DeFi Audit Scope Gap: 67.6% of H1 2026 Attack Paths Outside Audit Coverage

Mon, 17 Aug 2026 13:03:16 +0000

Engineer — Skip
SOC/IR — Skip
Leader — Learn: Research across 135 DeFi incidents shows that the ‘audited’ label routinely overstates project-wide assurance — 67.6% of attack paths fell outside all identified pre-incident audit scopes. Useful context when evaluating what your own audit attestations actually cover in board or customer conversations.

Audit-Scope on CuraSec