Flash Loan Attacks Drained $1.2B From DeFi Between 2020 and 2024: Study
What Decrypt reports, why it matters and what remains unconfirmed.

The story in one view
- Reported by
- Decrypt
- Coverage lens
- Security and resilience
- Published
- Evidence status
- Single attributed publisher report
What Decrypt reports
Attacks grew more sophisticated and less predictable over the period, according to researchers who scanned more than 20 billion transactions.
The immediate significance
The report describes direct security exposure for users, funds or software. The immediate significance is the potential harm; the confirmed scale and any protective action require technical or primary evidence beyond the publisher summary.
What remains unknown
- The publisher summary does not contain the complete victim, transaction or technical evidence.
- The report does not establish the final loss or exposure, or whether remediation is complete.
- No matched primary document independently supporting the central claim is linked to this page.
Related Articles And Podcast
Further reporting and analysis on this story.

BIS Says Tokenised Deposits Should Carry Everyday Payments
The dividing line is not whether money uses a blockchain. It is whether different claims settle at par, remain interoperable and have a backstop under stress. That distinction could shape which form of tokenised money banks, regulators and payment firms build around.
Read the full articleThe $350,000 Crypto Sting: How ZachXBT Infiltrated a North Korea-Linked Laundering Network | Daily Crypto Deep Dive
What happens after somebody steals more than a billion dollars in cryptocurrency?
Read the notes and play the episode
