Flash Loan Attacks Cost DeFi $1.211B, Study Finds
Flash loan attacks caused $1.211 billion in DeFi losses across 72 incidents between February 2020 and July 2024, according to a University of Winchester study published in the Journal of Financial Crime. Researchers Tim Hall and Remo Stieger analysed 20.63 billion transactions across seven blockchains and identified 254 successful DeFi attacks, which caused total losses of $6.568 billion. Flash loan attacks accounted for 18.44% of that damage, with more than 80% of losses occurring on Ethereum. Flash loans are legitimate, uncollateralised loans that must be repaid within a single transaction. Attackers use the temporary liquidity to exploit smart contracts, price oracles, protocol logic and governance systems. Price-oracle manipulation, donate-function exploits, reentrancy and one governance attack caused more than 81% of flash loan losses. Logic exploits became increasingly important, rising from 28% of losses in the earlier period to 55% by July 2024. Individual attacks caused between $80,000 and $197 million in damage, while incidents exceeding $10 million generated more than 88% of total losses. The study said security improvements reduced some activity, but flash loan attacks became more sophisticated and unpredictable. Bunni later shut down in October 2025 after an $8.4 million flash loan-related exploit. For traders and liquidity providers, the findings reinforce the need to assess audits, total value locked, oracle design, smart contract risk and a protocol’s exploit history. The research is unlikely to create a direct price catalyst, but it could support stronger security standards, on-chain monitoring and regulatory scrutiny across DeFi.
Neutral
The study does not introduce a new exploit affecting a major token, so its immediate impact on cryptocurrency prices is likely to be limited. Ethereum faces the clearest risk exposure because more than 80% of flash loan losses occurred on the network, but the findings alone are unlikely to trigger sustained ETH selling. In the short term, traders may react cautiously to reports of new exploits, increasing volatility for affected DeFi tokens and reducing liquidity in vulnerable protocols. In the longer term, repeated flash loan attacks could weaken confidence in DeFi, raise the cost of capital and encourage users to favour protocols with stronger audits, transparent oracle systems and better monitoring. Conversely, improved security standards could support more resilient DeFi infrastructure. Overall, the research is a risk warning rather than a direct bullish or bearish price catalyst, making a neutral market view appropriate.