CeFi vs DeFi Crypto Loans: Who Holds Your Collateral?
The real difference between a centralized crypto lender and a DeFi protocol is not the interest rate. It is who controls your coins while the loan is open, and what protects you when something breaks.
Latest in this topic
Two ways to hold a borrower’s collateral
A centralized (CeFi) lender is a company. You send it crypto, it records a balance in your name and lends you money from its own book. What happens to your coins in the meantime depends on the contract: some lenders keep collateral with a separate custodian, others reuse it to earn yield or to fund other loans.
A decentralized (DeFi) lending protocol is a set of smart contracts. Your collateral sits in a contract you can inspect on a blockchain explorer, the rules for borrowing and liquidation are written in code, and no company can decide to freeze your withdrawals in particular. In exchange, nobody can help you if you make a mistake or if the code fails.
Side by side
| CeFi lender | DeFi protocol | |
|---|---|---|
| Who holds collateral | The company or its custodian | A smart contract |
| Identity checks | Usually required | Usually none at protocol level |
| Interest | Often fixed for a term | Mostly variable, set by supply and demand |
| Liquidation | Company rules, sometimes with margin calls | Automatic once a threshold is crossed |
| Typical failure | Insolvency, frozen withdrawals | Code bugs, oracle errors, fast crashes |
| Who can help | Support, courts, insolvency process | Usually no one |
| Transparency | What the company chooses to publish | Positions and reserves visible on-chain |
What 2022 taught borrowers
In 2022 several large centralized lenders, including Celsius, Voyager and BlockFi, halted withdrawals and filed for bankruptcy. Customers whose collateral sat on those platforms became creditors in long court cases instead of owners who could simply repay and leave. The lesson was not that CeFi is always unsafe. It was that the terms of service decide whether your collateral is still yours if the lender fails.
DeFi has its own record of losses, mostly from exploited contracts and manipulated price feeds. The large money markets kept running through the 2022 crash and liquidated positions automatically. That protected lenders, but it was painful for borrowers caught at a high LTV.
Four questions that decide which model fits you
Can you keep a wallet safe?
DeFi means self-custody. If losing a seed phrase or signing a malicious transaction is a real risk for you, that risk is bigger than most protocol risks.
Do you need a fixed rate or a fixed end date?
Fixed terms are more common with centralized lenders. DeFi rates can change several times a day.
How will you react to a fast price drop?
DeFi liquidations do not wait for business hours. A CeFi margin call may give you more time, or none, depending on the contract.
What does the platform do with your collateral?
For a CeFi lender, search the terms for “rehypothecation”, “custody” and “segregated”. For a DeFi protocol, look at independent audits, how long the contracts have been live and which oracle sets prices. Our guide to DeFi lending audits explains what an audit does and does not prove.
The hybrids in between
Some services mix the two models: a company provides the app and identity checks while loans settle through smart contracts, or collateral sits with a regulated custodian under a three-party agreement. Hybrids can remove some risks, but they add parties you have to trust. Before committing, map out who controls the collateral at every step, from deposit to repayment.
New to borrowing against crypto? Start with our crypto loans overview.
Short answers
Neither is safer in every case. CeFi adds counterparty risk; DeFi adds smart contract and oracle risk and removes any safety net. The better choice is the one whose risks you can actually check and manage.
It depends on the country and the company. Some hold licences, many operate under limited oversight. Check the legal entity behind the service and whether it is licensed where you live.
A fully permissionless protocol cannot single out your position, but some protocols have admin keys or governance votes that can pause markets. The documentation should say who can pause or upgrade the contracts.