October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk3 min

Flash Loan Attacks Drained $1.2 Billion From DeFi Between 2020 and 2024, Study Finds

Hall and Stieger estimate 72 flash-loan attacks caused $1.211 billion in DeFi losses from February 2020 through July 2024, across a defined seven-chain dataset.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A study by Tim Hall and Remo Stieger estimates that 72 flash-loan attacks caused $1.211 billion in losses between February 2020 and July 2024. That is a historical estimate for the incidents and chains the researchers analyzed—not a live total of DeFi losses or a count that includes attacks after July 2024.

What the $1.211 billion figure includes

Hall and Stieger’s peer-reviewed Journal of Financial Crime article, accepted and in press on 7 August 2026, identifies 72 flash-loan attacks with $1.211 billion in losses during the study period. Across the broader set of 254 successful DeFi attacks they identified, losses totaled $6.568 billion. The flash-loan incidents are a subset of that broader attack count, not an additional category to add to it. University of Winchester research record

As an Amazon Associate I earn from qualifying purchases.

The study covers February 2020 through July 2024. Its figures therefore do not describe later incidents, and should not be read as an up-to-date cumulative loss tracker.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How the researchers assembled the dataset

The University of Winchester says the analysis examined seven chains on which flash loans are available: Ethereum, Base, Optimism, Arbitrum, BNB Chain, Avalanche, and Polygon. The researchers used SyntiFi’s on-chain risk intelligence engine to scan 20.63 billion blockchain transactions. These details describe the study’s dataset; they do not establish that every attack on every chain was detected. University of Winchester institutional release

#1 Best Overall
Ledger Nano X - Classic Crypto Wallet with Bluetooth | Compact, go anywhere, 1.1" display. Desktop & iOS/Android compatible
  • Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
  • Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
  • Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
  • Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.

How a flash loan can be used in an attack

A flash loan lets a borrower access cryptocurrency without collateral, provided the borrowed amount is repaid within the same blockchain transaction. That constraint makes the loan a source of temporary capital, not by itself a vulnerability or an attack.

For example, an attacker could borrow funds, use them to move a token’s price on one venue, then exploit a separate protocol that relies on that temporarily distorted price. The attacker may reverse the market move, repay the loan before the transaction ends, and keep assets taken from the vulnerable protocol. This is one possible price-manipulation path, not a description of every incident in the study.

Rank #2
Sale
TANGEM Crypto Wallet Pack of 3 – Trusted Cold Storage Hardware Wallet | 100% offline; Bitcoin, Ethereum, NFTs & altcoins; No seed phrase; NFC; Pack of 3, Self custody wallet
  • Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
  • Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
  • Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
  • Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
  • Trusted by 6 million users worldwide (4.9 App Store, 4.8 Google Play) - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets

The crucial weakness lies in the protocol’s handling of prices, rules, or state changes. The loan can make a large or rapid exploit possible, but a sound protocol should not become vulnerable simply because a user can briefly borrow a large amount.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Two broad kinds of weakness, 14 attack types

Hall and Stieger identify 14 flash-loan attack types grouped into two broad families: manipulation of price feeds and exploitation of flaws in protocol logic. The first family targets how a protocol determines an asset’s value. The second takes advantage of unintended behavior in how the protocol’s code processes transactions or enforces its rules. University of Winchester research record

Rank #3
TANGEM Crypto Wallet Pack of 2 – Trusted Cold Storage Hardware Wallet
  • Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
  • Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
  • Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
  • Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
  • Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets

What secondary coverage reports about where losses came from

Decrypt’s 6 October 2026 report, attributing the figures to the study, says more than 80% of flash-loan losses occurred on Ethereum. It also reports that four attack types—price oracle attacks, donate-function logic exploits, reentrancy attacks, and one governance attack—accounted for more than 81% of losses. These are shares reported in secondary coverage of the paper, rather than figures independently confirmed here against its full text. Decrypt report, 6 October 2026

The same report says logic exploits made up 28% of losses from February 2020 through January 2022, rising to 55% from February 2022 through July 2024. The comparison concerns the share of flash-loan losses attributed to logic exploits in those two periods; it is not a comparison of total loss amounts.

Rank #4
DCENT Hardware Wallet | Biometric Cold Storage, Bluetooth, Multi-Crypto
  • EAL5+ CERTIFIED SECURE ELEMENT + FINGERPRINT PROTECTION — Your private keys stay encrypted offline on a certified EAL5+ chip, the same security tier used in EMV bank cards. Built by DCENT, securing crypto since 2018. Fingerprint authentication adds a second layer no PIN-only wallet can match.
  • 10,000+ ASSETS NATIVE ON 100+ BLOCKCHAINS — Hold Bitcoin, Ethereum, XRP, Solana, Cardano, popular stablecoins (USDT, USDC), and NFTs in one wallet. No third-party apps, no fragmented setup — every supported asset works straight out of the box.
  • TAP-TO-SIGN MOBILE EXPERIENCE — Pair your wallet with the DCENT mobile app over Bluetooth. Manage tokens, review transactions, and access in-app swap features directly from your phone — no cables, no desktop required.
  • WEB3 & dAPP ACCESS VIA METAMASK — Connect to MetaMask and other browser extension wallets to manage NFTs, claim airdrops, and access dApps. A large screen and intuitive 4-button interface keep every transaction clearly visible before you sign.
  • SEAMLESS FIRMWARE UPDATES & 30-DAY MONEY-BACK GUARANTEE — Apply security updates without resetting your wallet or migrating funds. Backed by Amazon's 30-day money-back guarantee — your purchase is risk-free.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What the study does—and does not—show

The findings show that flash loans featured in a substantial set of costly DeFi attacks during the period studied. They do not mean flash loans are inherently malicious: the mechanism enables within-transaction borrowing, while the attack depends on a weakness in a protocol or its price inputs.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The scope matters when interpreting the headline number. It is an estimate drawn from an analysis of transactions across seven named chains and a study window that ends in July 2024. It is not a complete measure of all DeFi crime, a guarantee that every relevant incident was captured, or a current total for the ecosystem.

Best Value
Trezor Safe 7 Crypto Hardware Wallet with Bluetooth for Android/iOS/Desktop
  • Dual-chip architecture for maximum protection: The next-gen, fully auditable TROPIC01 chip works alongside a certified EAL6+ Secure Element—completely NDA-free—to deliver radically transparent, industry-leading defense against physical attacks.
  • Quantum-ready security: Get protection against future threats with the first-ever hardware wallet designed with quantum-ready architecture.
  • See every detail with confidence: Our largest high-resolution color touchscreen makes it easy to navigate your assets, review transactions and manage your coins with clarity.
  • Wireless freedom with encrypted Bluetooth control: Manage, buy, swap and stake securely using Trezor Suite on desktop or mobile. Qi2-compatible wireless charging keeps your Trezor powered up. No cables required—security meets convenience.
  • Works seamlessly with Android, iOS and desktop: Connect wirelessly or via USB-C to your phone or computer. Manage your crypto anywhere with our companion Trezor Suite app.

Professor Tim Hall of the University of Winchester described the broader stakes this way: “We now are seeing crimes that we have never seen before and ones that are capable of stealing mind-boggling sums of money, often in the tens of millions of dollars.” University of Winchester institutional release

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.