Back to News

DeFi exploit losses drop 74% since 2022 peak amid tougher security

DeFi exploit losses have fallen 74% from their 2022 peak to $680 million in 2025. Immunefi attributes the decline to structural security changes driven by AI advancements in the crypto space.
Decentralized finance (DeFi) platforms recorded a sharp decline in exploit losses last year, with Immunefi reporting a 74% drop to $680 million in 2025 compared to the 2022 high. This marks a notable shift in the battle to secure DeFi protocols, which have long been a magnet for hackers targeting vulnerabilities.

The fall in losses reflects more than just luck or market cycles. Immunefi attributes the improvement to structural changes in how smart contracts are audited and fortified. An increasingly sophisticated security landscape is emerging, partly driven by advances in AI-powered tools that bolster threat detection and automate vulnerability assessments.

DeFi’s reputation took a hit during 2022 and 2023, when exploits and rug pulls regularly topped billions in losses. The 74% reduction in 2025 suggests the sector is learning from the past – integrating bug bounty programs, multi-layer audits, and more rigorous code reviews. Still, the total $680 million loss is far from negligible, reminding investors that risks remain elevated by design.

Hackers continue to adapt, pushing the arms race dynamic. Immunefi highlights that the use of AI is not limited to defenders; exploiters also deploy machine learning models to identify novel attack vectors. This ongoing escalation means that no protocol can afford complacency, and continuous security enhancements remain critical to attracting capital.

The drop in exploit losses should ease some skepticism about DeFi’s risk profile. However, the sector’s rapid innovation pace means new vulnerabilities can emerge alongside fresh products. Investors and developers alike need to watch for official updates on patched exploits and the rollout of next-gen security measures.

2026 will be a telling year. The community awaits more transparency on how AI-driven security tools perform in live environments and whether regulators step up mandates for on-chain code audits. For now, the trend points to a more resilient DeFi space – but one where vigilance cannot slack.