Hard Constraints of DeFi Exploits vs Controllable Leverage **Hard Constraints** - Once code is on-chain, the attack window is open 24/7. - On-chain assets are composable, can be flash-loaned, and executed atomically, making attack speed far exceed human response time. - High TVL naturally attracts stronger attackers. - Users often cannot fully understand the risks of approvals, signatures, and contracts. - External dependencies cannot be completely eliminated, only limited and isolated. **Controllable Leverage** - **Minimized Permissions**: Reduce admin, upgrade, withdrawal, and parameter modification permissions. - **Timelock + Multisig + Permission Layering**: Provide reaction time in case control is abused. - **Formal Verification, Audits, Fuzz Testing, Unit Testing, Integration Testing.** - **Oracle Manipulation Prevention**: TWAP, multi-source pricing, liquidity thresholds, abnormal price protection. - **Governance of Approvals**: Limit unlimited approvals, periodic revokes, and front-end prompts for approval scope. - **Monitoring and Circuit Breakers**: Abnormal withdrawals, price deviations, rapid TVL changes, and abnormal governance votes. - **Operational Security**: Hardware wallets, multisig isolation, domain protection, CI/CD permission control.