TLDR
- Manuel Aráoz declared DeFi protocols unsafe due to escalating exploit threats.
- OpenZeppelin emphasized that traditional audits fall short in protecting DeFi platforms.
- DeFi exploits drained approximately $630 million throughout April 2026.
- AI-powered coding tools enable attackers to discover smart contract weaknesses faster.
- Total value locked in DeFi plummeted following multiple high-profile security breaches.
Manuel Aráoz, co-founder of OpenZeppelin, has declared that he views “all of DeFi” as unsafe following the escalating wave of attacks targeting decentralized finance platforms.
On May 26, Aráoz shared his concerns through a post on X, revealing that he had recommended friends and family withdraw from DeFi investments, including positions in prominent protocols like Aave, MakerDAO, and Compound. His warning stems from what he identifies as a fundamental imbalance between offensive and defensive capabilities in smart contract security.
“Coding agents are superhuman at finding vulnerabilities, and smart contract security is too asymmetric,” Aráoz wrote. “Defenders need to fix every bug while attackers need just one exploit to steal funds.”
His statement arrived amid a dramatic surge in DeFi-related breaches throughout April. Information from The Block and DefiLlama revealed that DeFi protocols hemorrhaged nearly $630 million during April. This total represented the most severe monthly damage since the Bybit breach in February 2025.
Leading Platforms Hit by Devastating Breaches
April witnessed attacks on several prominent DeFi protocols. Kelp DAO suffered losses approaching $293 million when attackers exploited weaknesses in a cross-chain bridge. Drift experienced approximately $285 million in damages following a prolonged social engineering campaign spanning six months.
Euler faced a devastating breach that siphoned roughly $197 million from the protocol. Intelligence reports connected both the Drift and Kelp DAO incidents to hacking operations sponsored by North Korea.
DefiLlama tracking revealed 27 separate DeFi exploit incidents during April. The pattern extended into May with 25 additional exploits documented, though financial damages decreased compared to the preceding month.
Recent victims included Verus Network, which lost $11.6 million after its Ethereum bridge was penetrated. Prediction market platform Polymarket disclosed a $573,200 security compromise potentially involving a leaked private key associated with internal wallet management.
Artificial Intelligence Amplifies Security Challenges
Aráoz highlighted that artificial intelligence technologies are transforming the threat landscape facing DeFi developers and security professionals. He noted that sophisticated coding agents can analyze smart contract code rapidly and detect vulnerabilities with unprecedented efficiency.
His cautionary message echoes widespread apprehension throughout the cryptocurrency industry that AI-enhanced attacks could accelerate the pace of exploits. Security organizations have increasingly shifted focus toward continuous monitoring and comprehensive defense systems rather than depending exclusively on smart contract audits.
OpenZeppelin introduced a framework termed the “Four Layers of DeFi Risk” on May 12. This framework aims to guide institutions in evaluating security risks associated with decentralized finance protocols and digital asset holdings.
The framework emphasized that audits alone prove insufficient for mitigating risks in DeFi ecosystems. It advocated for continuous threat surveillance, operational safeguards, and multiple security tiers as components of a comprehensive defensive approach.
Market Engagement Falls Following Security Incidents
The recent wave of exploits has influenced participation throughout the DeFi marketplace. Statistics indicated that total value locked across DeFi protocols decreased by approximately 14% since mid-April.
DeFi TVL contracted from nearly $172 billion to roughly $148 billion during this timeframe. The reduction occurred as market participants responded to persistent security breaches affecting major protocols.
Developers and security organizations persist in advancing improved protection mechanisms as attack techniques grow more sophisticated. Aráoz’s statements have intensified ongoing debates regarding whether existing DeFi security frameworks can match the speed and automation of modern exploit methodologies.
Get 3 Free Stock Ebooks
Discover top-performing stocks in AI, Crypto, and Technology with expert analysis.
- Top 10 AI Stocks - Leading AI companies
- Top 10 Crypto Stocks - Blockchain leaders
- Top 10 Tech Stocks - Tech giants
