DeFi wallets have been opened. According to security monitoring data, in Q3 2024, oracles experienced 23 attack incidents, with the total loss soaring to $187 million in a single quarter, a 150% year-over-year increase, and the speed of growth is frightening.

Attack methods are also "evolving." Hackers now use a variety of tactics: first, flash loan arbitrage to manipulate multiple trading pairs simultaneously and create price imbalances; second, directly bribe node operators to feed false data; third, exploit time lag by taking advantage of oracle update delays for arbitrage. Derivative protocols using TWAP (Time-Weighted Average Price) are particularly vulnerable and have become prime targets.

Defenders are also taking action. Next-generation oracles are introducing zero-knowledge proof technology to verify the authenticity of data sources and computation logic, sealing vulnerabilities at the source. On the other hand, Chainlink Labs has directly increased the entry threshold for nodes—raising staking requirements from the previous standard to $10 million—and has built a reputation scoring system to identify high-risk nodes.

This ongoing battle between attack and defense will continue. The security boundaries of the DeFi ecosystem are being redefined.