Losses Move to Components That Worked as Designed
A growing share of DeFi losses will come not from buggy contract code but from components behaving exactly as specified — oracle forwarders, validator signature sets, governance votes and other trusted off-contract inputs — so audits and bug bounties scoped to on-chain code keep missing the failure surface, and protocols will be repeatedly forced to extend review, scope and monitoring to their privileged operational infrastructure.
strengthening · confidence 100 · +4 7d · 0 30d · Medium term (3-9 months) · tracking since August 10, 2026 · updated October 12, 2026
Score history
Daily conviction score, 0 to 100. Higher means the thesis is more strongly corroborated.
Now 100 · +2 since Oct 11 · ranged 98 to 100
Showing the last few days. Unlock full score history.
Why the conviction moved
- Oct 12Strengthened +2
79thVault lost $12.5 million through a single operator key, then recovered 92% of it. The loss came from a privileged operational credential, not a bug in contract code, which is exactly the failure surface that code-only audits miss.
- Oct 11Strengthened +5
Bitget's $387.5 million backend breach led September losses of about $768 million. Most large incidents came from compromised credentials, signing keys and price feeds rather than flawed contract code. That puts the biggest losses in privileged off-contract infrastructure, which audits scoped to on-chain code do not cover.
Showing the last 2 days. Unlock the full record.
Source trail
Supporting · October 12, 2026
79thVault recovers 92% of $12.5 million drained through a single operator key as October hack losses pass $98 million
79thVault lost $12.5 million through a single operator key, then recovered 92% of it. The loss came from a privileged operational credential, not a bug in contract code, which is exactly the failure surface that code-only audits miss.
Cointelegraph (Telegram)Supporting · October 11, 2026
Bitget's $387.5 Million Backend Breach Leads a Run of Losses in Off-Chain Signers, Oracles and Bridges
Bitget's $387.5 million backend breach led September losses of about $768 million. Most large incidents came from compromised credentials, signing keys and price feeds rather than flawed contract code. That puts the biggest losses in privileged off-contract infrastructure, which audits scoped to on-chain code do not cover.
Rekt News (Bitget)
Unlock full source trail, score history, and daily updates.
65 more sources in the full trail.
Unlock TrendsAffected regions & assets
Townsquare
Argue the thesis in Townsquare.