How DeFi Hacks Have Changed in the Last 5 Years & What This Means for Protocols
DeFi security has changed dramatically over the last five years.
Attackers are no longer relying on obvious bugs or naïve mistakes.
Today’s exploits are quieter, more patient, and increasingly systemic: supply-chain compromises, proxy-layer abuse, and attacks that blur the line between onchain and offchain infrastructure.
In this 45-minute discussion, Certora’s CEO Seth Hallem will sit down with the Ofek Ray Orlev, Security Researcher, to unpack how modern DeFi attacks actually work and what the evolving threat landscape means for protocol teams looking to future-proof their platform.
Rather than revisiting well-known historical hacks, the conversation will focus on recent findings that illustrate how attackers have grown in sophistication, including:
CPIMP Attacks (Clandestine Proxy in the Middle of Proxy)
A new class of vulnerabilities that exploits proxy patterns to invisibly intercept and manipulate contract logic at scale.GlassWorm: the First Crypto-Targeted, Self-Propagating Worm to attack the NPM Supply-Chain
A self-propagating worm affecting widely used NPM/OpenVSX packages and specifically targeting 49 different cryptocurrency wallet extensions to drain funds, highlighting why security no longer stops at smart contracts.
We’ll close with a forward-looking discussion on why point-in-time audits are no longer enough and why leading protocols are moving toward continuous, end-to-end security partnerships.
Who this is for:
Protocol founders, engineers, security researchers, and anyone responsible for making high-stakes systems resilient.
We hope you’ll join us!
Thanks,
The Certora Team.