Most DeFi exploits still originate on chain, though off-chain and hybrid incidents have grown visibly. A formally verified contract can be drained if the wallet controlling it is compromised through phishing or a malicious dependency. (Sentora)