Charlie Quant Lab

Institutional map · L0 to L4

Crypto Infrastructure Map

The layer number is the easy part. Shared control is the part that breaks things.

The top three networks hold 84.5% of tracked stablecoin stock, while keys and permissions account for 43.0% of known one-year incident loss.

Stablecoin stock$304.6bnsitting across tracked networks
Top network48.4%Ethereum
Top three networks84.5%share of tracked stock
Next after leader59.6%Tron share after removing Ethereum
General bridges147$52.9bn reported value
Official bridges77$9.9bn reported value
Liquid staking254$52.0bn reported value
Reused-security leader64.6%EigenCloud
One-year incidents3017 have no loss figure
Known loss$1.7bnunknown amounts remain unknown
Keys and permissions43.0%share of known loss
Largest three failures64.5%share of known loss

Five labels. One real question.

Where can one failure stop money, pricing, withdrawals or settlement? The stack below translates the labels without pretending that L3 and L4 have one industry-wide meaning.

L0 · Connection and coordination

Moves messages or security between networks. If the same group of computers approves several networks, one failure can reach all of them.

L1 · Base settlement

The network that records the final state. Stablecoins and apps can cluster here even when users enter elsewhere.

L2 · Cheaper execution

Bundles activity and settles back to a base chain. The official transfer route and the operator that orders transactions can matter more than the layer number.

L3 · Application chains

A network built for one product or group. This label is not used consistently, so compare the actual control path.

L4 · Apps, wallets and access

Where users trade, borrow and sign. It is not a formal blockchain layer, but failures here can still block access.

The contrarian read · Layer labels are not risk scores

Two products on different layers may share the same custodian, bridge, key holder or price source.

The layer number tells you where something sits. It does not tell you who can pause it, upgrade it or restore it.

Capital can gather at different points

Each bar shows the largest provider inside its own group. The groups overlap, so their dollar totals are not added together.

ChainPolygon Bridge · 86.3%
RestakingEigenCloud · 64.6%
CEXBinance CEX · 55.6%
Liquid StakingLido · 46.2%
Canonical BridgeArbitrum Bridge · 33.4%
BridgeWBTC · 17.6%

Polygon Bridge · 86.3% is the highest leader share on this screen. It tells us where a failure could have a large reach. It does not say that a failure is likely.

Where the digital dollars sit

This is the stock of tracked stablecoins on each network. It is not daily trading and it is not money owned by the chain.

Ethereum$147.3bn
Tron$93.8bn
Solana$16.3bn
BSC$13.3bn
Hyperliquid L1$7.0bn
Base$4.9bn
Arbitrum$3.6bn
Polygon$3.1bn
X Layer$1.7bn
Avalanche$1.4bn

Remove Ethereum, and Tron holds 59.6% of what remains. Concentration does not disappear; it changes address.

The failure record points sideways

Known losses do not line up neatly by layer. Keys, permissions, bridges, prices and websites can cut across the full stack.

Known loss · one year

$1.7bn across 294 records with a loss amount.

Keys and permissions

43.0% of known loss came from access-control or private-key failures.

Bridge losses

25.5% of known loss was marked as bridge or cross-chain.

The deepest risk often runs across the diagram, not down one numbered layer.

What actually broke?

These are known loss amounts grouped by the failure named in the incident record. Missing amounts remain missing.

Access Control$389.2mn
Bridge & Cross-Chain$373.1mn
Key Compromise$355.4mn
Token & Share Accounting$214.7mn
Oracle Manipulation$150.5mn
Frontend & Infrastructure$105.3mn
Social Engineering$41.7mn
Governance$33.8mn

The three largest failure types account for 64.5% of known loss. A long list of smaller categories should not hide where most of the money went.

Losses arrive in lumps

Monthly known loss over the last year. A quiet month does not mean the system became safe; one large event can redraw the year.

Oct 25$26.6mn
Nov 25$179.7mn
Dec 25$24.8mn
Jan 26$104.1mn
Feb 26$21.5mn
Mar 26$42.7mn
Apr 26$648.1mn
May 26$83.1mn
Jun 26$88.9mn
Jul 26$254.4mn
Aug 26$155.5mn
Sep 26$1.8mn

The latest quarter contains 26.1% of the one-year known loss. Timing changes the story, so the page keeps the full twelve-month strip visible.

The latest recorded breaks

Recent events are shown with the stated loss. “Not reported” is kept separate from zero.

Swipe the table, or focus it and use the arrow keys.

DateProjectWhat brokeNetworkKnown loss
05 Sep 2026Dream Health ChainProtocol LogicBSC$71,800
05 Sep 2026Reddio RedSonicToken & Share AccountingEthereum$22,800
04 Sep 2026Notional V2Token & Share AccountingEthereum$1.7mn
31 Aug 2026AquiferAccess ControlSolana$2.5mn
31 Aug 2026AnkrToken & Share AccountingFlow$410,000
31 Aug 2026Float ProtocolOracle ManipulationEthereum$28,000
30 Aug 2026Balancer V1Token & Share AccountingEthereum$234,000
30 Aug 2026TectonicOracle ManipulationCronos$75.0mn
29 Aug 2026Full SailOracle ManipulationSuiNot reported
29 Aug 2026PermapodProtocol LogicZIGChainNot reported

Only 5 records in the one-year window state returned funds. The known returned amount is $1.9mn, or 0.1% of known loss. That is incomplete reporting, not a recovery rate for the whole market.

Research by for Charlie Quant Lab