Types of risk
Beyond phishing, DeFi carries smart contract bugs, oracle failures, and governance attacks. Audited code reduces but never eliminates this.
Diversify and size
Do not concentrate funds in one unaudited protocol. Size positions to what you can afford to lose, especially in newer projects.
Stay informed
Follow protocol security disclosures and be ready to exit if a dependency is compromised. Risk management is part of safety.