DeFi Protection: Compensating Users For DeFi Losses

Share this article:

Smart contract hacks are a serious and recurring problem in DeFi, and safeguarding assets against malicious attacks is crucial. With this in mind, Quantstamp is excited to announce DeFi Protection, a new security product that will reimburse DeFi users for their losses in the event of a hack.


Addressing the Risks of DeFi

Decentralized finance, while offering unprecedented opportunities, also presents significant risks. Since 2019, hackers have exploited DeFi protocols nearly 500 times for over $6 billion, often leaving users with no recourse for recovering funds. DeFi Protection service aims to give users peace of mind while protecting their funds.


Introducing DeFi Protection

DeFi Protection is a security product that checks the safety of smart contracts, alerts users to any threats, and provides 24/7 support from security auditors. Alerts will include information about the attack as well as empower users with the knowledge to take swift action, such as withdrawing assets from the affected protocol. Notably, the product also features a guarantee program that will reimburse DeFi Protection customers for any losses due to a gap in Quantstamp’s security services.

To access the service, users simply select which protocols they wish to protect, the duration, and the maximum reimbursement amount in USDC. Aave, Compound, Curve, Lido, and Uniswap will be available at launch, with other protocols being added soon. The program is powered with support from Chainproof, a regulated primary insurance carrier for smart contract and slashing risks, and Tint, its insurance technology partner.


A Safety Net for US-Based Users

The guarantee program is regulated by the North Carolina Department of Insurance, making it the first program to legally serve United States residents. Users are required to undergo a KYC/AML check through Quadrata, a web3-native solution, to prove U.S. residency before purchase.


Quantstamp’s Commitment to Security

Smart contract audits provide an important layer of security, but it’s only one part of the stack. End users need to take extra measures to ensure their funds are secure. DeFi Protection was developed to provide end users with another method to stay on top of web3 security incidents. Along with smart contact audits, Quantstamp continues to explore new ways to keep users safe in our mission to secure the future of web3.
Learn more about DeFi Protection at https://defiprotection.com.

Back
Quantstamp Announcements

September 2026: The Approval Layer Was Exploited

Crypto lost $742.0M across 33 incidents in September 2026, almost three times August's $255.5M and the biggest month of the year so far. Bitget's $387M hack and Liquid Network's $320M exploit account for about 95% of that, with the other 31 incidents adding up to $35.0M. In August, the prices going into contracts were wrong. In September, attackers went after the systems that approve transactions in the first place. Here's the month in security 👇

Read more
about September 2026: The Approval Layer Was Exploited
Quantstamp Announcements

August 2026: The Price Feed Was Exploited

Crypto lost $255.4M across 46 incidents in August 2026, roughly level with July's $254.4M, with more incidents than any month this year. June and July incidents were largely due to key compromises, but August shifted to price manipulation. Eleven oracle and price-manipulation incidents accounted for $135.87M, or 53% of the month. Two chains stopped producing blocks and rolled back state to undo the damage. Here's the month in security 👇

Read more
about August 2026: The Price Feed Was Exploited
Quantstamp Announcements

July Security Beat: Keys Over Code (Again?)

Crypto lost more than $240 million across 29 incidents in July 2026, up roughly 216% from June's $75.87M, even as the number of attacks fell from 40 to 29. For the second month running, the damage didn't come from clever contract exploits. The same failure class ran through Web2, from a $12.3M rail-industry ransom to a 1TB bank breach that started with one employee's email. Here's the month in security 👇

Read more
about July Security Beat: Keys Over Code (Again?)