The study states that flash loan attacks resulted in DeFi a loss of silver 1,200,000,000 US dollars between the years 2020 and 2014.2024

Flash-like credit attacks generated damages1.211 in the billions of dollars from 72 incidents during the year2020 to2024

Damage and scale of the event.
A study in the Journal of Financial Crime found that flash loan attacks caused damages1.211 US$1 billion from 72 incidents between February2020 and July2024 on systems,DeFi this fractional damage accounted for18.44% of the value6.568 of billions of dollars lost to hackingDeFi accomplished by a total of 254 events during the same period. The researchers, Professor Tim Hall of the University of Winchester and Remo Stieger, former partners at SyntiFi, Switzerland's risk intelligence company, noted that "we are now seeing unprecedented crime", with some cases potentially involving large amounts of money being stolen, mainly tens of millions of dollars worth of banknotes".2026

Flash loans allow users to borrow assets from a liquidity pool without collateral. If repaid within the same transaction block, an attacker can use this tool to access large amounts of funds needed for exploits. The study found that more than 80% percent of losses from flash loan attacks occurred on Ethereum, with reported loss values ranging between 80,000 US$197 million and 10 million USD or higher, resulting in greater overall losses 88% than all losses caused by flash loan attack.

The kind of attacks that add value.
The researchers identified 14 types of flash loan attacks in two broad groups: those that distort price data or the price feed, and those that exploit loopholes in protocol logic. After-group attacks are less common but cause higher average damages. The ratio of losses from a specific attack to the protocol increased from 28% of the loss from a flash loan attack between February 2020 to January 2022 55% to between February 2022 to July 2024 Four events caused more damage.81% Price oracle attacks, donate function logic exploits, reentrancy attacks and one governance attack cost US$181 million.0.5%

A statement from the compromised platform.
The research cited interviews with one of the platforms that was heavily hit by a flash credit attack, which the platform asked not to be named. A representative for the platform stated that the loophole had been used through both our team and several inspectors and ignored on the blockchain for more than a year. Hall said that after being attacked, the attackers began tampering with the social media platform, which allowed some victims to contact and describe the severe impact of losing money.

The impact on the industry and current events.
The movement of attacks is characterized by an ascending and descending phase, which the authors note reflects that platforms improve security after being hacked while attackers seek new vulnerabilities. Research has found excess damage0.5% to value recovered through flash credits in just six months, and use of flash credit continues to grow so the author views these attacks as significant threats with increased complexity and predictability but not a threat that makes them non-existent.DeFi

After the study period of research was over, distributed ledger exchange platform Bunni announced its shutdown in October2025 after being exploited for US$17 million worth of flash credits,8.4 stating that it could not afford to safely re-open. Hall stated: "We want this to be seen as more than just academic research", and "the analysis we offer is useful to the cryptocurrency industry, regulators, and law enforcement agencies".DeFi For users, this data reflects a market vulnerability where small hacks can turn into massive losses even with the use of flash credit combined.DeFi