DeFi losses fall 80 percent but multi-chain bugs emerge

Decentralized finance recorded far fewer losses in recent years, according to new industry data. Total incidents dropped from $2.62 billion in 2022 to $534 million in 2024. A single November 2025 exploit across six networks illustrated the remaining threat.

Protocol logic bugs accounted for 89.1 percent of 2025 losses. Median loss per incident fell to $1.5 million that year, down 75 percent from 2022 levels. Eighty-three unique incidents occurred, showing more but smaller events. Bridge exploits, once responsible for 73 percent of losses in 2022, fell to 3 percent by 2025. Flash-loan attacks declined from 54 percent of losses in 2020 to under 1 percent. Private-key compromises dropped to 8.1 percent. The Balancer V2 exploit in November 2025 drained about $128 million across Ethereum, Arbitrum, Base, Polygon, Sonic, and OP Mainnet. An arithmetic precision flaw allowed the attacker to drain funds in under half an hour despite eleven prior audits. Ethereum, Solana, and BNB Chain recorded the lowest loss-to-TVL ratios at 0.42 percent, 0.42 percent, and 0.33 percent respectively. The data came from a review covering 2020 through 2025.

Relaterte artikler

Illustration of cryptocurrency bridges being hacked, showing digital chains breaking and money draining away.
Bilde generert av AI

Crypto bridges lose over $35 million in attacks

Rapportert av AI Bilde generert av AI

Multiple cross-chain protocols were drained of more than $35 million in a series of attacks spanning six hours. The incidents targeted bridges and staking contracts on Arbitrum, Ethereum and Bitcoin scaling networks.

TRM Labs recorded 207 crypto hacks during the first half of 2026, the highest six-month total the firm has tracked. Total losses reached $972 million, down sharply from $2.3 billion in the same period a year earlier.

Rapportert av AI

AFX and Verus suffered combined losses of $31.69 million in separate incidents on the Ethereum network. A third protocol, B², halted staking after unauthorized access to its upgrade authority.

North Korea-linked hackers stole roughly 60 percent of all cryptocurrency losses from hacks worldwide in 2025, amounting to about $2.06 billion, according to blockchain security firm CertiK.

Rapportert av AI

Jaredfromsubway.eth, a prominent Ethereum MEV bot, lost more than $7.5 million after approving attacker-controlled contracts that enabled an allowance drain. The incident occurred through a series of fake trading routes set up over several weeks. Security firm Blockaid identified the exploit as targeting the bot's automated approval logic rather than private keys or protocol flaws.

Dette nettstedet bruker informasjonskapsler

Vi bruker informasjonskapsler for analyse for å forbedre nettstedet vårt. Les vår personvernerklæring for mer informasjon.
Avvis