Andre Cronje has expressed concerns that most decentralized finance (DeFi) protocols no longer adhere to the strict definition of DeFi, resembling more closely team-operated commercial systems. According to Odaily, this has sparked industry debate over whether 'circuit breakers' should be introduced to mitigate attack risks.
In an interview, Cronje highlighted that early DeFi focused on immutable smart contracts, but many current protocols rely on upgradable contracts, multi-signature permissions, off-chain infrastructure, and manual processes. This shift has transformed them from 'immutable public goods' to 'operable profit-driven businesses.' He noted that recent security incidents, including attacks involving approximately $280 million and $293 million, have expanded industry risks from smart contract vulnerabilities to infrastructure, permission control, and social engineering attacks, akin to 'Web2-style risks.'
To manage these risks, Cronje's Flying Tulip has recently implemented a circuit breaker mechanism, delaying or queuing withdrawals during abnormal fund outflows to provide a six-hour emergency response window, aiming to prevent systemic runs and further losses.
However, this mechanism has sparked controversy. Michael Egorov argues that circuit breakers could introduce new centralized attack vectors if controlled by signatories or administrators, potentially becoming new security vulnerabilities or sources of freeze risks. He emphasized that DeFi design should minimize human intervention rather than increase manual control nodes. Industry analysis suggests this debate reflects DeFi's shift from the ideal model of 'code as law' to a practical framework of 'hybrid governance and operational control,' with security boundaries being redefined.