Immunefi Report Shows 74% Drop in DeFi Hack Losses by 2025

Web3 security firm Immunefi has released its "2026 Ecosystem Vulnerability Audit Report," revealing a significant reduction in losses from DeFi protocol hacks. According to Odaily, the losses have decreased by 74% from a peak of $2.62 billion in 2022 to approximately $680.3 million in 2025. The report highlights a notable decline in the median loss per attack, dropping from $6 million in 2022 to $1.5 million in 2025, indicating an improvement in overall security levels. Additionally, the proportion of losses from bridge exploits has sharply decreased from 73% in 2022 to 3% in 2025, while flash loan attacks have reduced from 54% to less than 1%. Infrastructure-related risks, such as private key leaks and database attacks, have also seen a decline, from 30.7% in 2022 to 10.3% in 2025. Immunefi attributes this to ongoing enhancements in oracle design, reentrancy attack protection, and access control standards, contributing to a safer DeFi ecosystem. However, the report notes a slight increase in losses to $680.3 million in 2025, primarily due to the rising complexity of multi-chain systems and a few high-severity incidents. Meanwhile, the number of independent security events continues to grow, reflecting an expanding attack surface.