DeFi exploit losses plunged 74% in 2025 from 2022 peak, Immunefi report finds

The total value lost to exploits in decentralized finance (DeFi) protocols fell to $680.3 million in 2025, marking a 74% decline from the $2.62 billion recorded in 2022, according to a new report from Web3 security firm Immunefi. The data, cited by The Block, indicates that despite widespread industry concern about security risks tied to artificial intelligence, the DeFi ecosystem is becoming measurably safer.

Steep decline in both total losses and average incident cost

The report highlights a parallel drop in the average loss per exploit, which fell 75% from $6 million in 2022 to $1.5 million in 2025. This suggests that not only are there fewer large-scale attacks, but the financial impact of each successful exploit is also shrinking. Immunefi’s findings cover a broad range of on-chain protocols, lending platforms, and cross-chain bridges that have historically been prime targets for attackers.

AI threats remain theoretical as real-world security improves

Much of the recent discussion around DeFi security has centered on the potential for AI-powered attacks, including automated vulnerability scanning and sophisticated social engineering. However, the Immunefi data suggests that actual security improvements—such as better auditing practices, faster bug bounty programs, and more robust smart contract standards—are outpacing the threat landscape. The report notes that the DeFi sector is increasingly secure, even as AI tools become more accessible to malicious actors.

What this means for the broader crypto ecosystem

For institutional investors and retail users alike, the downward trend in exploit losses signals a maturing market. Security remains a top concern for DeFi adoption, and the data provides concrete evidence that the industry’s investment in protective infrastructure is yielding results. It also shifts the narrative from fear-driven headlines to a more balanced view of risk and reward in decentralized finance.

Conclusion

The 74% reduction in DeFi exploit losses from 2022 to 2025 represents a significant milestone for Web3 security. While no system is immune to attack, the Immunefi report underscores that the ecosystem is learning from past incidents and building more resilient protocols. Continued vigilance and proactive security measures will be essential to maintain this positive trajectory.

FAQs

Q1: What caused the 74% drop in DeFi exploit losses?
The decline is attributed to improved smart contract auditing, faster bug bounty programs, better incident response practices, and overall maturation of security infrastructure across the DeFi ecosystem.

Q2: Are AI-powered attacks a real threat to DeFi?
While AI tools are a growing concern, the Immunefi report indicates that actual security improvements have so far outpaced AI-driven threats. The industry is actively preparing for potential AI-enabled attacks.

Q3: Which types of DeFi protocols were most affected by exploits in 2025?
The report covers a wide range of protocols, but cross-chain bridges and lending platforms have historically been the most targeted. The overall trend shows declining losses across all major categories.