DeFi Insurance Explained: Nexus Mutual, Costs and Exclusions

DeFi insurance is cover that pays out if a specific on-chain risk, usually a smart contract hack, causes you a loss. Most of it is not insurance in the legal sense: it is sold by mutuals or protocols, priced by stakers who put their own capital at risk, and paid out after a claims vote or an automatic trigger rather than by a regulated insurer.

The market is small. Nexus Mutual, the largest provider, held about $98.7 million on DefiLlama on 17 October 2026, and few other covers still operate at scale. This guide explains how DeFi cover works, what it costs, what it excludes, and what to rely on when cover is not available.

How DeFi insurance works

Every DeFi cover product has the same three parts.

• Buyers pay a premium, usually quoted as a yearly percentage of the amount covered, for protection on a named protocol or risk for a set period.
• Underwriters deposit capital into a pool and earn those premiums. If a covered event happens, their capital pays the claims, so they lose money.
• A claims process decides whether an event qualifies and how much each buyer receives.

The model works best for risks that are rare, sudden and visible on-chain, such as an exploit that drains a lending market. It works poorly for slow, ambiguous losses such as a bad trade, a token losing value, or your own wallet being phished.

Discretionary mutual cover vs parametric cover

Providers settle claims in two broad ways.

Nexus Mutual is the main discretionary model. Neptune Mutual used a parametric design; DefiLlama describes it as paying all policyholders of an affected protocol once an incident is resolved, without individual claim assessment, but it showed zero TVL on DefiLlama on 17 October 2026.

Nexus Mutual explained

Nexus Mutual is built on Ethereum and runs as a "discretionary mutual". You must become a member before you can buy cover. Membership needs KYC/AML checks and a 0.0020 ETH fee, and residents of a list of countries, including China, India, Japan, Mexico and Russia, cannot join, according to its membership page.

What you can buy

Its cover wordings page listed 17 products on 17 October 2026, including Single Protocol Cover, Multi Protocol Cover, Non EVM Protocol Cover, ETH Slashing Umbrella, Fund Portfolio Cover, Vault Cover, Leveraged Liquidation Cover and Sherlock Bug Bounty Cover. Each product has its own wording, which sets what is covered, what is excluded and how long you have to claim.

Per the protocol docs, you choose an amount in ETH, USDC or cbBTC and can pay in ETH, USDC, cbBTC or NXM. Cover periods run from 28 to 365 days, and cover cannot be cancelled or refunded once bought, per its buying guide. Each cover is minted as an NFT that can be renewed, edited or partly claimed against.

How claims are decided

Since November 2025, a Claims Committee of three publicly named assessors votes on claims, and two accept votes approve one, the claims assessment docs say. Filing needs a 0.05 ETH deposit, voting runs for up to 72 hours, and a 24-hour cool-down follows before payment. Before that, from March 2023 to November 2025, NXM stakers voted on claims in a stake-weighted process.

Track record

Nexus Mutual says it had paid more than $18.5 million in claims as of August 2026, per its claims history, covering exploits, technical failures and halted withdrawals at centralised custodians. After the Euler Finance exploit of 13 March 2023, which took $197 million, it approved 10 claims worth about $3.39 million, its Euler write-up shows. Its homepage showed "$7.00B in crypto protected" and 13,000 covers provided on 17 October 2026.

Its capital base is much smaller than at its peak: DefiLlama recorded about $780.6 million on 9 November 2021 against roughly $98.7 million on 17 October 2026.

Other DeFi cover options in 2026

Many covers from the 2021 boom have faded. The main options we could verify on 17 October 2026:

• OpenCover, which sells and renews cover from underwriters including Nexus Mutual. Its website advertised premiums "starting at $2 per week for $5,000 of coverage". Its Covered Vaults product, launched in April 2026, streams premiums from vault yield and gives vaults access to up to $50 million of cover each, Nexus Mutual said.
• Firelight, about $66.2 million on Flare, where staked FXRP backs cover against defined protocol failures and an independent risk consortium validates incidents, per DefiLlama.
• Ease, about $4.6 million, which offers cover without an upfront premium (DefiLlama).
• InsurAce, Unslashed and Bridge Mutual, older covers that DefiLlama now flags as having dead websites, with InsurAce at about $0.14 million.

Before buying from any smaller provider, check that its pool can actually pay a large claim and that it has paid claims before.

What DeFi insurance does not cover

The exclusions matter more than the headline. Nexus Mutual's Protocol Cover wording covers smart contract bugs and some sudden economic events (oracle failure or manipulation, liquidation failure, governance takeovers). It excludes, among others:

• Phishing, private key leaks and malware, where the protocol keeps working as intended. Our guide to wallet drainers covers that risk.
• Ordinary market price moves, unless they meet its oracle failure or manipulation definitions.
• The depeg of any asset the covered protocol itself issues. See stablecoin depegs explained.
• Rug pulls, where owners take funds using powers the protocol gave them. Our explainer on rug pulls shows what to look for.
• Front-end or website errors, and failures of bridge components. See how crypto bridges work.
• Events or public bug warnings that came before you bought cover.
• Bugs that originate on a non-EVM chain, unless the wording or its annex says otherwise.

The same wording applies a 5% deductible unless stated otherwise, and gives a grace period of 35 days after cover ends to file for a loss that happened while it was active.

How much DeFi insurance costs

There is no fixed price list. On Nexus Mutual, each staking pool sets prices, and the price rises as the pool's capacity is used and drifts back down over time, according to its pricing docs. Each purchase adds 0.05% to the yearly price for every 1% of pool capacity it uses, and the price falls by 2.0% per day without purchases, but never below the pool's target price. The docs' worked example quotes 2.5% to 3.25% per year.

As an illustration only: at 2.5% a year, covering $10,000 for six months costs about $125. Compare that with the yield you expect. If a strategy pays 4% and cover costs 2.5%, more than half of your return goes on protection, and the deductible plus exclusions mean you are still not fully protected.

Alternatives and complements to cover

Cover is one layer. Others reduce the chance of a loss or absorb it at protocol level.

• Audits and contests find bugs before launch. Our smart contract audit guide explains what they catch and miss.
• Bug bounties pay researchers to report flaws. Immunefi passed $100 million in payouts to researchers in June 2024, The Block reported.
• Protocol safety modules put stakers' funds first in line for bad debt. Aave's Umbrella, which began rolling out on Ethereum on 5 June 2025 according to CryptoSlate, burns staked aTokens to cover deficits in the matching asset, with a 20-day cooldown for stakers, per Aave's docs. See what is Aave.
• Your own risk limits: position sizing, spreading funds across protocols and chains, and checking a protocol before depositing. Our checklist for checking whether a DeFi protocol is safe is a good start.

For Sui, MultiversX and Radix users, including JewelSwap users, the non-EVM exclusion is worth noting: check whether a listing explicitly covers the protocol and chain you use, and size positions on the assumption that no cover applies.

Frequently asked questions

What is DeFi insurance?

It is cover that pays out if a defined on-chain event, most often a smart contract exploit, causes you a loss. It is usually sold by mutuals or protocols backed by stakers' capital rather than by regulated insurers.

Is Nexus Mutual real insurance?

Not in the legal sense. Nexus Mutual describes itself as a discretionary mutual: members buy cover products, and a Claims Committee decides claims against the cover wording. You must pass KYC and pay a 0.0020 ETH membership fee before buying.

Does DeFi insurance cover phishing or a hacked wallet?

Usually not. Nexus Mutual's Protocol Cover excludes phishing, private key breaches and malware where the protocol keeps working as intended. It is designed for failures of the protocol, not of your wallet.

How much does DeFi insurance cost?

Prices are set by the market and change with demand. On Nexus Mutual they are quoted as a yearly percentage; its docs give examples of 2.5% to 3.25% a year. Cover runs for 28 to 365 days and cannot be refunded.

What is parametric crypto insurance?

Parametric cover pays a set amount once a predefined incident is confirmed, without assessing each person's loss. It is faster and more predictable, but the payout may not match what you actually lost.

What can I use instead of DeFi insurance?

Combine several layers: use audited protocols with active bug bounties, prefer protocols with a safety module or reserve fund, limit position sizes and spread funds across protocols and chains.

Keep reading

• How to check a DeFi protocol is safe
• Smart contract audits explained
• Stablecoin depegs explained
• What is Aave?
• Crypto risk management rules

This article is educational and is not financial, legal or insurance advice. Figures are as of 17 October 2026 from DefiLlama, Nexus Mutual's documentation and the other sources linked inline; cover terms, prices and provider status change, so read the current wording before buying.