Flash Loan Attacks: A Decade of Evolution, Defense, and the Rise of Post-Oracle Exploits (2017-2026)

We present the first decade-scale longitudinal analysis of flash loan attack evolution across 824 confirmed DeFi security incidents (2017-2026). We identify three distinct eras: the Spot Era (2020-2021) characterized by naive AMM price manipulation; the Oracle Hardening Era (2022-2024) where attackers pivoted to TWAP-resistant price feeds; and the Post-Oracle Era (2025-2026) introducing precision-backdoor-accounting attacks entirely independent of price manipulation. We contribute an 8-pattern taxonomy spanning flash loan amplifiers, three generations of Solidity defense code, and the Hardening Paradox: protocols that fortify against observed attacks inadvertently expose themselves to higher-order exploits.

Authors

Institutions

Publication Details

Journal
Zenodo (CERN European Organization for Nuclear Research)
Published
2026-07-17
DOI
https://doi.org/10.5281/zenodo.21405286
Primary Topic
Advanced Malware Detection Techniques
Type
preprint
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
preprint

Flash Loan Attacks: A Decade of Evolution, Defense, and the Rise of Post-Oracle Exploits (2017-2026)

Shiqiang Chen
Zenodo (CERN European Organization for Nuclear Research)
Advanced Malware Detection Techniques
preprint

Flash Loan Attacks: A Decade of Evolution, Defense, and the Rise of Post-Oracle Exploits (2017-2026)

Shiqiang Chen
preprint en

Abstract

We present the first decade-scale longitudinal analysis of flash loan attack evolution across 824 confirmed DeFi security incidents (2017-2026). We identify three distinct eras: the Spot Era (2020-2021) characterized by naive AMM price manipulation; the Oracle Hardening Era (2022-2024) where attackers pivoted to TWAP-resistant price feeds; and the Post-Oracle Era (2025-2026) introducing precision-backdoor-accounting attacks entirely independent of price manipulation. We contribute an 8-pattern taxonomy spanning flash loan amplifiers, three generations of Solidity defense code, and the Hardening Paradox: protocols that fortify against observed attacks inadvertently expose themselves to higher-order exploits.

Zenodo (CERN European Organization for Nuclear Research)
Chinese Academy of Sciences (CN), Institute of Information Engineering (CN)
Advanced Malware Detection Techniques
DOIOpen Access PDFOpenAlex
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.