Crypto security crisis persists as audits fail to stop hacks
Despite a tripling of code audits since 2022, crypto losses from hacks remain high, as most attacks target human vectors outside audit scope.
The crypto sector's cybersecurity crisis persists despite a sharp increase in code audits, as most successful attacks bypass the audit surface entirely. According to research from Oak Security, the industry has tripled its number of code audits since 2022, yet neither the total number of incidents nor the amount stolen has declined significantly. Malicious actors, including North Korea's Lazarus Group, have stolen over $2.2 billion since 2022.
The core issue is a mismatch between audit focus and actual attack vectors. Oak Security's research shows that the majority of successful exploits target human vectors—such as phishing, social engineering, and private key theft—rather than smart contract vulnerabilities. These attack methods completely bypass the code-level protections that audits are designed to catch. As a result, even with more audits, the industry remains vulnerable to the same types of breaches.
For cryptocurrency traders, this highlights the importance of security beyond smart contract audits. While audits remain a critical tool, they are not a panacea. Traders should be aware that exchange hacks, wallet compromises, and DeFi exploits often stem from operational security failures. On NowPrice's live crypto dashboard, traders can monitor price movements and on-chain metrics that may signal market stress following major security incidents. Looking ahead, the industry may need to adopt broader security frameworks that include human-factor training, multi-signature requirements, and insurance mechanisms to reduce the impact of attacks.