There’s been a noticeable cluster of DeFi exploits recently, with multiple protocols affected over a short period. Numbers below are approximate and based on publicly reported incidents worth verifying individually.
Recent incidents
Kelp DAO: ~$292M
Drift: ~$285M
Grinex: ~$13.7M
Rhea Finance: ~$7.6M
Wasabi: ~$5M
Volo: ~$3.5M
Purrlend: ~$1.5M
CoW Swap: ~$1.2M
Aethir: ~$423K
Silo: ~$392K
Scallop: ~150K SUI
One reported cause in a recent case (Wasabi) was a compromised deployer EOA, which highlights how off-chain key management can still be a major vulnerability even when smart contracts are audited.
Estimated total impact
~$800M+ in reported losses over a relatively short timeframe
Security continues to be one of the biggest challenges in DeFi, especially around:
Key management (EOAs, multisigs)
Smart contract vulnerabilities
Bridge and cross-chain risks
If anyone has confirmed sources or corrections for specific incidents, would be useful to refine this list further.