# Small Pools Keep Bleeding From Arithmetic, Not Attackers

A steady stream of small drains caused by accounting and arithmetic logic errors in low-TVL pools and forked contracts — double-counted bonuses, reserve-accrual mismatches — keeps DeFi incident frequency high even as dollar losses stay concentrated in a few large exploits, so incident counts decouple from loss magnitude and unaudited forks of yield logic remain the recurring source.

- Conviction: 31 / 100 (weakening)
- 7-day move: -3
- Horizon: Emerging (watchlist)
- Tracking since: 2026-10-01T00:00:00.000Z
- Last updated: 2026-10-12T14:07:13.213Z
- Canonical: https://polylog.news/crypto/trends/accounting-logic-drains-in-low-tvl-pools
- Publisher: Polylog
- Affected regions: Global

## Recent score history

- 2026-10-11: 33
- 2026-10-12: 31

## Recent evidence

- [confirms] Attacker drains 200 ETH from a MakerDAO keeper that never settled its 2020 Black Thursday auctions (2026-10-08): On the same day, a rounding flaw drained a legacy Set Protocol product. It adds another small arithmetic-logic incident that pushes up incident counts without adding much to dollar losses.
- [confirms] Security roundup: attackers drain a legacy Set Protocol product, a Perpetual Protocol vault and BNB Chain token contracts (2026-10-07): The latest roundup adds several small incidents (a legacy Set Protocol product, a Perpetual Protocol vault, BNB Chain token contracts including the roughly 1,546 BNB MOKE over-mint). Incident counts keep rising even though individual losses are small, which is the split between frequency and size this thesis describes.

4 more evidence entries, the full score history, the conviction-driver timeline, and affected assets are for subscribers: https://polylog.news/pricing