On-chain spot trading recovered on Monday, but protocol revenue did not rise alongside it. According to DefiLlama's daily data, decentralized-exchange (DEX) spot volume reached $7.850 billion on October 19 UTC, up 10.5% from the previous day but still below the preceding 30-day daily average of $9.139 billion. As trading demand recovered moderately, businesses that retain capital, including lending, stablecoin yield products and real-world asset (RWA) tokenization, brought the allocation of losses after an incident and the cost of compensation into sharper focus.

Major Blockchains Recover from Low Trading Levels as Total Protocol Revenue Slips 0.5% to $39.02 Million

October 19 DEX volume and fees rose, while protocol revenue slipped.
Original Chinese illustration · English guideOn-chain trading recovers while revenue still diverges. October 19 UTC: DEX volume $7.850 billion, up 10.5% from the previous day; fees $68.39 million, up 2.5%; protocol revenue $39.02 million, down 0.5%. The original labels express trading volume in hundreds of millions of dollars and fees and revenue in ten-thousands of dollars; these amounts have been converted to standard English units.
90-day DEX volume through October 19, ending at $7.850 billion.
Original Chinese illustration · English guideIndustry-wide DEX trading volume over 90 days. A single line spans July 22–October 19, with a September 5 middle tick. The vertical unit is hundreds of millions of US dollars; ticks 40, 80 and 120 correspond to $4 billion, $8 billion and $12 billion. The labeled endpoint is 78.50, or $7.850 billion. The series shows substantial day-to-day volatility, higher levels in the middle of the period, and a recovery from a late trough. The starting value is not numerically labeled.
90-day daily fees and protocol revenue, ending at $68.39 million and $39.02 million.
Original Chinese illustration · English guideOn-chain fees and revenue: 90-day trends from July 22 to October 19, with September 5 as the middle date tick. Both panels use millions of US dollars. The upper panel is fees, with ticks of 60 and 80 and an endpoint of $68.39 million. The lower panel is protocol revenue, with ticks of 45 and 60 and an endpoint of $39.02 million. Fees and revenue rose into the middle of the period before fluctuating; revenue shows a pronounced late spike before retreating. Exact initial observations are not printed.

By network, Ethereum DEX volume was $1.067 billion that day, up 42.3% from the previous day, while Solana volume rose 11.7% to $1.896 billion. Both remained below their respective 30-day daily averages, suggesting the increase primarily represented a recovery from recent lows. Layer-2 networks and other blockchains diverged: Base recorded $865 million and Arbitrum $180 million, increases of 14.0% and 23.1%, respectively, while BNB Chain fell 12.5% to $834 million. Mixed performance across major networks showed that trading activity had yet to expand broadly.

The volume rebound did not translate proportionately into protocol revenue. Projects included in DefiLlama's fee statistics collected a combined $68.39 million that day, up 2.5% from the previous day, while projects in its revenue statistics recorded approximately $39.02 million, down 0.5%. Under this methodology, fees cover the full costs users pay for services such as trading and lending; revenue records the retained portion attributable to protocols or other entities under each project's rules. Their divergence shows that greater trading volume can expand total fee collections, but realized protocol revenue remains constrained by fee structures, business mix and value-distribution mechanisms.

Beyond spot trading, lending and RWA businesses continue extending the operating scope of on-chain finance. RWA.xyz's listings as of October 17 show that on-chain assets include not only tokenized equities but also credit and actively managed products, such as Galaxy-related lending products and USDC active-strategy vaults registered on October 14. As product types multiply, capital enters different creditor relationships, strategy exposures and redemption arrangements, creating more differentiated underlying risks. In these businesses, stablecoins are merely the funding medium. Borrowers' ability to repay, the efficiency of collateral disposal and smart-contract security determine whether returns can be realized.

Competition among on-chain protocols is consequently extending from trading volume alone to the capacity to bear risk. Low transaction costs help attract activity, but retaining capital over the long term also requires clear rules for allocating losses. Research on on-chain asset recovery disclosed on October 19 and recently launched paid-protection products illustrate different aspects of this trend.

Less Than 1% of Funds Stolen in the First Eight Months Returned as Kraken and RWA Vaults Add Firelight Protection

Low recovery of stolen assets and the mechanism for Firelight's capped, fee-funded protection.
Original Chinese illustration · English guideRecovery is difficult, and protection is becoming a paid service. Blockaid study: 60 attacks in the first eight months, $1.18 billion stolen, and $9.8 million returned as of September 2. Firelight protection: returns fund protection fees, which are deducted from yield, and then provide capped compensation. Maximum coverage is $100,000 per address per coverage period, subject to the overall cap and available capital. Kraken does not guarantee compensation. Arrows show the flow from yield to fees to limited compensation.

Inefficient recovery after incidents highlights a key security problem for on-chain capital. Unchained reported on October 19 that Blockaid's study of 60 major on-chain attacks from January through August 2026 identified $1.18 billion in stolen funds. As of September 2, only $9.8 million had actually been returned to victims; a further $81.4 million had been frozen but not yet returned. A substantial gap remained between freezing funds and victims actually recovering their losses.

Response speed is the central recovery bottleneck. For the 59 incidents with timing records, Blockaid calculated a median of just 17 minutes before attackers began moving funds, with transfers occurring within one hour in approximately 68% of cases. The report also found that 99.1% of funds frozen or returned had been intercepted using control powers held by protocols, governance bodies or validators. Monitoring, authorization and execution mechanisms therefore need to be in place before an attack occurs. Attempting to coordinate participants only afterward can easily miss the response window.

Against this backdrop, advance risk protection is developing into a paid on-chain service. On October 15, Firelight announced protection for the Protected Strategies USDC vault in Kraken DeFi Earn. Independent strategy manager Sentora integrated the arrangement, and related reporting on October 19 provided further details of how returns are distributed. Firelight also protects Sentora's protected RWA vault, extending coverage across several types of on-chain yield strategies.

According to Kraken, protection costs are deducted directly from vault returns, and annualized yields displayed to depositors are net of those costs. Eligible losses are assessed up to a maximum of $100,000 per deposit address per coverage period, subject also to the vault's aggregate coverage cap and available capital. Firelight provides the protection; Kraken does not guarantee compensation, and market risks such as falling asset prices are outside the agreed coverage. Through this mechanism, the vault uses part of its strategy returns to purchase protection against a specified range of risks.

As the risk bearer, Firelight supports multiple covered vaults through a shared capital pool, using recurring premiums to compensate for potential claims. Once a covered event is confirmed, capital staked in the pool may be slashed. The model's durability depends on subsequent renewal rates, actual claims experience and the size of the pool. Protection fees alone do not yet establish that the business model is mature. Nevertheless, substantive integration through an exchange distribution channel and RWA vaults shows that specific products now exist in which on-chain users pay for risk management.

Overall, recovering trading activity can lift near-term market engagement, while risk-pricing mechanisms influence how willing investors are to leave capital in place and for how long. Assessing the operating quality of on-chain financial businesses therefore requires monitoring not only trading volume and protocol fees, but also protection renewals, actual claims execution and the capital pool's ability to recover after losses. These measures will determine whether new charges for risk protection can become sustainable protocol revenue.

Click Read Original for the full details.