it is the second, and I think that is right. We are moving away from DeFi as pure freedom and toward a world where the technology wins on its merits and institutions can no longer route around it. What gets us there is not more decentralization. It is regulation and security: privacy for institutions that cannot broadcast their positions, smart contracts secure enough to hold pension money, walled gardens permissioned only where the use case demands it and open everywhere else, and infrastructure built for institutions and retail alike.
Boring is the goal
Most people in crypto understand this, even if not everyone says it out loud. If you truly want this to go mainstream, and I do, the goal is not to be able to say "it's decentralized." The goal is ease of use, security, and safety, because those are what make mass adoption happen.
I am not arguing that everything should be centralized. Decentralization matters for all the reasons it always has: censorship resistance, open access, no single point of failure. But the maximalist framing has stopped being useful. We are heading into a world where crypto becomes boring. Not boring in the bad sense. Boring in the sense that nobody asks whether their brokerage runs on a blockchain, any more than they ask whether it runs on Postgres. They will only care that it works better than the alternative.
That is where we are headed. That is what is needed next.
Sources
- 2025 theft totals, Bybit, North Korea: Chainalysis, The Block
- Cetus and Balancer: Halborn, Trail of Bits
- Drift: Elliptic, TRM Labs
- KelpDAO and Aave: CoinDesk, Messari
- Hyperliquid: The Block, Crypto Briefing, Datawallet
- DeFi TVL and stablecoin supply: KuCoin, DefiLlama
- Tokenized Treasuries, BUIDL, GENIUS Act: The Block, Intellectia
- Nasdaq approval and tokenized stocks: CoinDesk, Dechert, Cryptonomist
- JPMorgan, Wells Fargo, Citi, DTCC: CoinDesk, J.P. Morgan, crypto.news
- Morpho and Coinbase loans: Morpho, Crypto Briefing, Cryptopolitan
- Memecoin decline: CoinGecko, Yahoo Finance
What would make me wrong
- 01
Wall Street ring-fences the technology. If Nasdaq, DTCC and JPMorgan keep tokenized assets on private, permissioned rails and never let them touch public DeFi, then tokenization is an on-ramp to nowhere and the 'DeFi is what you drive onto' argument fails.
- 02
Security never gets solved. If 2026 ends with another $3B-plus stolen and another blue-chip protocol losing nine figures, no amount of regulatory clarity moves pension money on-chain, and the institutional phase stalls at stablecoins.
- 03
Usage turns out to be price after all. If lending volume, perp open interest and stablecoin supply all follow TVL down through a full bear market, the 'loyal base that survives the cycles' claim was a bull-market artifact.