CuraSec

Learn archived

DeFi Audit Scope Gap: 67.6% of H1 2026 Attack Paths Outside Audit Coverage

2026-08-17 13:03 UTC · arXiv cs.CR · read the source ↗ #defi#smart-contracts#audit-scope
  • Engineer — Skip
  • SOC/IR — Skip
  • Leader — Learn: Research across 135 DeFi incidents shows that the ‘audited’ label routinely overstates project-wide assurance — 67.6% of attack paths fell outside all identified pre-incident audit scopes. Useful context when evaluating what your own audit attestations actually cover in board or customer conversations.
This entry was curated and judged by AI (Claude) with automated enrichment (CISA KEV / EPSS / public PoC). Verify against the original source before acting. Found a bad verdict? Report it — confirmed errors go to the corrections log.