DeFi TVL September 2026 Week 4: Neutron Governance Attack
The DeFi TVL September 2026 week 4 snapshot closes with TVL at $95.57B, up 8.24% over seven days. Bitcoin gained 3.8%, Ethereum gained 3.1%, and the Fear & Greed Index registered 71, or Greed.
The week’s largest security event was the Neutron governance attack. A passed governance proposal gave an attacker administrator control over contracts used by Astroport and Drop, with onchain analysis cited by independent reporting estimating about $9.4M taken before containment actions began.
On Base, Aave V4 went live with seven Coinbase tokenized stocks as collateral for USDC borrowing. SoFi and Mastercard moved SoFiUSD settlement live across SoFi Bank’s card program, Bitquery published an Ethereum lending-concentration study, and a16z with the DeFi Education Fund proposed an SEC safe harbor for qualifying DEXs and DEX apps.
On the yield front, this edition highlights five live positions on Portals Explorer. The selection includes two Base tokenized-stock-linked opportunities from the Portals and Base campaign, plus a large Base USDC vault and two established Ethereum USD vaults.
Market Pulse
- Total Market Cap: $2.89T (-2.8% 24h)
- DeFi TVL: $95.57B (+8.24% 7d)
- BTC Price: $83,868 (+3.8% 7d)
- ETH Price: $2,685 (+3.1% 7d)
- Gas (ETH): 0.162 Gwei
- Sentiment: Greed (71)
The DeFi TVL September 2026 week 4 data shows liquidity expanding across the major chains even as total crypto market cap declined 2.8% over the latest 24 hours. The seven-day TVL move outpaced BTC and ETH price gains, which supports a constructive liquidity reading without proving that every pool or vault has deeper executable liquidity.
The Ethereum gas was 0.162 Gwei at the publication cutoff. Low mainnet transaction costs can support deposits, withdrawals, and rebalancing, especially for strategies that need multiple contract interactions.
Greed at 71 signals positive risk appetite. The same setting calls for selectivity where yield depends on thin collateral, temporary incentives, tokenized-asset liquidity, complex strategy wrappers, or constrained withdrawal capacity.
Top Yields on Portals Explorer
This week, we highlight five live opportunities on Portals Explorer. The selection combines two Base tokenized-stock-linked positions with a large Base USDC vault and two Ethereum USD vaults.
1. SPCX SuperVault (Base)
The SPCX SuperVault on Base is offering a 40.97% APY with $112.32K in TVL. This Superform vault provides onchain SpaceX-linked exposure through SPCXC, the Coinbase tokenized asset associated with the company.
The vault holds SPCXC as its reserve asset with a 39.85% seven-day average and a 40.97% reward APY, while one-day volume was $8.46.
2. Beefy CLM GOOGLc-USDC Reward Pool (Base)
The Beefy CLM GOOGLc-USDC Reward Pool on Base is offering a 40.68% APY with $384.12K in TVL. The receipt represents a Beefy concentrated-liquidity position in Aerodrome’s USDC-GOOGLc pool and carries both stablecoin and tokenized-Google exposure.
It had a 30.65% seven-day average and $3.15K in one-day volume. Current 40.68% base APY can change with pool fees, liquidity conditions, and campaign or protocol economics.
3. Steakhouse Prime Instant (Base)
Steakhouse Prime Instant on Base is offering a 4.37% APY with $444.37M in TVL. This is an institutional-grade Morpho vault curated by Steakhouse Financial that lends USDC against blue-chip crypto and real-world-asset collateral.
The vault holds USDC as its reserve asset. The current APY matches the 4.37% seven-day average and $28.90M in one-day volume, and it describes Morpho Sentinel protection, a seven-day action timelock, and Aragon DAO guardian governance.
4. Upshift Sentora USD Earn (Ethereum)
Upshift Sentora USD Earn on Ethereum is offering a 7.09% APY with $94.41M in TVL. The Sentora USD Vault provides diversified access to USD-denominated yield strategies executed onchain across blue-chip DeFi protocols.
The vault holds USDC as its reserve asset. The current APY was above its 6.75% seven-day average, while the page recorded sizeable deposits during the final verification window.
5. Morpho Sentora RLUSD Main (Ethereum)
Morpho Sentora RLUSD Main on Ethereum is offering a 5.67% APY with $424.20M in TVL. This Morpho Vault V2 accepts RLUSD, mints senRLUSDv2 shares, and allocates through a Morpho Market V1 adapter into eligible Morpho Blue lending markets.
The vault holds RLUSD as its reserve asset with a 6.53% seven-day average, with the current return composed of a 2.64% base APY and 3.03% reward APY, and $149.91M in one-day volume.
Explore Tokenized Stocks on Base on Portals
The Portals and Base campaign brings tokenized stocks and the DeFi opportunities they power into one interface.
Users can explore stock-linked assets and related yield positions, zap from assets across chains, and review live campaign opportunities.
Discover Base Tokenized Stocks on Portals
DeFi News
Neutron Governance Attack Drains Astroport and Drop
Neutron proposal 9 passed on 22 September after using an expedited voting track. Its 11 messages handed administrator control of contracts tied to Astroport and Drop to the proposer, who then changed code and emptied assets in less than half an hour.
The report cited an onchain analysis valuing the theft at about $9.4M, while the final loss and recovery outcome remained uncertain. Cosmos Hub validators later moved 1,227,121 ATOM, then worth about $2.1M, from an attacker-associated wallet after a near-25-hour halt. The event makes privileged contract permissions, proposal review, and emergency containment as important as smart-contract code review.
Aave V4 Equities Hub Goes Live With Coinbase Tokenized Stocks on Base
Aave Labs announced on 25 September that AAPLc, AMZNc, GOOGLc, METAc, MSFTc, NVDAc, and TSLAc are live as collateral-only assets in the Aave V4 Equities Hub on Base.
Eligible users outside the United States can supply the Coinbase tokenized stocks and borrow USDC against them, with Chainlink providing the onchain equity price feeds.
The hub has one USDC reserve and one lending spoke that accepts the seven assets, each with its own collateral factor. The launch extends the Base tokenized-equity credit market covered in last week’s Morpho story through a different protocol and risk design.
Tokenized-equity collateral remains sensitive to issuer terms, liquidity, oracle availability, collateral factors, and market-hours mechanics.
SoFiUSD Settlement Goes Live Across SoFi Bank’s Mastercard Card Program
SoFi and Mastercard announced live blockchain settlement across SoFi Bank’s debit and credit-card program on 22 September. SoFi said it is migrating the full card program, expected to process more than $25B in annualized volume, to settlement with SoFiUSD.
SoFiUSD is issued by SoFi Bank, an OCC-regulated national bank, and is described as redeemable 1:1 for U.S. dollars. Merchants do not need to hold stablecoins or change their existing infrastructure under the launch, although SoFi’s disclosure says the stablecoin is not a deposit, is not FDIC or SIPC insured, and may lose value.
Bitquery Maps Ethereum Lending Concentration and Deleveraging
Bitquery Research published an onchain reconstruction of lending on Ethereum’s main protocols from January 2021 through August 2026. Under its definition of real debt, which caps borrower debt at collateral market value, the study estimates $18.4B at the end of August and Aave’s share at 56%, up from 28% at the end of 2021.
The study puts Ethereum’s real lending-debt peak at $35.1B on 31 August 2025 and attributes much of the contraction to lower ETH prices and unwinding leverage loops.
These are Bitquery’s research results rather than a universal measure of all credit, and the methodology excludes several categories that could otherwise double-count value and covers Ethereum only.
a16z and DeFi Education Fund Propose SEC DEX Safe Harbor
In a 14 September submission hosted by the SEC, a16z and the DeFi Education Fund proposed a safe harbor from Exchange Act exchange-registration requirements for qualifying DEX protocols and certain Dapps. The request focuses on software that enables self-directed interaction with protocols rather than centralized operators that control trading or custody.
The proposed framework asks the SEC to treat a qualifying DEX as non-custodial, automated, permissionless, and credibly neutral, with comparable criteria for qualifying front ends. The letter calls for staff guidance followed by possible rulemaking.
It is an industry proposal, not SEC approval, adopted guidance, or a new rule, but it sharpens the policy debate around DEXs, AMMs, and non-custodial interfaces.
Chain Performance Analysis
Ethereum held $53.64B in DeFi TVL, after a 7.48% weekly increase. Its scale continues to anchor lending, liquid staking, vault infrastructure, and stablecoin liquidity.
Solana remained the second-largest chain at $6.62B after gaining 12.27%. Base held $6.25B after a 12.06% increase, while BSC reached $5.85B after gaining 5.07%.
Tron increased 4.76% to $5.67B. Bitcoin DeFi gained 8.45% to $4.48B. Broad gains show a constructive liquidity week.
Top DeFi Protocols
Lido remained the largest protocol family at $26.41B after a 3.54% weekly increase. Its liquid-staking tokens allow users to retain onchain liquidity while earning network staking rewards.
Aave V3 ranked second at $18.30B, up 2.03%, while SSV Network held $14.13B after gaining 2.83%. Morpho Blue followed at $10.95B with a 2.95% increase.
Binance Staked ETH and WBTC held $10.04B and $9.79B, respectively. SparkLend rose 1.54% to $5.63B.
Looking Ahead
Neutron’s Post-Mortem and Governance Controls
Neutron’s post-mortem, final loss assessment, and any continued recovery steps are the immediate milestones after the Astroport and Drop attack. The incident makes proposal payload review, privileged administrator paths, timelocks, and emergency powers practical areas for protocol teams to revisit.
Users should track the latest official status before treating affected protocol liquidity as dependable. A governance vote can alter contract authority or market conditions even when the underlying code remains unchanged.
Aave V4 Equities Hub Risk Parameters and Market Depth
The immediate watchpoints for Aave’s Equities Hub are collateral factors, supply and borrow caps, oracle behavior during weekends and U.S. market holidays, and actual venue depth for each tokenized stock.
The live market uses Chainlink’s 24/5 tokenized-equity feeds, which hold the last published price when the underlying market is closed.
Users should also monitor governance and risk-steward changes as Aave considers more assets, GHO borrowing, and cap revisions. These controls can shape liquidation and borrowing capacity as much as the headline availability of a stock token as collateral.
Stablecoin Rails and DEX Regulatory Clarity
SoFiUSD’s production settlement launch shows an institutional route for bank-issued stablecoins to operate alongside existing payment rails.
In parallel, the a16z and DeFi Education Fund submission highlights the unresolved question of how exchange rules should apply to non-custodial, automated, permissionless, and credibly neutral DEX infrastructure.
Neither development makes every stablecoin, tokenized asset, or DEX interface interchangeable.
Users and builders should continue to assess issuer terms, redemption mechanics, market access, collateral quality, liquidity, governance, and the current regulatory perimeter of each product.
Read last week’s edition: DeFi TVL September 2026 Week 3: Nostra & CLARITY Act
About portals.fi : Portals is the DeFi Super App. A one-click gateway to the entire onchain economy. Powered by real-time data and seamless execution, Portals connects traders to over 20 million assets, thousands of protocols, and every major blockchain.
Disclaimer: The content of this newsletter is for informational purposes only. It is not investment advice. Please do your own research and consult with a qualified financial advisor before making any investment decisions. DeFi investments carry significant risks, and past performance does not guarantee future results. More details here.
Portals.fi Blog Newsletter
Join the newsletter to receive the latest updates in your inbox.
