DeFi's Split Screen on November 3: Avalanche Bucks the Slide as Total TVL Slips to $82.18 Billion

DeFi's headline number fell on November 3 — but the interesting story is underneath it. Total value locked across DeFi protocols stood at **$82.18 billion**, down **0.61% over 24 hours** and **3.7% on the week**, according to DefiLlama, with Ethereum and Lido driving the outflow. Yet one chain went the other way, one major protocol expanded to a new chain, and a DNS hijack reminded everyone that DeFi's weakest link is often not the smart contract at all. A falling total with rising pockets is a split screen — and split screens reward looking closer.

**The slide, in numbers.** The leaderboard shows where the money left. **Lido** still leads liquid staking at **$22.23 billion**, **Aave** holds **$16.41 billion** in lending, and **Morpho** sits at **$11.17 billion** — all slightly down on the day. Stablecoin supply across DeFi stands at **$293.8 billion**, 24-hour DEX volume at about **$6.98 billion**, and perpetuals volume at **$26.83 billion**. Tether supply keeps shrinking, the DefiLlama daily note adds, and the week's 3.7% TVL decline is led by Ethereum and Lido outflows. None of that is a collapse — $82 billion is still a very large financial system — but the direction over the past week is unmistakably down, and it matches the cautious mood across crypto after the Binance hack and the ETF outflows.

**The exception: Avalanche.** Avalanche's C-Chain TVL closed November 2 at **$586.04 million**, up **10.28%** on the November 1 close of **$531.40 million**, and the November 3 partial day held at **$583.16 million** — the jump surviving a second day, which suggests it is not a one-print artefact. Avalanche stablecoins stand at **$1.356 billion**, and Avalanche DEX volume ran **$69.40 million** in 24 hours. The driver, unusually, is a single protocol on a single chain: **Aave V4 deposits on Avalanche passed $125 million** according to the project, while DefiLlama shows **$85.7 million TVL and $45.3 million borrowed** for Aave V4 on Avalanche. The gap between the two figures is itself informative — different methodologies count deposits and TVL differently — and Avalanche credits part of the rise to **Ethena Pay's new Earn+ product**, meaning the growth leans on one distribution partner's incentives. Flat AVAX prices and stablecoin supply still below $1.40 billion say the gain is lending deposits, not broad capital returning. Still, in a week when most chains shrank, a 10% jump that holds for two days is worth noting — and worth watching: a November 4 daily close at or above $570 million would mean the step is sticky, while under $540 million would mean it is reversing.

**Curve goes live on Stellar.** The second pocket of growth is a cross-chain expansion. **Curve went live on Stellar mainnet** with StableSwap pools for stablecoins, wrapped bitcoin and synthetic assets, while FXSwap is planned after an audit with no date set. Curve holds about **$1.27 billion TVL** per DefiLlama. The move matters because Stellar's design targets payments and tokenized real-world assets rather than the speculative trading that dominates most DeFi chains — StableSwap pools for stablecoins and wrapped bitcoin fit that use case directly. It is also a reminder that DeFi growth in 2026 is increasingly about established protocols finding new chains and new user bases, not about brand-new protocols appearing from nowhere.

**The warning: a DNS hijack hits 12+ DeFi front ends.** The day's security story is a useful corrective to any complacency about audited code. Hackers hijacked **12 or more DeFi websites via Name.com domains** and stole about **$138,000**, according to the November 3 DeFi brief. The attack did not break smart contracts — it redirected the websites users trust to interact with them. That distinction matters for every DeFi user: the contract can be perfect and the front end can still lie to you. The practical defence is boring and effective — bookmark the official domain, check the address bar before connecting a wallet or approving anything, and treat any unexpected approval prompt after a site looks slightly different as a stop signal, not a speed bump. The $138,000 stolen is small next to the Binance-scale hacks of recent weeks, but the method scales: one registrar compromise, many front ends, many users.

**How to read the split screen.** Three signals, three lessons. The total says DeFi is still in a cautious, outflow week — do not mistake one chain's jump for a sector-wide recovery. Avalanche says lending incentives and a single distribution partner can move a mid-size chain's TVL by 10% in a day — which is also a warning about how concentrated that growth is. Curve-on-Stellar says the durable growth is in established protocols reaching new rails. And the DNS hijack says the front end is part of the security model, whether users treat it that way or not. Watch Avalanche's November 4 close, watch whether Aave V4's DefiLlama TVL converges toward the project's $125 million deposit figure, and watch whether Curve's Stellar pools attract real stablecoin volume beyond launch week.

### FAQ

**What is total DeFi TVL on November 3?** $82.18 billion, down 0.61% in 24 hours and 3.7% on the week, per DefiLlama.

**Which chain bucked the slide?** Avalanche: C-Chain TVL closed November 2 at $586.04 million, up 10.28% from $531.40 million on November 1, holding near $583.16 million on November 3.

**How big is Aave V4 on Avalanche?** The project says deposits passed $125 million; DefiLlama shows $85.7 million TVL plus $45.3 million borrowed — different measures of the same deployment.

**What did Curve launch?** Curve went live on Stellar mainnet with StableSwap pools for stablecoins, wrapped bitcoin and synthetic assets; FXSwap is planned after an audit.

**What was the DNS hijack?** Hackers hijacked 12+ DeFi websites via Name.com domains and stole about $138,000 — redirecting trusted front ends, not breaking smart contracts.

**How do users protect against front-end hijacks?** Bookmark official domains, verify the address bar before connecting a wallet, and stop at any unexpected approval prompt.

Read more on Zimbuck: what TVL actually measures is here, https://zimbuck.com/blogs/889/What-Is-TVL-in-DeFi — plus the Zimbuck News page at https://zimbuck.com/pages/zimbucknews and discussion at https://zimbuck.com/groups/zimbuckmarketnews . The DeFi TVL data this article is based on is here: https://defillama.com/?volume=false&tvl=true&derivatives=false . This is market news and general information only, not financial advice. Join Zimbuck at https://zimbuck.com to follow more DeFi coverage.