Grayscale DeFi Fund Q2 rebalance concentrates into four names
New weights: Uniswap 34.16%, Ondo Finance 25.44%, Aave 19.97%, Ethena 12.19%. AAVE was added this quarter; Ondo takes a quarter of the book.
Passive institutional DeFi flow now runs through four tickers, two of which (ONDO, ENA) are RWA/stablecoin-adjacent rather than classic DeFi. Read that as the allocator view of where yield is real.
The lending stack that matters narrows to eight protocols
Screened on TVL, stablecoin supply APY and audit history, the surviving set is Aave V3, Morpho Blue, Sky Lending, Spark, Fluid, Compound V3, Euler V2 and Silo. Everything else failed at least one gate.
Audit history is now a screening criterion on par with yield — a direct consequence of the $840M+ lost to exploits this year. Yield without an audit trail is uninvestable capital.
Bridge exploits keep taking the top slot: AFX loses $24.15M on Arbitrum
AFX lost roughly $24.15M in USDC through a bridge exploit; BSquaredNetwork on BNB Chain saw $3.86M in B2 drained. Both sit inside a 2026 tally of 50+ incidents and $840M+ stolen, up ~70% YoY.
Bridges remain the highest-severity attack class in DeFi and the pattern has not changed all year: single-verifier or privileged-key designs, drained in minutes.