Permissionless finance, but with KYC: what are we even doing?
2026-11-04 –, Lightning Stage

DeFi began as permissionless finance. In 2026 the default user path runs through KYC'd front-ends, geofences, IP allowlists and wallet screening. A field report from running permissionless interfaces to major DeFi protocols: where the walls actually stand, how they crept in layer by layer, and what it takes to keep real exit paths alive.


The protocol layer of DeFi is still permissionless. The access layer quietly is not. KYC moved from CEXs into front-ends, APIs grew geofences and datacenter-IP walls, interfaces delist tokens, wallet screening silently drops users. Each wall arrived as a reasonable compliance step; together they re-permission the system we built to be open.

I run permissionless interfaces to major DeFi and perp protocols and hit these walls in production, so this is a field report: a 5-minute taxonomy of access-layer blockers (front-end KYC, geoblocking, IP allowlists, screening), why censorship resistance dies at the access layer first, and a builder checklist: the walkaway test, fallback front-ends, permissionless execution paths, verifiable interface delivery. Walk away knowing which walls your protocol already has, and which exit paths never come back once they are gone.

Developer at cp0x, a crypto community running permissionless interfaces to DeFi and perp protocols and participating in governance across 19 DAOs.
Host of a long-running Ethereum podcast. Currently working on verifiable front-end delivery (reproducible builds, IPFS/ENS) so interfaces stay auditable and hard to capture.