PANews reported on May 27th that, according to The Block, Manuel Aráoz, co-founder of crypto security firm OpenZeppelin, stated that he now believes "all DeFi" is insecure and has been advising friends and family to exit all DeFi positions, including low-risk positions in blue-chip protocols such as Aave, MakerDAO, and Compound. Aráoz pointed out that the asymmetry between attackers and defenders in security incidents is intensifying; programming agents possess superhuman abilities to discover vulnerabilities, requiring defenders to fix every single one, while attackers only need a single exploit to steal funds.

Nearly $630 million was stolen from DeFi protocols in April, the worst month since the $1.5 billion theft from Bybit in February 2025. Attacks on Drift and Kelp DAO resulted in losses of $285 million and $293 million respectively, both attributed to North Korean hackers. Since mid-April, total value locked in DeFi has decreased by approximately 14%, from about $172 billion to $148 billion.