Chado@chadosdiary
🔓 5 years of DeFi/crypto exploits, 2020–2026 YTD: where the money actually leaks.
📉 Protocol-logic exploits collapsed: 37% (2021) → ~5% (2024). Audits, formal verification, fuzz harnesses, immutable bug bounties — they actually work.
📈 But total losses didn't fall — keys / infra / CEX / UI supply-chain became 80–95% of the pie:
• Bybit $1.5B (Safe{Wallet} supply chain, Lazarus, Feb 2025)
• Kelp DAO via LayerZero $292M (RPC compromise + DDoS failover, Apr 2026)
• DMM Bitcoin $305M (private key, May 2024)
• WazirX $235M (multisig, Jul 2024)
• Mixin $200M (cloud DB breach, Sep 2023)
⚖️ 2025 partial recovery to 20% logic: Cetus (Sui) $223M, Balancer V2 $128.6M precision heist, GMX V1 $42M.
The weakest link moved from code → humans, cloud, endpoints.
Sources: Chainalysis, SlowMist, Halborn, Immunefi, DefiLlama, REKT DB.
#DeFi #CryptoSecurity