Attacks on third-party infrastructure cost DeFi over $630M in 2026's first seven months. KelpDAO lost $292M, Drift Protocol $285M. Security firms plan new oracle verification frameworks by Q3.
Alpha Score of 47 reflects weak overall profile with weak momentum, weak value, strong quality, moderate sentiment.
Attacks on third-party infrastructure have cost the DeFi ecosystem more than $630 million in the first seven months of 2026, according to data compiled by blockchain security firms. The single largest incident was a $292 million theft from KelpDAO after attackers compromised external RPC nodes, allowing false cross-chain bridge messages to be validated without independent checks.
On July 22, an algorithmic stablecoin collapsed by more than 99% following price oracle manipulation. The attacker injected false Bitcoin price data into the Balance Coin protocol to drain roughly $912,000 in assets. The manipulation triggered automatic liquidations of collateral positions that had been healthy before the incident.
Earlier in July, the Ostium protocol lost $23.75 million after adulterated price reports with authorized signatures were submitted. Preliminary analysis suggests the oracle signer's credentials were compromised by an outside party. Bonzo Finance lost $9 million in the same month due to a verification flaw in an external oracle contract that let overvalued collateral be used to withdraw liquid funds.
In April, Drift Protocol lost $285 million after malicious actors assigned artificial prices to worthless tokens. The attackers used an oracle under their control to back the operation, according to documentation of the case. YieldBlox recorded $10.2 million in bad debt in February 2026, and Makina Finance lost $4.1 million in January following a flash loan attack.
Blockchain cybersecurity firms plan to publish a detailed report by the end of the third quarter of 2026, featuring new verification frameworks for oracles. The report is expected to address how protocols can independently verify price data rather than relying on single points of failure in the third-party infrastructure chain.
Drafted by a large language model from the source reporting linked above, then screened by automated publishing checks. It is not read by a journalist before publication. Some articles cite our Alpha Score. Verify prices and figures against the original source. Educational coverage, not personalized advice.