Deposits in crypto lending vaults have passed $10 billion, up from $4 billion at the start of 2025, according to figures from the Financial Times reported by CoinDesk on Oct. 19, and regulators are starting to ask how much risk sits inside them. Vaults are smart contracts on decentralized-finance platforms that pool deposits and lend them out under rules set by a "curator," which CoinDesk describes as effectively an investment manager who selects lending strategies, sets risk limits and collects fees. Typical returns run from 3% to 10%, with riskier strategies reaching 20% or more, and the main depositors are fintech companies, digital-asset treasury businesses and hedge funds.

How a vault works, in plain terms

A depositor puts stablecoins or other tokens into a vault. The curator decides what the vault lends against and to whom, within limits written into the contract, and the vault earns interest from borrowers. That sounds like a savings product, but it differs in a key way: there is typically no bank balance sheet or deposit insurance behind it, and the result depends on the curator's choices and on the code. CoinDesk's article names one specific example, Two Prime's bitcoin lending vault on Pareto, launched in September, which targets annual yields of 1.5% to 2% through institutional lending, accepts wrapped bitcoin with a 5 WBTC minimum deposit, and has roughly $10 million of Two Prime's capital committed to absorb initial losses.

The risks CoinDesk names

The article lists four. First, loans may be backed by illiquid tokens, crypto-backed stablecoins or tokenized private credit, so depositors can lose money if the collateral falls in value or is hard to sell. Second, automatic liquidations can intensify market declines, the same cascade dynamic we explain in What Is a Crypto Liquidation? Third, hacks, coding errors and flawed pricing mechanisms add vulnerabilities, a risk category illustrated by the security data in our Hacken Q3 report. Fourth, investors may focus on headline yields without understanding what sits underneath. The article describes these as general risks and doesn't cite a specific vault incident.

What regulators are doing

Per CoinDesk, the U.S. Securities and Exchange Commission has raised questions about vaults holding securities, and European regulators have proposed oversight of intermediaries that provide access to DeFi. The report doesn't detail any enforcement action or specific rule, so "scrutiny" here means questions and proposals, not decisions. PumpReport makes no claim about how any rule would apply to a particular vault.

Why this matters for how you read yields

A vault's advertised return is a price for the risks above, and a 20% figure reflects a very different risk profile than a 3% one. The same logic runs through our guide to perpetual futures markets and the collateral questions in Binance's tokenized-stock collateral launch: whenever something backs a position or a loan, the question is what happens to it when prices fall. CoinDesk names the Financial Times as the source of the deposit totals and doesn't cite another data provider, so treat the $10 billion figure as one outlet's tally. We have not independently reviewed the underlying data.

Fast answers

How much money is in crypto lending vaults?

Deposits exceed $10 billion, up from $4 billion at the start of 2025, according to Financial Times figures reported by CoinDesk on Oct. 19, 2026.

What is a crypto lending vault?

A vault is a smart contract on a DeFi platform that pools deposits and lends them out under rules set by a curator, described by CoinDesk as effectively an investment manager who selects lending strategies, sets risk limits and collects fees.

What risks do crypto lending vaults carry?

CoinDesk names four: loans backed by illiquid tokens, crypto-backed stablecoins or tokenized private credit; automatic liquidations that can intensify declines; hacks, coding errors and flawed pricing mechanisms; and investors focusing on headline yields without understanding the exposure.

Are regulators looking at crypto vaults?

CoinDesk reports the SEC has raised questions about vaults holding securities and European regulators have proposed oversight of intermediaries providing access to DeFi. It describes no specific enforcement action.

Not financial advice. This article summarizes a news report as of the date shown. DeFi vaults carry risks including loss of principal, smart-contract failure and illiquidity, and advertised yields are not guaranteed. Nothing here is a recommendation to deposit in, use or avoid any vault, protocol or asset, and nothing here is legal advice on any regulatory question. Consult a qualified financial or legal advisor before making decisions.
Go Deeper

Sources: CoinDesk (James Van Straten, Oct. 19, 2026), citing Financial Times deposit figures. Growth multiple is PumpReport's arithmetic.