A core problem with DeFi investments: security