DeFi exploit losses plunge 74% from 2022 peak as AI…

Blockchain security platform Immunefi reports that DeFi exploit losses have fallen 74% from their 2022 peak, marking what the firm calls a structural improvement in the sector's security posture rather than a temporary lull. The decline coincides with a rapid adoption of AI-driven auditing tools and automated vulnerability detection across major protocols.

Why it matters

The 2022 peak was catastrophic for DeFi — billions were drained through bridge exploits, flash-loan attacks, and rug pulls, shaking institutional confidence in the entire sector. A sustained 74% reduction in losses signals that the security infrastructure around smart contracts is maturing meaningfully. Immunefi, which administers bug bounty programs for hundreds of protocols, is well-positioned to track this trend — their data reflects both disclosed exploits and near-miss bounty payouts that never became headlines.

The AI angle is significant: both attackers and defenders are deploying machine-learning tools to scan bytecode and simulate attack vectors at scale. That Immunefi frames the current environment as an "arms race" rather than a solved problem is an important qualifier — the improvement is real, but the threat surface is also evolving.

Market impact

Falling exploit losses reduce the risk premium embedded in DeFi yields and make the sector more attractive to institutional allocators who have historically cited security as a primary barrier. Protocols with clean audit records and active bug bounty programs on Immunefi stand to benefit most from a re-rating of DeFi risk. Watch for this narrative to support TVL recovery across Ethereum and broader EVM-compatible chains.