Immunefi: DeFi attack losses have decreased by 74% compared to the peak in 2022, with AI accelerating the arms race in security

According to The Block, the latest "2026 Ecosystem Vulnerability Audit Report" released by Web3 security company Immunefi shows that losses from DeFi protocols due to hacker attacks have decreased by 74% from the peak of $2.62 billion in 2022 to approximately $680.3 million in 2025.

The report points out that the median loss per attack has also significantly decreased, from $6 million in 2022 to $1.5 million in 2025, reflecting an overall improvement in security levels.

At the same time, the proportion of losses from bridge exploits has dramatically decreased from 73% in 2022 to 3% in 2025, and the share of flash loan attacks has dropped from 54% to less than 1%. Risks at the infrastructure level (such as private key leaks and database attacks) have also decreased from 30.7% in 2022 to 10.3% in 2025. Immunefi stated that this reflects the ongoing optimization of oracle design, reentrancy attack protection, and access control standards, indicating that the overall DeFi ecosystem "is becoming safer."

However, the report also notes that losses slightly rebounded to $680.3 million in 2025, mainly due to the increasing complexity of multi-chain systems and a few high-severity incidents. Meanwhile, the number of independent security incidents continues to rise, reflecting an expanding attack surface.