News
Public · Published
Audited DeFi protocols lost $885M to attacks that occurred completely outside their audit scopes
A preprint study found that audited DeFi protocols lost $885 million to attacks that were completely outside their audit scopes. The study reported a large share of these losses came from attacks not covered by audits, after excluding two outliers from the first half of 2026.
Published:
Updated:
What happened
A preprint study found that audited DeFi protocols lost $885 million to attacks that were completely outside their audit scopes. The study reported a large share of these losses came from attacks not covered by audits, after excluding two outliers from the first half of 2026.
Confirmed
Global impact / market context
This matters because DeFi investors, who use blockchain-based financial services without traditional banks, may think audits make protocols safe. The losses show audits do not cover all attack risks, which could hurt trust and reduce money flowing into DeFi projects.
Analyst inference
The findings come amid growing concern about security in decentralized finance, which is a system of financial apps running on blockchain. Losing $885 million to attacks outside audit scope may pressure DeFi protocols to expand their audit checks and could influence investor confidence in tokens like ETH and USDC.
Analyst inference
What to watch
- Watch for the full preprint's details on how the outside-scope share was calculated after excluding the two H1 2026 outliers, as this method affects the study's accuracy. Confirmed
- Proposal: Investors should ask DeFi protocols to disclose audit scope limitations and consider additional risk checks, since audits may miss attacks outside their covered areas. Proposed
- Monitor whether DeFi protocols respond by broadening audit scopes or offering new insurance products, which could affect their costs and investor confidence, though this is not confirmed in the article. Analyst inference
Affected assets
- ETH — Ethereum
- USDC — USD Coin
- DEFI — DeFi