RESEARCH: Global Smart Contract Exploits & DeFi Hacks (Last 24 Hours)

Executive Summary

Multiple DeFi hacks and smart contract exploits continue to drain millions from protocols daily. In the last 24 hours, major incidents include a THORChain exploit and a Verus bridge breach, collectively exceeding $20M in losses. The root causes include cross-chain bridge vulnerabilities, liquidity pool manipulation, and smart contract logic flaws. These incidents highlight persistent weaknesses in oracle integrations, access controls, and bridge security that attackers are actively exploiting across multiple blockchains.

Regulatory Framework

No applicable regulatory bodies or laws are relevant to this research task, which focuses exclusively on security incidents rather than jurisdictional regulation.

Licensing Requirements

No licensing requirements apply to this security incident research task.

AML/KYC Requirements

No AML/KYC requirements are applicable to this technical security analysis.

Enforcement Actions

No enforcement actions are reported for these incidents as they are ongoing security breaches under investigation.

Tax Treatment

No tax implications are relevant to this incident-focused research.

Key Gaps & Risks

• The ongoing wave of DeFi hacks demonstrates that bridge protocols remain the weakest link in blockchain security, with attackers consistently exploiting cross-chain messaging vulnerabilities Two DeFi exploits drain over $20M this weekend| Cybernews
• Security experts warn that AI-powered hacking tools are becoming "superhuman" at identifying and exploiting smart contract vulnerabilities faster than human auditors can patch them DeFi isn't safe anymore because AI is becoming 'superhuman' at hacking, onetime OpenZeppelin founder says
• Institutional confidence in DeFi is eroding as the frequency and sophistication of exploits outpace the risk-adjusted yields that protocols can offer DeFi hacks shake institutional confidence as risks outpace yields
• The total value locked in DeFi continues to be threatened by the lack of standardized security audits and real-time monitoring for suspicious smart contract interactions DeFi Hacks Continue to Highlight Weaknesses in Crypto Ecosystem Security : Analysis
• Blockchain analytics firms like Elliptic are raising significant capital ($120M) to develop AI-driven threat detection, indicating the market recognizes that traditional security approaches are insufficient Elliptic raises $120 million backed by Nasdaq, Deutsche Bank as AI reshapes crypto security

Sources

Two DeFi exploits drain over $20M this weekend| Cybernews DeFi isn't safe anymore because AI is becoming 'superhuman' at hacking, onetime OpenZeppelin founder says DeFi hacks shake institutional confidence as risks outpace yields DeFi Hacks Continue to Highlight Weaknesses in Crypto Ecosystem Security : Analysis Elliptic raises $120 million backed by Nasdaq, Deutsche Bank as AI reshapes crypto security DeFi Hacks & Exploits Database - DefiLlama DeFi Hacks Database | Web3 Attacks & Crypto Exploits Tracker Why DeFi Keeps Losing Millions to Exploits Hack Radar | Real-Time DeFi Hacks & Blockchain Security Incidents - Cecuro Crypto hacks & smart contract exploits index Crypto Hacks News | CryptoSlate ‘All DeFi unsafe’ claim sparks AI security debate after April hack surge