Immunefi: DeFi Attack Losses Down 74% from 2022 Peak, AI Accelerates Security Arms Race

Odaily news, Web3 security company Immunefi recently released the "2026 Ecosystem Vulnerability Audit Report," showing that losses from DeFi protocol hacks have decreased by 74% from the 2022 peak of $2.62 billion to approximately $680.3 million in 2025.

The report points out that the median loss per single attack has also significantly decreased, from $6 million in 2022 to $1.5 million in 2025, reflecting an overall improvement in security levels. Meanwhile, the proportion of bridge exploits in total DeFi losses has drastically dropped from 73% in 2022 to 3% in 2025, and the proportion of flash loan attacks has also fallen from 54% to less than 1%.

The proportion of risks at the infrastructure layer (such as private key leaks and database attacks) has also decreased from 30.7% in 2022 to 10.3% in 2025. Immunefi stated that this reflects the continuous optimization of oracle design, reentrancy attack protection, and access control standards, making the overall DeFi ecosystem "safer."

However, the report also notes that losses slightly rebounded to $680.3 million in 2025, primarily due to increased complexity in multi-chain systems and a few high-severity incidents. At the same time, the number of independent security incidents continues to rise, reflecting an expanding attack surface. (The Block)