Securing DeFi with PoolTogether

Quantstamp Announcements
Share this article:

Bitcoin marked the beginning of software eating money. Ethereum is now fulfilling it through features to blockchain technology that enabled the creation of an open financial system - now known as DeFi. Anyone with a funded Ethereum account can now access novel finance applications enabled by blockchain technology and currently live on Ethereum.  

Quantstamp is facilitating the future of DeFi by enhancing the security of leading open finance projects like PoolTogether, a no-loss lottery and innovative savings account application.

No Loss Lottery

Traditional lotteries have a low chance of winning, and have a negative expected value -- in other words, they are not profitable for ticket buyers. No-loss Lotteries turn this on its head. Even if your ticket doesn’t win, you still get your money back at the end of the game. Whereas the money paid for a traditional lottery ticket is gone forever, with a no-loss lottery you never “lose”.

Another name for no-loss lotteries is prize-linked savings accounts, which hints at their real nature. In fact these are gamified savings accounts, which incentivize saving through the promise of a large cash prize to a lucky winner. Instead of punishing those who participate in lotteries, it turns them into savers. 

PoolTogether 2.0

PoolTogether is a no-loss lottery implemented on Ethereum that uses DAI, a stable cryptocurrency pegged to the US dollar. DAI is used instead of fiat currencies because it leverage the benefits of blockchain technology while not suffering from the volatility of traditional cryptocurrencies.   Pool Together is also permissionless, and onboarding is seamless - just load up a metamask wallet with DAI and head on over to pooltogether.us. 

With PoolTogether 2.0 users can now decide to leave their funds in the pool for the next round. This new mechanic allows users to treat PoolTogether like a savings account, further incentivizing healthy financial habits. 

We’re happy to enhance the security of both the initial implementation of PoolTogether, as well as this new upgrade. 

Securing DeFi

Unlike traditional software, DeFi applications directly handle digital assets with real financial value. That makes security essential core infrastructure, not a nice to have feature.

The top blockchain projects choose Quantstamp's professional auditing services to secure their applications. Interested in receiving an audit with us? Visit our Audit page for more information.

Back
Quantstamp Announcements

September 2026: The Approval Layer Was Exploited

Crypto lost $742.0M across 33 incidents in September 2026, almost three times August's $255.5M and the biggest month of the year so far. Bitget's $387M hack and Liquid Network's $320M exploit account for about 95% of that, with the other 31 incidents adding up to $35.0M. In August, the prices going into contracts were wrong. In September, attackers went after the systems that approve transactions in the first place. Here's the month in security 👇

Read more
about September 2026: The Approval Layer Was Exploited
Quantstamp Announcements

August 2026: The Price Feed Was Exploited

Crypto lost $255.4M across 46 incidents in August 2026, roughly level with July's $254.4M, with more incidents than any month this year. June and July incidents were largely due to key compromises, but August shifted to price manipulation. Eleven oracle and price-manipulation incidents accounted for $135.87M, or 53% of the month. Two chains stopped producing blocks and rolled back state to undo the damage. Here's the month in security 👇

Read more
about August 2026: The Price Feed Was Exploited
Quantstamp Announcements

July Security Beat: Keys Over Code (Again?)

Crypto lost more than $240 million across 29 incidents in July 2026, up roughly 216% from June's $75.87M, even as the number of attacks fell from 40 to 29. For the second month running, the damage didn't come from clever contract exploits. The same failure class ran through Web2, from a $12.3M rail-industry ransom to a 1TB bank breach that started with one employee's email. Here's the month in security 👇

Read more
about July Security Beat: Keys Over Code (Again?)