← Trends

Losses Move to Components That Worked as Designed

A growing share of DeFi losses will come not from buggy contract code but from components behaving exactly as specified — oracle forwarders, validator signature sets, governance votes and other trusted off-contract inputs — so audits and bug bounties scoped to on-chain code keep missing the failure surface, and protocols will be repeatedly forced to extend review, scope and monitoring to their privileged operational infrastructure.

strengthening · confidence 100 · +4 7d · 0 30d · Medium term (3-9 months) · tracking since August 10, 2026 · updated October 12, 2026

Sign in to get threshold and movement alerts for this trend.

Score history

Daily conviction score, 0 to 100. Higher means the thesis is more strongly corroborated.

Oct 11 · 98Oct 12 · 100

Now 100 · +2 since Oct 11 · ranged 98 to 100

Showing the last few days. Unlock full score history.

Why the conviction moved

  • Oct 12
    Strengthened +2

    79thVault lost $12.5 million through a single operator key, then recovered 92% of it. The loss came from a privileged operational credential, not a bug in contract code, which is exactly the failure surface that code-only audits miss.

  • Oct 11
    Strengthened +5

    Bitget's $387.5 million backend breach led September losses of about $768 million. Most large incidents came from compromised credentials, signing keys and price feeds rather than flawed contract code. That puts the biggest losses in privileged off-contract infrastructure, which audits scoped to on-chain code do not cover.

Showing the last 2 days. Unlock the full record.

Source trail

  • Supporting · October 12, 2026

    79thVault recovers 92% of $12.5 million drained through a single operator key as October hack losses pass $98 million

    79thVault lost $12.5 million through a single operator key, then recovered 92% of it. The loss came from a privileged operational credential, not a bug in contract code, which is exactly the failure surface that code-only audits miss.

    Cointelegraph (Telegram)
  • Supporting · October 11, 2026

    Bitget's $387.5 Million Backend Breach Leads a Run of Losses in Off-Chain Signers, Oracles and Bridges

    Bitget's $387.5 million backend breach led September losses of about $768 million. Most large incidents came from compromised credentials, signing keys and price feeds rather than flawed contract code. That puts the biggest losses in privileged off-contract infrastructure, which audits scoped to on-chain code do not cover.

    Rekt News (Bitget)

Unlock full source trail, score history, and daily updates.

65 more sources in the full trail.

Unlock Trends

Affected regions & assets

RegionsGlobal
Assets1 assetUnlock Trends

Townsquare

Argue the thesis in Townsquare.