55% of DeFi hacks, from Ronin to WazirX, aren’t code‑related
CRYPTOCURRENCY

55% of DeFi hacks, from Ronin to WazirX, aren’t code‑related

2 min read

Ethereal Ventures has announced that DeFi security failures should be classified as a control‑plane problem, stressing that most breaches arise from off‑chain human mistakes rather than flaws in smart‑contract code.

Root Causes Behind Recent DeFi Hacks

Attackers frequently deceive project founders into clicking malicious links, which grants them access to private keys and lets them modify applications from within. Once funds are transferred on the blockchain, headlines often lump these incidents together under the generic label “DeFi hack,” obscuring the true source of the breach. This mischaracterization leads teams to focus on contract audits while neglecting the surrounding security ecosystem.

Halborn’s 2024 analysis of the top 100 DeFi incidents revealed that off‑chain events accounted for 56.5 % of attacks and were responsible for 80.5 % of the total stolen assets. Chainalysis corroborated the trend, highlighting private‑key compromises as a dominant factor in recent crypto losses. These findings underscore that human error, not just code, drives the majority of blockchain exploits.

Implications for Investors and the Crypto Market

Accurate labeling of attack vectors enables investors to assess risk more precisely, influencing decisions on where to allocate capital across the crypto market. As security practices evolve to protect the control plane, the price stability of DeFi tokens may improve, fostering greater confidence among stakeholders. Ultimately, a clearer diagnostic approach could reduce the frequency of high‑value thefts and support sustainable growth for blockchain projects.