Cryptorank New Cross-Chain Vulnerabilities Threaten DeFi Security Across Multiple Blockchains
Article Content
- •DeFi losses decreased from $2.62 billion in 2022 to $534 million in 2024.
- •New cross-chain vulnerabilities can drain funds across multiple networks simultaneously.
- •The Balancer V2 exploit in November 2025 drained $128 million due to a shared code flaw.
Decentralized finance (DeFi) has seen a significant reduction in losses, dropping from $2.62 billion in 2022 to $534 million by 2024. However, new vulnerabilities have emerged, particularly in cross-chain deployments, where a single flaw can impact multiple networks simultaneously. The Balancer V2 exploit in November 2025 exemplified this risk, draining $128 million across six chains due to an arithmetic precision flaw. As protocols increasingly share code across Ethereum, Arbitrum, Base, Polygon, Sonic, and OP Mainnet, the potential for systemic failures has risen. Bespoke protocol logic exploits accounted for 89.1% of DeFi losses in 2025, highlighting the shift in attack vectors. Despite the overall decline in total losses, the number of unique incidents rose to 83 in 2025, indicating a growing frequency of attacks with lower individual impacts. The evolving threat landscape necessitates enhanced security measures for multi-chain protocols.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track Balancer in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…