Recent DeFi Exploits Highlight Ongoing Security Risks (~$800M Reported)

There’s been a noticeable cluster of DeFi exploits recently, with multiple protocols affected over a short period. Numbers below are approximate and based on publicly reported incidents worth verifying individually.

Recent incidents

• Kelp DAO: ~$292M
• Drift: ~$285M
• Grinex: ~$13.7M
• Rhea Finance: ~$7.6M
• Wasabi: ~$5M
• Volo: ~$3.5M
• Purrlend: ~$1.5M
• CoW Swap: ~$1.2M
• Aethir: ~$423K
• Silo: ~$392K
• Scallop: ~150K SUI

One reported cause in a recent case (Wasabi) was a compromised deployer EOA, which highlights how off-chain key management can still be a major vulnerability even when smart contracts are audited.

Estimated total impact

~$800M+ in reported losses over a relatively short timeframe

Security continues to be one of the biggest challenges in DeFi, especially around:

• Key management (EOAs, multisigs)
• Smart contract vulnerabilities
• Bridge and cross-chain risks

If anyone has confirmed sources or corrections for specific incidents, would be useful to refine this list further.