Protocol risk is increasingly judged by governance, treasury controls and incident response, not only by smart-contract reviews.
The market has learned that a clean audit is only one layer. Admin keys, oracle design and liquidity incentives can carry equal risk.
Investors are becoming more selective when rewards look high but governance safeguards are thin.