Blockchain Security Firm Quantstamp Hopes to Battle Flash Loan Attacks With New Service

The service has been released in collaboration with researchers from the University of Toronto.

AccessTimeIconAug 23, 2023 at 1:00 p.m. UTC

Blockchain security platform Quantstamp is hoping to quell the increasing threats of flash loan attacks with a new service that claims to catch exploits before they go off, the company told CoinDesk.

The Economic Exploit Analysis service detects common attack pathways used by exploiters through automated tooling before protocols get hacked. The service has been released in collaboration with researchers from the University of Toronto.

In the first half of 2023 alone, an estimated $207 million worth of tokens were stolen through flash loan attacks.

A flash loan is an uncollateralized loan provided by a smart contract that can be taken out for as short as a single transaction. In these attacks, hackers leverage flash loans to borrow substantial funds and manipulate DeFi protocols into unexpected states that developers may not have anticipated.

Flash loan attacks can drain the entire total value locked (TVL) of a DeFi protocol, and their complicated nature combined with DeFi’s composability means these attacks often evade conventional audits.

“DeFi has the potential to change the global financial infrastructure for the better, but its success requires preempting threats like flash loan attacks. We developed this tool to provide DeFi protocols an extra layer of security on top of audits,” said Martin Derka, head of new initiatives at Quantstamp, in a note to CoinDesk. “As DeFi evolves, security measures need to evolve with it. Services like Economic Exploit Analysis give us an edge against hackers.”

The Quantstamp service is available for both deployed and undeployed protocols. However, while the search process of the tool is automated, some manual guidance and protocol-specific adaptations are required.

Edited by Parikshit Mishra.


Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.

Shaurya Malwa

Shaurya is the Deputy Managing Editor for the Data & Tokens team, focusing on decentralized finance, markets, on-chain data, and governance across all major and minor blockchains.

Read more about