DeFi lending: how lenders earn and get their money out

DeFi lenders earn the interest borrowers pay into a shared pool, and the same utilisation that sets their rate also decides how quickly a withdrawal can be paid when most of the pool is on loan.

DeFi lending lets anyone supply crypto assets to a smart contract that lends them to borrowers, who post more collateral than they borrow. Lenders earn the interest borrowers pay, at a rate that rises as more of the pool is lent out. On 24 September 2026, USDC suppliers on Aave's Ethereum market earned 3.62% while 92.7% of the $2.4 billion supplied was on loan, according to DefiLlama.

That second number matters as much as the rate. A lender can only withdraw what borrowers haven't taken, so when utilisation reaches 100% withdrawals wait until borrowers repay or new lenders arrive. Whether that wait lasts minutes or days depends on how the market is built: a shared pool, an isolated market, or a curated vault that spreads deposits across several markets.

Common DeFi lending terms

How does DeFi lending work?

A lender deposits an asset such as USDC into a lending protocol and receives a receipt token. Borrowers post collateral, commonly ETH, BTC or a yield-bearing stablecoin, and borrow against it up to a maximum LTV. Interest accrues every block and is paid into the pool, which raises the value of every lender's receipt token.

If a borrower's collateral falls in value and the loan crosses the liquidation threshold, anyone can repay part of the loan and take the collateral at a discount. That keeps loans covered without a credit check or a margin call from a person. The system works as long as collateral can be sold faster than it falls, which is why the collateral a market accepts, and the oracle that prices it, decide most of a lender's risk.

Where the lender's interest comes from

Rates follow a curve set by utilisation. Aave's documentation describes a two-slope model: below an optimal utilisation point, borrow rates rise gently, and above it they rise much faster. On 24 September 2026, Aave's Ethereum USDC market had its optimal point at 94% utilisation, with the borrow rate climbing 4.4 percentage points across the first slope and another 10 points on the steep slope above it, according to Aave's API.

The supply rate is the borrow rate scaled down by utilisation, minus a slice the protocol keeps as a reserve. With 92.7% of Aave's USDC lent out, borrowers paid 4.34% and lenders received 3.62%. The steep slope exists to protect withdrawals: when a pool gets close to fully lent, rising rates push borrowers to repay and pull in new lenders.

Live stablecoin lending rates

Base supply rates from DefiLlama on 24 September 2026, excluding token incentives. Rates move with every loan and repayment.

Pooled markets, isolated markets and curated vaults

DeFi lending has settled into three designs, and each puts a different party in charge of which collateral a lender is exposed to.

Pooled markets are the simplest to use and the deepest, with Aave holding $19.2 billion in deposits net of borrowing on 24 September 2026 according to DefiLlama. Isolated markets let a lender avoid collateral they don't want, at the cost of having to judge each market. Curated vaults sit on top of isolated markets and hand that judgement to a curator, typically a risk firm or asset manager, who allocates across markets and rebalances as rates and risks change.

How do I get my money out of DeFi lending?

A lender withdraws by returning the receipt token, and the protocol pays out from whatever the pool hasn't lent. In the words of Aave's documentation, a withdrawal is "subject to available unborrowed liquidity". On 24 September 2026 that was $174.8 million in Aave's Ethereum USDC market, 7.3% of the $2.4 billion supplied, enough for normal days and small against a rush for the exit.

When utilisation reaches 100%, a withdrawal waits. The order of events is predictable:

1. The pool runs dry. Borrowers hold every unit, often because lenders are leaving at once or a popular strategy is borrowing heavily.
2. Rates jump. Utilisation moves onto the steep part of the curve, so borrowing gets expensive quickly.
3. Liquidity returns. Borrowers repay to escape the rate, liquidations close risky loans, and new lenders deposit for the higher yield.
4. Withdrawals clear. Lenders exit as cash comes back, first come, first served.

This happened across several isolated markets in November 2025, when Stream Finance's xUSD collapsed and lenders raced to leave markets that had accepted it or related collateral. An impact assessment posted to the Arbitrum governance forum on 7 November 2025 reported "very high utilization rates" on Euler with no bad debt at that time, while other markets were left with losses.

Withdrawal queues in vaults

Vaults handle exits in one of two ways. Some pay instantly from idle cash and pull the rest from their underlying markets in the same transaction, which works while those markets have liquidity. Others take a withdrawal request, unwind positions, and pay after a set lag, which suits strategies that can't be sold in one block. Morpho's Vault V2 adds a fallback for the first type: if a vault can't pay in cash, a depositor can use the permissionless forceDeallocate function to take a direct position in an underlying market instead, for a penalty of up to 2%, according to Morpho's documentation.

Upshift vaults use the request model. A single-asset vault keeps a buffer of about 3% to 5% of deposits for withdrawals and deploys the rest, and Upshift processes claimable redemptions daily once the vault's lag period has passed. Each vault shows its lag before deposit, and atomic redemption vaults settle exits in a single transaction for products, such as card programmes, that need money back at once.

Is DeFi lending risky?

Yes, and the risks show up in a short list of dated events. Most losses came from collateral that couldn't be sold fast enough, a bug, or a borrower whose collateral fetched far less than its price feed showed.

The Stream case shows where the design choice bites. Lenders in markets that never accepted xUSD weren't exposed to it directly, lenders in isolated markets that did list it took the loss, and vault depositors were exposed only if their curator had allocated there. A curator's collateral choices are the product a vault depositor is buying, which is why vaults publish their allocations onchain.

• Smart contract risk: a bug in the protocol or vault can lose funds, and audits reduce this risk without removing it.
• Collateral and oracle risk: a thinly traded or mispriced collateral can leave loans uncovered.
• Liquidity risk: at full utilisation, withdrawals wait for repayments or new deposits.
• Curator risk: in a vault, the curator's allocation decides the exposure.
• Rate risk: supply rates fall when borrowing demand does.

Always make sure to do your own research and be aware of the above and any other risks before depositing.

DeFi lending vs CeFi lending

The two can also be combined. CeFi lending vaults on Upshift lend to institutional borrowers through August Digital while the vault, its receipt token and the policy engine that restricts where funds can go stay onchain.

Which DeFi lending platform is best?

There's no single answer, because the right choice depends on which collateral a lender accepts and how fast they need to exit. By size, Aave is the largest lending protocol with $19.2 billion in net deposits on 24 September 2026, followed by Morpho at $10.9 billion and Compound at $1.6 billion, according to DefiLlama. For a lender comparing options, a few checks carry most of the weight:

• Collateral: which assets borrowers can post against the loan asset, and how liquid they are.
• Utilisation: how close the market runs to 100%, and how much could be withdrawn today.
• Track record: audits, time live, and how the market behaved in past stress events.
• Curation: for vaults, who the curator is, what they can allocate to, and how quickly they've cut exposure before.
• Exit terms: instant, queued, or subject to a lag.

Where curated lending vaults fit

Curated vaults suit lenders who want lending returns without choosing and watching each market. Upshift runs curated vaults across more than 30 chains, and its team curates vaults on Morpho under the August Digital name. In Upshift's own vaults, the curator can only move funds into protocols, tokens and functions the vault's policy engine allows, and the vault owner is a multisig. The contracts have been through 10 smart contract audits by 6 independent firms.

Frequently asked questions

Is DeFi lending safe?

It carries real risks, including smart contract bugs, bad debt from failed liquidations, and withdrawals that wait when a market is fully lent. Losses have been rare in large pooled markets and more frequent in markets that accepted thinly traded collateral.

How do DeFi lenders earn interest?

Borrowers pay interest into the pool, and lenders receive it minus a reserve kept by the protocol. The rate rises as more of the pool is lent out.

Can I withdraw from DeFi lending at any time?

Only up to the market's unborrowed liquidity. If utilisation hits 100%, a withdrawal waits until borrowers repay or new lenders deposit, which rising rates usually speed up.

What happens when utilisation hits 100%?

Interest rates jump onto the steep part of the curve, pushing borrowers to repay and attracting new supply. Withdrawals clear as that liquidity comes back.

Can I earn 5% on USDC through DeFi lending?

Not in the largest markets on 24 September 2026, where base USDC supply rates ranged from 3.24% to 4.92%. Higher rates usually mean incentives, riskier collateral, or a strategy beyond plain lending.

What is the difference between Aave and Morpho?

Aave runs shared pools where every lender funds loans against all listed collateral. Morpho runs isolated markets, each with one collateral type, and curated vaults that allocate across them.

Is DeFi lending the same as staking?

No. Lending earns interest from borrowers, while staking earns rewards for helping secure a blockchain network.

Keep reading

• USDC yield. The routes to a return on USDC and what each pays.
• Segregated vs co-mingled vault accounts. How a vault's structure decides who shares a loss.
• How onchain yield vaults are secured. Roles, permissions and controls inside a vault.