Who really holds the keys in DeFi, read directly from the chain: shared multisig signers, single-key admin control, and exploits reconstructed transaction by transaction. Findings and on-chain sources are always public and free to reuse with credit. Want the same checks on your protocol? Ask on X.
$921.7MLost across those 56 incidents, $584.7M independently recomputed
34Press and DefiLlama figures corrected, reconciled or first surfaced (log)
30Single-key admin cases (of 108 protocols and vault owners checked by hand)
Net, not headline. Funds an attacker returned, or that were reversed on-chain, are deducted. A figure taken from a protocol, the press or DefiLlama is marked † and kept out of the recomputed total.
Reproducible. Every incident ships the script and raw proof files used to rebuild it, and the full index is available as JSON and CSV.
Independent. No protocol pays for its coverage. Corrections are welcome and logged in public.
Research projects
Four lines of inquiry, all read on-chain
Each project reads raw on-chain state and events, not a dashboard's cached summary. Findings and on-chain sources are always public and free to reuse with credit. See methodology & disclaimer. Every published reading: Research.
9 oracles live
Authority Risk Oracle
The research above, turned into a number any contract can read. An on-chain oracle publishes getScore(address) for each tracked protocol: five sub-scores (admin key, multisig strength, timelock delay, price-feed authority, shared control) and a composite, re-derived from live chain state, with isStale(address) so a consumer can refuse an old read. The same contract runs on 8 EVM testnets and a native program on Solana Devnet, 197 tracked targets in all; Zcash Testnet carries the scores as a signed attestation anchored on-chain. Every oracle is re-read four times a day and every move is logged, with an alarm when a score drops. No protocol pays for its own score.
Robinhood Chain, Ethereum Sepolia, Arbitrum Sepolia, Base Sepolia
Tempo Moderato, Plasma, Monad, Hyperliquid HyperEVM
Solana Devnet (Anchor program)
Zcash Testnet (hash commitment, no contract VM)
9 deployed oracles plus one attestation chain, all testnets, scored with one method. The dashboard reads every score from the oracles themselves, in your browser, with no backend.
391 Protocol entries
Multisig overlap
391 protocol entries, 729 confirmed multisig contracts, 25 chains, same method throughout. The widest single signer key sits on 5 independent protocols at once, and one Safe governs the core L1 contracts of 5 Superchain chains. On Ethereum mainnet alone, 8 signers hold keys on 2 or more independent protocols; 7 of them match the protocols' own public signer disclosures. Dozens of protocols reuse the same or an overlapping signer set across multiple chains.
A single key (a bare EOA or a 1-of-N Safe) still holding an admin role that can mint, pause, or redirect funds: the pattern behind Wasabi Protocol's $5.9M loss in April 2026. 108 DeFi protocols and Morpho vault owners checked by hand on-chain; 30 single-key admin cases (2 Critical, 13 High, 7 Medium, 8 Low). Several are bounded by a timelock or a guardian, and each case says so.
What happened on-chain after a protocol gets hit, transaction by transaction, not the announcement thread. Example: press reported only the Ethereum leg of the Sandbox bridge exploit; the reconstruction finds 405.83 WETH gross across Base and Ethereum, about 5.2 times the press figure. 34 entries correct, reconcile or newly surface a press or DefiLlama figure (23 corrections, 8 reconciliations, 3 discoveries). 56 incidents, $921.7M in losses, $584.7M of it independently recomputed.
