Unverified DeFi Contracts Result in $36.7M Losses, Chainalysis Reports
- Unverified smart contracts have led to at least $36.7 million in losses across four DeFi exploits in the past six months.
- The largest incident involved Truebit, which lost $26.2 million due to an integer overflow vulnerability in an unverified contract on Ethereum.
- Other exploited protocols included Trusted Volumes, Aperture Finance, and Ekubo.
- Hackers stole a total of $629.7 million in April alone, marking the highest monthly total since February.
- Chainalysis recommends source code verification and broader bug bounty programs as preventive measures against such exploits.
The rise of exploits targeting unverified smart contracts highlights vulnerabilities within decentralized finance (DeFi) protocols that lack public scrutiny and oversight. This trend is exacerbated by advancements in decompilation tools and artificial intelligence that facilitate the identification of weaknesses.
With over $36 million lost due to these vulnerabilities, it is crucial for DeFi protocols to adopt better security practices like source code verification to protect user funds effectively.