DeFi hacks made up 60%+ of the crypto hack and theft volume in 2021 and 47% of major fraud and misappropriation; criminals netted ~$240M from DeFi-related hacks
Adam London / CipherTrace :
Context & Ripple Effects
When CipherTrace measured H1 2020, DeFi was already 40% of all crypto theft at $51.5M; the new figures show that share hardening into a majority — over 60% of 2021 hack and theft volume and 47% of major fraud and misappropriation, worth roughly $240M to attackers.
The report lands alongside [[a:974642|Chainalysis' finding that criminal crypto addresses took in a record $14B in 2021, up from $7.8B, with DeFi scams cited as the driver]] — together they mark DeFi as the sector's dominant attack surface just as total transaction volume surged 567% YoY.
First-order effects
- DeFi protocol developers and their users are now the primary targets of crypto crime, absorbing ~$240M in hack proceeds during 2021 — a direct cost borne by treasuries, liquidity providers, and depositors on exploited protocols.
Second-order effects
- Chain analytics firms like CipherTrace gain a commercial opening to sell smart-contract risk monitoring, as the $14B criminal-inflow record pressures exchanges and compliance teams to screen DeFi-originated funds more aggressively.
Third-order effects
- The trajectory held: [[a:834863|2022 went on to become the biggest year for crypto hacking to date at $3.8B, concentrated in DeFi and attributed partly to North Korea-tied groups like Lazarus]] — pointing toward state-scale adversaries treating unaudited DeFi code as a standing revenue source and regulators citing exactly these loss figures when framing oversight.
The trend: Crypto crime is migrating from exchange custodies to DeFi smart contracts, with each year's loss totals feeding both attacker targeting and the regulatory case for protocol-level oversight.