Risks and impermanent loss on a DEX
DeFi can pay you for providing liquidity and trading, but it never pays you for nothing. The biggest risk specific to a decentralized exchange isn't a hack — it's impermanent loss, a quiet erosion most newcomers don't see coming. This page explains it with real numbers, then covers the other risks worth respecting.
VVS is an exchange, so the risks are those of swapping and providing liquidity — not borrower liquidations or loan defaults, which belong to lending protocols VVS doesn't run. The dangers below are the genuine ones for an AMM user.
Impermanent loss, explained properly
When you provide liquidity, you deposit two tokens. If their prices move apart, arbitrage traders rebalance the pool — buying the token that rose and adding the one that fell — until the pool's price matches the wider market. The result: you end up holding more of the token that lost value and less of the one that gained. Compared with simply holding the two tokens in your wallet, your position is worth less. That shortfall is impermanent loss (also called divergence loss).
It's called "impermanent" because it only crystallizes if you withdraw while prices have diverged. If the two tokens drift back to their original ratio, the loss disappears. But there's no guarantee they will, so for planning purposes treat it as a real cost, not a temporary illusion.
A concrete example
You deposit into a CRO/USDC pool: 1,000 CRO at $0.10 plus 100 USDC — a $200 position. Now suppose CRO doubles to $0.20.
- If you'd just held the 1,000 CRO and 100 USDC: 1,000 × $0.20 + $100 = $300.
- In the pool, arbitrage rebalances your share so it's worth about $283 (the maths of the constant-product curve leaves you with roughly 707 CRO and ~141 USDC).
The gap — about $17, or ~5.7% — is impermanent loss at a 2× move. It isn't money "stolen"; you still made a gain because CRO rose. It's the gain you gave up versus holding. The pattern is fixed and worth memorizing:
| Price change | Impermanent loss vs. holding |
|---|---|
| 1.25× | ~0.6% |
| 1.5× | ~2.0% |
| 2× | ~5.7% |
| 3× | ~13.4% |
| 4× | ~20.0% |
| 5× | ~25.5% |
Two lessons fall out of this. First, the loss is symmetric — a token halving hurts the same as it doubling. Second, it's modest for small moves and bites hard for big ones, which is exactly why stable, correlated pairs carry so little of it and volatile pairs carry a lot. Trading fees and farm rewards are what you weigh against it; on a high-volume pool they can more than cover it, on a quiet one they may not.
The other risks, ranked by how often they bite
Slippage and MEV
On a trade, a price that moves before settlement can give you a worse fill, and bots can deliberately sandwich large or high-slippage swaps to skim value. Mitigation is in your hands: keep slippage tight, size trades to pool depth, and read the minimum received. The swap guide covers this in detail.
Smart-contract risk
Your funds sit in code. A bug or exploit in a contract — even an audited one — can lead to loss. VVS has been audited by SlowMist, which meaningfully lowers this risk, but no audit can prove a system is flawless. The honest framing: audited is safer than unaudited, not the same as safe.
Market risk
Tokens are volatile. The asset you farm or hold can simply fall in price, and a high farm APR means nothing if the reward token drops further. Reward yourself in something you'd be content to hold, and don't let a big APR distract you from the price chart.
Token and counterparty risk
Because an AMM is permissionless, anyone can create a pool for any token — including worthless or malicious ones with copied names and logos. A token can also have hidden mechanics (transfer taxes, mint functions, freeze controls). Verify every contract address against an official source before you trade or pool it.
Human error and phishing
The most common loss in DeFi isn't exotic — it's a user signing a malicious transaction, approving a draining contract, or pasting their seed phrase into a fake site. No legitimate service ever needs your seed phrase. Treat that rule as absolute; the security page has the full anti-phishing checklist.
Never share your wallet's seed phrase or private key, never enter it into a website, and never approve a transaction you don't understand. Almost every total-loss story starts with breaking one of those.
Putting it in perspective
None of this means avoid DeFi — it means use it deliberately. Match your pair choice to the impermanent loss you can stomach, keep position sizes sane, verify everything, and treat rewards as compensation for risk rather than free money. Read the liquidity provider guide to see how these risks shape sensible deposits, and the security page to harden yourself against the avoidable ones.