Unverified DeFi Contracts Result in $36.7 Million Losses
- Unverified smart contracts led to at least $36.7 million in losses across four DeFi exploits over the past six months.
- The largest loss was $26.2 million from Truebit, due to an integer overflow vulnerability in a contract unverified since 2021.
- Other affected protocols included Trusted Volumes, Aperture Finance, and Ekubo.
- Hackers stole $629.7 million in April alone, with KelpDAO and Drift Protocol accounting for over $570 million of that total.
- Chainalysis recommends source code verification and broader bug bounty programs as preventive measures against future exploits.
The rise in attacks on unverified smart contracts highlights vulnerabilities within DeFi protocols, challenging the notion that obscurity enhances security. As attackers leverage advanced tools to exploit these contracts, the need for transparency becomes increasingly critical.
In total, five protocols experienced exploits linked to unverified smart contracts, underscoring significant security risks in the sector as losses reached $36.7 million.(Source)
