I agree with this take. Small projects simply can’t afford the required opsec and layers of key management, monitoring, simulation, verification, pausing and SOC infrastructure and processes that are required to keep funds safu. Liquidity concentrates in large trusted venues with clear understanding of DeFi risk
Everyone thinks there's a hackpocalypse going on in crypto right now. But if you dig into the data, the story is not that simple.
Narrative violation: total dollars hacked in 2026 actually looks pretty normal so far.
Check the chart below for raw data. What's grown is not the amount hacked, but rather the NUMBER of incidents.
Case in point: April was a brutal month for $$ hacked, but May was actually way below average in terms of $$ hacked (1/10th hacked compared to April). And yet by number of incidents, May was actually the highest in crypto history.
So what could explain the number of hacks going crazy, but the amount stolen staying flat?
Here's what I think is going on: for large protocols, using AI for cybersecurity is balanced between offense/defense. If you're Uniswap, AI makes it easier to harden your protocol, just as much as it makes it easier for randos to attack you.
But for the tens of $10M TVL DeFi protocols, there's no one running AI hardening at all. So attackers are looting unattended stores. Over time that will push TVL toward the larger protocols that can actually afford to defend their gates (and eventually, formally verify their code).
Analogy: In a high crime city, the Wal-Mart stays open, but the family owned corner store that can't afford security shuts down. Over time, the equilibrium is that more and more people will end up doing their shopping at Wal-Mart.