Audited DeFi protocols lost $885 million to attacks outside audit scope

• —A total of 135 incidents with $939.86 million in losses from January to June 2026
• —46 of 68 attacks on audited projects were outside the checked scope, causing 94.4% of losses
• —Excluding Kelp DAO ($292 million) and Drift Protocol ($285 million), the out-of-scope share falls to 72.1%
• —The ICON Network hack involved 1,490 repeated calls, with losses of about 150.2 ETH and 31,204 USDC