Immunefi: DeFi Attack Losses Down 74% from 2022 Peak, AI Accelerates Security Arms Race

Odaily Planet Daily News Web3 security company Immunefi's latest "2026 Ecosystem Vulnerability Audit Report" shows that losses from DeFi protocol hacks have decreased by 74% from the 2022 peak of $2.62 billion to approximately $680.3 million in 2025.

The report indicates that the median loss per individual attack also saw a significant decline, dropping from $6 million in 2022 to $1.5 million in 2025, reflecting an overall improvement in security levels. Meanwhile, the proportion of bridge exploits relative to total DeFi losses fell sharply from 73% in 2022 to 3% in 2025, and the share of flash loan attacks also dropped from 54% to less than 1%.

The proportion of risks at the infrastructure level (such as private key leaks and database attacks) also decreased from 30.7% in 2022 to 10.3% in 2025. Immunefi noted that this reflects continuous optimization of oracle design, reentrancy attack protection, and access control standards, making the DeFi ecosystem "safer overall."

However, the report also points out that losses slightly rebounded to $680.3 million in 2025, primarily due to the increased complexity of multi-chain systems and a few high-severity incidents. At the same time, the number of independent security incidents continues to rise, indicating that the attack surface is still expanding. (The Block)