On this page (8 sections)
Who should skip this?
Skip this page if you thought a cover protocol was FDIC, or you wanted a lending tutorial. Cover is discretionary, claims can fail, and it does not make the underlying protocol safe. Size as extra cost, not as a guarantee.
- You wanted bank deposit insurance
- You needed a how-to to supply on Aave
- You assumed a Nexus-style policy pays every hack
Why DeFi Insurance Exists
Traditional insurers do not cover smart contract exploits. The risk is new, technically complex, and difficult to price actuarially. Lloyd's of London and specialist firms offer some crypto custodian insurance (covering centralised exchange theft), but DeFi smart contract coverage from traditional providers is rare and prohibitively expensive for most users.
DeFi insurance protocols fill this gap with decentralised, on-chain coverage underwritten by capital providers who earn premiums, with claims assessed under the protocol's own rules rather than by a traditional insurer. The model mirrors mutual insurance: members pool capital to cover each other, with no insurance company extracting a profit margin.
Real payouts have occurred. Nexus Mutual's first payout was about $34K after the 2020 bZx exploit; by August 2026 it had paid more than $18.5M in claims, including about $2.4M for Euler Finance (2023), about $4.9M for FTX custody cover (2022) and about $5.1M for Rari Capital Fuse (2022). InsurAce paid approximately $11.7M to UST/LUNA holders after Terra's collapse (2022) — one of the largest DeFi insurance payouts in history. Sherlock paid $4.5M after the Euler Finance hack (2023).
Leading DeFi Insurance Platforms
Most of the other names that once led this market have closed or wound down their cover products. In September 2026 Nexus Mutual held about $115M of the roughly $130M that DeFiLlama tracks in its insurance category; the rows below Nexus are kept for reference, with their current status.
| Protocol | Coverage Types | Claims Process | Notable |
|---|---|---|---|
| Nexus Mutual | Smart contract exploits, stablecoin depegs, slashing, custodian hacks | Claims Committee of three named assessors (2-of-3 vote) | Oldest and largest; launched 2019; over $6B of assets protected since 2019 |
| InsurAce | Smart contract, stablecoin depeg, exchange insolvency | Advisory board + token vote | Defunct: insurace.io is a parked domain and its app no longer resolves (September 2026) |
| Sherlock | Smart contract exploits at protocol level | Auditor assessment + UMA arbitration (legacy) | V1/V2 cover formally deprecated on 10 September 2026; now offers 'Sherlock Shield' cover only for code Sherlock has audited |
| Neptune Mutual | Parametric (no claims submission needed) | Automatic on-chain trigger | Appears defunct: DeFiLlama TVL $0 and its website shows an application error (September 2026) |
| Unslashed Finance | Slashing, smart contract, exchange hacks | UMA oracle arbitration | Appears defunct: its domain no longer resolves (September 2026) |
How Nexus Mutual Works
Nexus Mutual is the oldest and largest DeFi insurance protocol. Members buy NXM tokens (representing membership) and can purchase coverage or stake capital to underwrite coverage on specific protocols.
Coverage types: Protocol Cover (smart contract exploits on specific DeFi protocols), Custodian Cover (centralised exchanges), Yield Token Cover (yield-bearing tokens affected by underlying protocol exploits), and ETH Staking Cover (validator slashing).
When a covered exploit occurs, a member submits a claim (with a 0.05 ETH claim deposit). Since November 2025, claims have been decided by Nexus Mutual's Claims Committee — three publicly named assessors, two of whom must approve within a 72-hour vote. Claim assessment is separate from staking: stakers underwrite the cover, approved claims pay out from the capital staked against that protocol, and stakers' NXM can be burned when claims are paid — creating incentives for careful risk assessment.
Nexus Mutual requires KYC and a small ETH joining fee. Residents of the jurisdictions on its restricted list (for example China, India, Japan and Russia) cannot join; the United States is not on that list. Check the current list at nexusmutual.io before applying.
What DeFi Insurance Covers and Doesn't
- Typically covered
- Smart contract code exploits resulting in direct fund loss; stablecoin depegs beyond a defined threshold (e.g., USDC falling below $0.90); validator slashing; custodian insolvency (for Custodian Cover products).
- Typically not covered
- Market price declines (falling ETH price is market risk, not insurable); user errors (wrong address, lost keys); rug pulls by founders; economic attacks that don't exploit a code bug.
- Grey areas
- Flash loan attacks that exploit protocol mechanics without a clear code bug; governance attacks; bridge exploits (covered by some protocols but not all — always read the specific policy wording).
Is DeFi Insurance Worth Buying?
Whether coverage is worth the premium depends on position size, protocol risk, and personal risk tolerance. For a $10,000 position in Aave — a multi-audited protocol with years of clean operation — paying 2% annually ($200/year) is arguably excessive. For a $100,000 position in a newer or more complex protocol, insurance is worth serious consideration.
Coverage is most valuable for: large positions in protocols without a long security track record; positions in bridge contracts (historically the most exploited category); and institutional participants who need to quantify and cap their DeFi risk.
Important caveats: DeFi insurance protocols themselves carry smart contract risk. Claims processes can take weeks to months and may result in partial payment. Always review the specific coverage terms before purchasing.
Sources
Primary documentation and data this guide relies on. Links checked .
- Claim Assessment — Nexus Mutual documentation. How Nexus Mutual claims are decided (Claims Committee)
- Membership — Nexus Mutual documentation. KYC requirement and restricted jurisdictions for buying cover
- Claims History — Nexus Mutual documentation. 'Real payouts have occurred' section
- Euler Finance Exploit | March 2023 — Nexus Mutual documentation. Euler 2023 payouts by Nexus Mutual and Sherlock
- Staking — Nexus Mutual documentation. Capital providers underwrite cover and risk losing stake on claims
- Sherlock V1 & V2 Deprecation Notice — Sherlock documentation. Status of Sherlock's legacy coverage protocol listed in the provider table
- Sherlock Shield — Sherlock documentation. Sherlock's current audit-linked coverage model
Frequently asked questions
How much does DeFi insurance cost?
Premiums vary by protocol risk and coverage type. For established protocols like Aave on Nexus Mutual, annual premiums are typically 1–2% of the covered amount. For newer or more complex protocols, premiums can reach 5–10%. Neptune Mutual's parametric products, which used simpler fixed pricing, no longer appear to be available.
Has DeFi insurance actually paid out?
Yes. Nexus Mutual's first payout was about $34K after the bZx exploit (2020), and by August 2026 it had paid more than $18.5M in claims, including about $2.4M for Euler Finance (2023). InsurAce paid approximately $11.7M to UST/LUNA holders after Terra's collapse (2022). Sherlock paid $4.5M after the Euler Finance hack (2023). These are real, documented payouts — though claims processes were contested and took time to resolve.
What is parametric DeFi insurance?
Parametric insurance pays out automatically when a predefined on-chain event occurs, without requiring a claims submission or governance vote. For example, Neptune Mutual's covers (no longer available) paid out if a stablecoin fell below a defined price threshold — near-instant and process-free. Parametric covers are faster but cover only the specific defined event, not all possible exploits.
Can you insure an entire DeFi portfolio?
Some protocols (such as InsurAce, now defunct) offered bundled portfolio coverage across multiple DeFi positions at a discount compared to individual covers. However, full portfolio insurance is expensive and multi-protocol claims are more likely to be contested. Most users insure their largest individual positions rather than entire portfolios.