DeFi Price Manipulation Exploits Soar to Record High
Price manipulation exploits in DeFi have nearly tripled year over year, according to TRM Labs. The company reported 32 such incidents through August 2026, shattering the previous annual record of 12 set in 2025.
The attacks now represent roughly one in every eight crypto hacks, up from one in seventeen in 2022. Most exploits follow a familiar template: an attacker uses a flash loan to temporarily inflate the price of a low-liquidity token, then uses that artificially pumped token as collateral to borrow real assets from a lending protocol.
TRM Labs attributes the record surge to the proliferation of protocols relying on low-liquidity oracles. The attacks are cheap and repeatable, which explains why the total dollar value stolen hasn't spiked proportionally to the number of incidents. The median loss per hack in the first half of 2026 sat at approximately $219,000.
Two recent attacks demonstrate the varying outcomes of these exploits. On August 30, an attacker targeted Tectonic, a lending protocol on the Cronos chain, inflating the price of its governance token TONIC by roughly 100 times. The Cronos chain executed a rollback, clawing back most of the stolen funds.
Total value locked across lending protocols now approaches $50 billion, a 56% increase over the past two years. Active loans are nearing $29 billion, spread across more than 570 protocols.