Flash Loan Attacks Took $1.2 Billion From DeFi Over Four Years, Study Finds

Flash loan attacks drained $1.211 billion from decentralized finance platforms between February 2020 and July 2024, according to research published in the Journal of Financial Crime. The paper, by Professor Tim Hall of the University of Winchester and Remo Stieger, a former partner at Swiss risk intelligence firm SyntiFi, catalogues 72 flash loan attacks within a larger set of 254 successful exploits of DeFi protocols over the four-and-a-half-year window, as reported by Decrypt.

Those 254 attacks caused $6.568 billion in total losses, the authors found. The flash loan subset accounts for 18.44% of that figure — the share Decrypt derives from the paper, and consistent with $1.211 billion against the $6.568 billion total.

Flash loans are uncollateralized loans that are borrowed and repaid inside a single blockchain transaction: if the funds aren't returned by the end of the transaction, the whole thing reverts as if it never happened. That mechanic is legitimate on its own, but attackers use the temporary access to large sums to manipulate prices, drain liquidity pools, or exploit flawed protocol logic — all before the transaction settles. The study's framing treats these 72 incidents as a distinct category of attack rather than ordinary theft.

Beyond the headline totals, the specifics of individual incidents, the protocols hit, and the methodology behind the $6.568 billion tally weren't detailed in the available reporting.

Key facts

• $1.211 billion drained via flash loan attacks, Feb 2020–Jul 2024 — Journal of Financial Crime study (Hall, Stieger), via Decrypt.
• 72 flash loan attacks identified among 254 successful DeFi exploits — same study.
• $6.568 billion in total DeFi losses across those 254 attacks — same study.
• Flash loans = 18.44% of total losses — figure per Decrypt's reading of the study.
• Authors: Prof. Tim Hall (University of Winchester) and Remo Stieger (ex-partner, SyntiFi) — Decrypt.

The real-world read This is academic research, not a vendor report or sponsored post — no marketing to discount. But two caveats. First, co-author Stieger is a former partner at a risk intelligence firm, an industry that sells DeFi security services; that isn't a conflict, but it's the adjacent commercial context. Second, the only account of the study here is Decrypt's secondary write-up; the 18.44% figure is Decrypt's arithmetic against the paper's totals rather than a quoted line, and the underlying dataset, incident list, and loss methodology aren't visible without the paper itself. The headline on the piece also pairs this study with a separate item about a Binance-linked hacker seeking exit ramps — unrelated to the flash loan findings, and no details on that were provided here. Treat the $6.568 billion and $1.211 billion as the researchers' tallies for a specific window, not a running total of all DeFi losses.

Opinion, and whose The study implicitly argues flash loans are a durable, structurally distinct attack vector worth isolating in the data — the authors' framing, per Decrypt. No forecast or recommendation is attached in the reporting.

Sources

• Decrypt (Tier 2, secondary) — reported the study's figures and author details; headline bundled an unrelated Binance-hacker item. Not marketing.
• Journal of Financial Crime, Hall & Stieger (primary, peer-reviewed) — the underlying study; not independently reviewed here beyond Decrypt's account.

This is information, not financial advice.