Morning Edition · Monday, September 14, 2026Published at 1:49 AM EDT · New York
Of 68 first-half incidents with a public pre-incident audit, researchers classified 46 attack paths as entirely outside the reviewed scope, accounting for 94.4% of losses in that group.

A preprint affiliated with the review firm ack3 examined 135 reported decentralized-finance incidents in the first half of 2026, totaling about $939.86 million in losses, and found public pre-incident audits for 68 of them. Within that audi…
Track on-chain flows, protocol shifts, stablecoins, and regulation.
The Global Intelligence Brief stays free.
Part of a tracked trend
Losses Move to Components That Worked as Designed
A growing share of DeFi losses will come not from buggy contract code but from components behaving exactly as specified — oracle forwarders, validator signature sets, governance votes and other trusted off-contract inputs — so audits and bug bounties scoped to on-chain code keep missing the failure surface, and protocols will be repeatedly forced to extend review, scope and monitoring to their privileged operational infrastructure.
Start a discussion in Townsquare.
More from this edition
Comments
0No comments yet.