Audited DeFi protocols lost $885M to attacks that occurred completely outside their audit scopes

An ack3-affiliated preprint found that 72.1% of losses were outside the scope of audits after excluding two H1 2026 outliers, while August incidents provide additional operational context.