NewsMeter
Millions of dollars in customer funds have been drained from defunct decentralized finance protocols, with hackers exploiting codebases that passed their original security reviews.
Researchers warn that AI is now compressing the period in which a completed audit can be trusted. The two pressures, stale certified code and faster automated vulnerability discovery, are arriving together.
Defunct protocols as a recurring target Hackers have found a repeatable approach in the codebases of protocols that have shut down or gone dormant.
The code remains deployed on-chain; the audit certification stays on file. The team that could respond to a newly discovered exploit class is no longer present.
Keep reading