DeFi protocols are swelling, with more funds than ever locked in smart contracts. But two recent exploits have highlighted their vulnerabilities—leading critics to suggest they are not as decentralized as they might appear to be.