DefiLlama's hack dashboard tallied $17B stolen across 518 crypto incidents over the past decade, with private key compromises accounting for over 40% of losses (22.3% brute force, 18.2% unknown methods) and multi-sig phishing adding another 10%. The report drops amid a brutal DeFi stretch — GSR counted $600M lifted in the last 60 days alone, including Kelp DAO's $290M rsETH exploit this month and Drift Protocol's April 1 incident. The signal is unmistakable: attackers have pivoted from smart contract bugs to opsec and social engineering, with wallet-drainer phishing now the dominant threat vector.

TLDR by @Benthic