Skip to content

Ranked & Reviewed · 9 services

Best DeFi Protocols

Nine DeFi protocols that fit no narrower category, from on-chain cover to tokenized assets and options venues, ranked on fees, licence, audits, backing and governance. Checked November 2026.

At a glance

Best DeFi Protocols: rank, score and best use per service
#ServiceScoreBest for
1Nexus Mutual logoNexus Mutual8.2GPL code, an on-chain capital pool and a per-release audit log
2Reserve logoReserve8.0Open-source basket tokens with capped fees and 19 audits
3dHEDGE logodHEDGE7.8Open AGPL code and a full, linked audit archive
4Maple Finance logoMaple Finance7.0Dated, linked audits for every release since V2
5Index Coop logoIndex Coop6.8Per-product fees, Apache code and six named auditors
6Ondo Finance logoOndo Finance6.8Thirteen named auditors and daily attestations on tokenized assets
7Derive (formerly Lyra) logoDerive (formerly Lyra)5.2Options and perp fees published in full, with a named V3 audit
8Term Finance logoTerm Finance5.2Fixed-rate loans with published fees and a worked example
9Synthetix logoSynthetix3.4A published, volume-tiered perps fee schedule

Best DeFi Protocols, ranked by score

Rank 1Nexus Mutual logo
Top score

Nexus Mutual

GPL code, an on-chain capital pool and a per-release audit log

Nexus Mutual scores 8.2 in DeFi protocols. Its contracts are GPL-3.0, cover is backed by an on-chain Capital Pool, and every release is listed with its auditor and report. Governance gives a five-member Advisory Board the lead behind a 24-hour timelock. Desk research checked November 1, 2026.

What it does & fees
8.0
Licence & code openness
10.0
Audit disclosure
8.0
Backing & transparency
9.0
Governance & control
6.0

Pros

  • Licence 10: smart-contracts repository is GPL-3.0 and still updated (Oct 28, 2026)
  • Backing 9: NXM backed by the on-chain Capital Pool; all cover fees paid into it
  • Audits 8: 23 reviews listed with auditor, report and deploying proposal
  • Fees 8: pricing formula published with a worked example; membership fee 0.0020 ETH

Cons

  • Governance 6: Advisory Board proposals pass by default unless 15% of NXM supply rejects
  • Only a 24-hour timelock before upgrades can be executed
  • Recent audits rely on one firm, iosiro; two 2026 changes have no separate report
  • Cover is discretionary, not insurance, and membership requires KYC
Rank 2Reserve logo

Reserve

Open-source basket tokens with capped fees and 19 audits

Reserve scores 8.0 in DeFi protocols. Its DTF contracts are MIT and Blue Oak licensed, 19 dated audits are linked and fees are capped in the protocol, but rates and role holders vary per fund and some baskets hold freezable tokenized assets. Desk research checked November 6, 2026.

What it does & fees
8.0
Licence & code openness
10.0
Audit disclosure
9.0
Backing & transparency
7.0
Governance & control
6.0

Pros

  • Licence 10: Index Protocol is MIT, Yield Protocol is Blue Oak Model License 1.0.0
  • Audits 9: 19 dated, linked reports from eight firms, August 2022 to June 2025
  • Fee caps in the protocol: TVL fee up to 10% a year, mint fee up to 5%
  • Index DTF Admin actions pass a timelock, default 48 hours
  • Anyone can mint or redeem in kind, atomically, from the Folio contracts

Cons

  • Each DTF sets its own fees within the caps; there is no single schedule
  • Role holders vary per DTF; veto window and quorum values are not stated
  • Some baskets hold tokenized assets whose issuers can freeze or limit redemptions
  • No audit listed after June 2025; reports are not mapped to Folio 4.0.0 and 5.0.0
Rank 3dHEDGE logo

dHEDGE

Open AGPL code and a full, linked audit archive

dHEDGE, now Chamber, scores 7.8 in DeFi protocols. It earns full marks for AGPL-licensed contracts and 14 linked audit reports, and computes vault value on-chain. Its weakest point is control: a multisig executes votes and contract upgrades reach every vault at once, with no stated timelock. Desk research checked November 1, 2026.

What it does & fees
8.0
Licence & code openness
10.0
Audit disclosure
10.0
Backing & transparency
7.0
Governance & control
4.0

Pros

  • Licence 10: V2-Public contracts repository is AGPL-3.0
  • Audits 10: 14 dated, linked reports from seven firms, September 2020 to March 2026
  • Fee caps enforced on-chain: entry 2%, exit 2%, performance 50%, management 3% a year
  • Fee increases need a 14-day on-chain announcement; decreases apply immediately
  • Backing 7: NAV computed on-chain from vault holdings and oracles

Cons

  • Governance 4: a DAO multisig executes Snapshot votes; there is no on-chain governor
  • Implementation upgrades apply to every vault immediately; no timelock is stated
  • The terms name no legal entity, only the Chamber DAO
  • Each vault sets its own fees within the caps, so there is no single rate
Rank 4Maple Finance logo

Maple Finance

Dated, linked audits for every release since V2

Maple Finance scores 7.0 in DeFi protocols. It earns full marks for 20 dated, linked audit reports and publishes the Cash Management Pool fee to the basis point, but its core code is BUSL-1.1 and Syrup pool fee rates are not published. Desk research checked November 6, 2026.

What it does & fees
8.0
Licence & code openness
5.0
Audit disclosure
10.0
Backing & transparency
7.0
Governance & control
5.0

Pros

  • Audits 10: 20 dated, linked reports from eight firms, August 2022 to October 2026
  • Cash Management Pool fee fixed at 0.50% a year: 0.25% protocol, 0.25% borrower spread over SOFR
  • Governor actions pass through an on-chain timelock with a minimum 1-day delay
  • Aggregate loan value, collateral value and collateral ratio published via app and API

Cons

  • Licence 5: maple-core-v2 is Business Source License 1.1, not open source today
  • Fee page publishes no rates for Syrup and institutional pools; yields are shown net
  • A Security Admin can upgrade pool contracts with no timelock; signer thresholds unstated
  • No third-party attestation of collateral is described; data is aggregate, not per loan
Rank 5Index Coop logo

Index Coop

Per-product fees, Apache code and six named auditors

Index Coop scores 6.8 in DeFi protocols. It publishes fees for each product, licenses its contracts under Apache 2.0, and its security page now names six audit firms with reports. Governance holds it back: no executor or timelock is stated for votes, and Index Coop can withdraw hyETH assets at its discretion. Desk research checked November 1, 2026.

What it does & fees
8.0
Licence & code openness
8.0
Audit disclosure
8.0
Backing & transparency
7.0
Governance & control
3.0

Pros

  • Fees 8: per product, e.g. ETH2x 3.65% streaming + 0.10% issue/redeem; icETH 0.75%
  • Licence 8: Apache 2.0, granted in index-protocol only through file headers
  • Audits 8: six named firms, each mapped to the contracts it reviewed, with reports
  • Backing 7: token and module contracts listed with explorer links and Dune dashboards
  • Immunefi bug bounty of up to $200,000

Cons

  • Governance 3: who executes passed Snapshot votes, and any timelock, is not stated
  • Index Coop can withdraw hyETH assets from its Morpho vault at any time at its discretion
  • Audit entries are undated, so coverage of the deployed code is hard to judge
  • index-protocol has Apache headers but no LICENSE file; package.json says MIT
Rank 6Ondo Finance logo

Ondo Finance

Thirteen named auditors and daily attestations on tokenized assets

Ondo Finance scores 6.8 in DeFi protocols. It links audit reports from 13 firms, states backing per product and publishes daily third-party attestations for Ondo Stocks. Contract control and timelocks are not disclosed, and the newly published code is BUSL-1.1. Desk research checked November 1, 2026.

What it does & fees
8.0
Licence & code openness
5.0
Audit disclosure
10.0
Backing & transparency
8.0
Governance & control
3.0

Pros

  • Audits 10: reports linked from 13 named firms, nine for current products
  • Backing 8: Ondo Stocks held at US broker-dealers, with daily Ankura attestations
  • Fees 8: OUSG 0.15% management fee, waived to Jan 1, 2027; expenses capped at 0.15%
  • Licence 5: OUSG, USDY and Global Markets source published with build manifests

Cons

  • Governance 3: no statement of who can pause, mint or upgrade the token contracts
  • Code is BUSL-1.1 with no additional use grant and no stated change date
  • No USDY fee or USDY attestation is described in the docs
  • Ondo Stocks spread and extra-collateral size are not quantified
Rank 7Derive (formerly Lyra) logo

Derive (formerly Lyra)

Options and perp fees published in full, with a named V3 audit

Derive scores 5.2 in DeFi protocols. It publishes every trading fee and names a published ZKSecurity audit of its new V3 contracts on Ethereum. No public source or licence exists for the V3 core, and a 6-of-8 multisig can bypass the timelock. Desk research checked November 1, 2026.

What it does & fees
9.0
Licence & code openness
0.0
Audit disclosure
7.0
Backing & transparency
5.0
Governance & control
5.0

Pros

  • Fees 9: every order-book fee published, including perp taker $0.01 + 0.03% of notional
  • Options taker fee capped at 12.5% of premium, so cheap options are not overcharged
  • Audit 7: ZKSecurity named for V3 core contracts, with the report linked as a PDF
  • Ethereum contract addresses published, with an escape hatch if the operator goes offline

Cons

  • Licence 0: no public repository or licence file for the V3 core contracts
  • Governance 5: BVI subsidiary multisig owns contracts; 6-of-8 path can bypass the timelock
  • Timelock length and Security Module size and funding are not stated
  • Only one firm is named for the V3 core audit
Rank 8Term Finance logo

Term Finance

Fixed-rate loans with published fees and a worked example

Term Finance scores 5.2 in DeFi protocols. Its fee pages now give rates and a worked example, but its contracts carry a non-commercial licence, no audit is listed after 2024, and its vaults lost funds to a governance exploit in August 2026. Desk research checked November 6, 2026.

What it does & fees
8.0
Licence & code openness
2.0
Audit disclosure
6.0
Backing & transparency
6.0
Governance & control
4.0

Pros

  • Fees 8: servicing fee typically 0.30% to 0.50% a year, with a worked example
  • Liquidated damages stated: typically 8% of debt covered, 5.2% liquidator and 2.8% protocol
  • Five dated, linked core audits from Sigma Prime, Runtime Verification and Dedaub
  • Loans overcollateralized on-chain; example margins 150% initial, 125% maintenance

Cons

  • Licence 2: contracts are CC BY-NC-ND 4.0, no commercial use or derivatives
  • No audit listed for Term V2, Terminal 1 or the vaults; the latest core audit is November 2023
  • USDC and ETH vaults hit by a governance exploit on August 23, 2026; root cause unpublished
  • Veto window, quorum and signer details for upgrades are not stated
Rank 9Synthetix logo

Synthetix

A published, volume-tiered perps fee schedule

Synthetix scores 3.4 in DeFi protocols. Its Ethereum Mainnet perps exchange publishes a clear fee schedule, but no source code, audits, contract addresses or admin controls are disclosed for the live system, and the MIT v3 code it was credited for is archived. Desk research checked November 6, 2026.

What it does & fees
8.0
Licence & code openness
0.0
Audit disclosure
3.0
Backing & transparency
3.0
Governance & control
3.0

Pros

  • Fees 8: taker 0.05% and maker 0.02%, down to 0.017% and 0% by 14-day volume
  • Fees charged on notional value, with worked taker and maker examples
  • Liquidation clearance fees published per market, 0.5% to 2.0% of notional

Cons

  • Licence 0: no public repository or licence for the Ethereum Mainnet exchange contracts
  • Audits 3: no auditor or bug bounty named in the current documentation
  • Backing 3: exchange contract addresses and SLP vault size are not published
  • Governance 3: who can upgrade or pause the exchange contracts is not stated

Best DeFi protocols by use case

  • You want cover backed by assets you can inspect on-chain: Nexus Mutual has the category's highest backing mark, 9. Cover is backed by a Capital Pool contract holding ETH, USDC and cbBTC, and the code is GPL-3.0. Cover is discretionary rather than insurance, and membership requires KYC.
  • You want a basket token under open code with a long audit list: Reserve scores 10 for licence (MIT and Blue Oak) and 9 for audits: 19 dated, linked reports from eight firms. Fees are capped in the protocol, with a TVL fee of up to 10% a year and a mint fee of up to 5%, and each fund sets its own rate within those caps.
  • You want managed vaults whose value is computed on-chain: dHEDGE, now branded Chamber, scores 10 for its AGPL licence and 10 for 14 linked audit reports from seven firms. Its governance mark is 4, because a multisig executes votes and upgrades reach every vault at once with no stated timelock.
  • You lend to on-chain credit pools: Maple Finance scores 10 for 20 dated, linked audits mapped to releases. Its Cash Management Pool fee is published at 0.50% a year. The core code is BUSL-1.1 (licence 5), and Syrup withdrawals join a queue with no guaranteed maximum period.
  • You hold tokenized Treasuries or stocks: Ondo Finance scores 8 for backing. Ondo Stocks carry daily third-party attestations, with Ankura Trust Company named as security agent. It scores 3 on governance, because the docs do not say who can pause, mint or upgrade its token contracts.
  • You trade options or perpetuals: Derive has the category's highest fee mark, 9, and publishes every trading fee. It scores 0 on licence because there is no public source for its V3 core contracts.

Which protocols belong in this ranking?

This list holds DeFi protocols that do not fit one of the site's narrower categories: on-chain cover (Nexus Mutual), basket and index tokens (Reserve, Index Coop), managed vaults (dHEDGE), on-chain and fixed-rate credit (Maple Finance, Term Finance), tokenized real-world assets (Ondo Finance), and options and perpetuals venues (Derive, Synthetix). Because they do different things, the rubric asks the questions every one of them can answer: what it costs, what licence the code carries, who audited it, what backs it, and who can change it.

Criterion marks side by side

ProtocolFunction & feesLicenceAuditsBackingGovernanceOverall
Nexus Mutual8108968.2
Reserve8109768.0
dHEDGE81010747.8
Maple Finance8510757.0
Index Coop888736.8
Ondo Finance8510836.8
Derive907555.2
Term Finance826645.2
Synthetix803333.4

Governance is the weakest column. No protocol scores above 6, and only Nexus Mutual and Reserve document a timelock that no role can bypass.

How the ranking works

Each protocol gets a 0 to 10 mark on five criteria from the published rubric. On 6 November 2026 all nine were checked against one ladder per criterion, so the same evidence earns the same mark across the category.

  • What it does & fees: a plainly stated function and fees published as figures. Derive scores 9 because every order-book fee is published, including liquidation and RFQ terms. The other eight score 8: they state rates, caps or typical levels but leave some costs to the app or to each fund or pool, such as Synthetix's withdrawal fees or Nexus Mutual's per-listing cover prices.
  • Licence & code openness: read from the repository. An open-source licence file in the live repository scores 10. An open-source grant made only through file headers or package.json scores 8. BUSL before its change date scores 5. A licence that is not open source, such as non-commercial, no-derivatives terms, scores 2. No public source for the live contracts scores 0.
  • Audit disclosure: dated, linked reports from seven or more firms that cover the deployed version earn 10. The same depth with nothing for the current version scores 9. Four to six firms, or undated entries, score 8. A current core audited by one named firm scores 7, and several firms with none covering the current version score 6. No auditor named for the live system scores 3.
  • Backing & transparency: what stands behind any asset the protocol holds or lends, and whether it can be checked. Assets held in an inspectable on-chain contract score highest (Nexus Mutual, 9), followed by named, frequent third-party attestation (Ondo Finance, 8). Unpublished contract addresses or vault sizes score low.
  • Governance & control: who can change the protocol, and what delay stands in the way. Undisclosed control and timelocks score 3. A documented controller with no stated delay scores 4. A documented timelock that some role can bypass scores 5. A timelock no role can bypass, with some parameters unstated, scores 6. An 8 requires a timelock on all upgrades with its length and thresholds stated and no bypass, which no protocol here reaches.

The overall score is the plain, equal-weight average of the five marks, rounded to one decimal. For Nexus Mutual, (8 + 10 + 8 + 9 + 6) / 5 = 8.2. Ties are listed alphabetically: Index Coop above Ondo Finance at 6.8, and Derive above Term Finance at 5.2. The marks come from desk research of documentation, repositories, audit pages and terms, checked between 1 and 6 November 2026. Marks are re-checked, and each review logs every change with its reason and source.

What changed in this update

The previous edition, checked on 24 July 2026, ranked ten protocols. In this November 2026 update:

  • Reserve, up to 8.0 from 5.2: its security pages now list 19 dated reports where July found no named firm (audits 3 to 9). It also gained on fees, licence, backing and governance.
  • Nexus Mutual, up to 8.2 from 6.8: its audits page lists 23 reviews from four firms (audits 3 to 8). Governance thresholds and a 24-hour timelock are now stated (5 to 6).
  • Synthetix, down to 3.4 from 5.4: its MIT-licensed v3 repository has been archived since August 2025. No public source exists for the Ethereum Mainnet exchange it now runs, so licence fell from 10 to 0.
  • Ondo Finance, up to 6.8 from 6.0: it published its contracts under BUSL-1.1 in July 2026 (licence 2 to 5), and daily Ondo Stocks attestations lifted backing from 7 to 8.
  • Index Coop, up to 6.8 from 6.4: six named audit firms lifted audits from 3 to 8. On the single ladders, licence moved from 9 to 8 for Apache headers with no LICENSE file, and governance fell to 3.
  • Smaller moves: dHEDGE rose to 7.8 from 7.4, Maple Finance to 7.0 from 6.6 and Term Finance to 5.2 from 5.0. Derive held at 5.2: licence fell to 0, offset by gains on audits, backing and governance.

Goldfinch, which led the previous edition, was withdrawn because it has been in maintenance mode since GIP-87 in June 2026.

What the scores do not cover

  • Returns and market risk: yields, tracking accuracy, liquidity and execution quality are not measured. Leveraged products, including Index Coop's leverage tokens and Synthetix perps with up to 50x leverage, can lose far more than the underlying asset moves.
  • Credit and counterparty risk: Maple can impair or default a loan, and lenders carry that loss. Ondo depends on custodians and counterparties whose credit is not scored.
  • Incidents: Term Finance's USDC and ETH vaults were hit by a governance exploit on 23 August 2026, and the root cause is unpublished. The review reports it, but no criterion scores it.
  • Claims practice: how fairly or quickly Nexus Mutual decides claims is not measured.
  • Access: Ondo, Index Coop, dHEDGE, Derive and Maple's Syrup all restrict US persons, and some require KYC or qualified-purchaser status.

How to choose

  1. Name what you are relying on: a smart contract, a borrower, a custodian, a fund manager or a claims committee.
  2. Find the fee for the specific product, fund or pool, not only the protocol's cap.
  3. Read who can upgrade or pause the contracts, and whether a timelock gives you time to exit first.
  4. Check how and when you can get out: redemption queues, lockups, maturity dates or KYC-gated redemption.
  5. Confirm that the terms allow users in your country.
  6. Size positions for the possibility of loss. Our risk management guide covers position sizing, and reading a DeFi lending market covers what to check before lending.

How we score this category

This category holds protocols that do not fit a narrower list — options venues, insurance, on-chain credit, tokenised indexes and real-world-asset platforms. The questions are the same whatever the protocol does: what it costs to use, what licence the code carries, who audited it, and — for anything holding or lending value — what backs it and whether that backing is published or merely asserted.

Every service in this ranking is scored 0–10 against the same 5 criteria, each carrying equal weight (20% apiece). The overall score is their plain average, rounded to one decimal place, and each review prints the individual numbers and the arithmetic so you can reproduce the result yourself.

What each criterion covers

What it does & fees20% of the score
Whether the protocol explains its function plainly and publishes its fees as figures. A named function and a stated fee schedule score above a vague description and an undisclosed cost.
Licence & code openness20% of the score
The licence on the protocol's own contracts repository, read from the file. A recognised open-source licence scores highest; a delayed-open or non-commercial licence mid-table; a missing file lowest.
Audit disclosure20% of the score
Whether audit reports are published with the firms named and dated. A protocol holding or lending value carries stacked risk, so a long list of named, dated audits matters here.
Backing & transparency20% of the score
For anything holding or lending assets, what backs it and whether that backing is published on-chain or attested. A stated, verifiable backing scores far above an unbacked claim or silence.
Governance & control20% of the score
Who controls the protocol, whether a timelock stands between a decision and its effect, and whether that is documented rather than left implicit.

What does not affect a score

Only the criteria above count. No provider can buy a score, a rank, or an entry in this list. Where two services finish level, they are listed alphabetically rather than ordered silently.

The process across all categories, including how often we re-check, is set out in our ratings methodology.

Frequently asked questions

How were the protocols in this ranking selected?

The list covers DeFi protocols reviewed on Coin Currents Daily that fit no narrower category on the site and were operating when checked. All nine are scored on the same five criteria. Goldfinch was withdrawn because it has been in maintenance mode since June 2026.

How is each protocol's overall score calculated?

What it does and fees, licence, audit disclosure, backing and governance each get a 0 to 10 mark. The overall is the plain average of the five, rounded to one decimal, with equal weights. Ties are listed alphabetically.

Which risk does the score not capture?

Market, credit and counterparty risk. A protocol can disclose everything well and still lose money for users through a borrower default, a leveraged position or a failure in a protocol it depends on. The score measures disclosure, not outcomes.

Which protocol fits someone looking for on-chain cover?

Nexus Mutual is the cover protocol in this ranking, and it scores 9 for backing because its Capital Pool sits in an on-chain contract. Cover is discretionary and decided by a claims committee, so it is not an insurance contract. Membership requires a KYC check.

What fees or country restrictions should I check?

Check the rate for the specific fund or pool, because Reserve, dHEDGE and Maple let each product set fees within caps. Also read the terms: several protocols here exclude US persons, and Ondo's OUSG is open only to qualified purchasers.

How old are the measurements on this page?

The reviews were checked between 1 and 6 November 2026, and all marks were aligned to one ladder per criterion on 6 November. Each review shows its own check date and logs every score change with a source.

Rankings are editorial. Nothing here is financial advice. Editorial policy · How we score · How we're funded.