Charlie Quant Lab

Institutional map · L0 to L4

Crypto Infrastructure Map

The layer number is the easy part. Shared control is the part that breaks things.

The top three networks hold 86.8% of tracked stablecoin stock, while keys and permissions account for 44.2% of known one-year incident loss.

Stablecoin stock$297.2bnsitting across tracked networks
Top network49.8%Ethereum
Top three networks86.8%share of tracked stock
Next after leader63.0%Tron share after removing Ethereum
General bridges149$59.5bn reported value
Official bridges78$10.9bn reported value
Liquid staking260$57.4bn reported value
Reused-security leader64.4%EigenCloud
One-year incidents3249 have no loss figure
Known loss$2.5bnunknown amounts remain unknown
Keys and permissions44.2%share of known loss
Largest three failures73.0%share of known loss

Five labels. One real question.

Where can one failure stop money, pricing, withdrawals or settlement? The stack below translates the labels without pretending that L3 and L4 have one industry-wide meaning.

L0 · Connection and coordination

Moves messages or security between networks. If the same group of computers approves several networks, one failure can reach all of them.

L1 · Base settlement

The network that records the final state. Stablecoins and apps can cluster here even when users enter elsewhere.

L2 · Cheaper execution

Bundles activity and settles back to a base chain. The official transfer route and the operator that orders transactions can matter more than the layer number.

L3 · Application chains

A network built for one product or group. This label is not used consistently, so compare the actual control path.

L4 · Apps, wallets and access

Where users trade, borrow and sign. It is not a formal blockchain layer, but failures here can still block access.

The contrarian read · Layer labels are not risk scores

Two products on different layers may share the same custodian, bridge, key holder or price source.

The layer number tells you where something sits. It does not tell you who can pause it, upgrade it or restore it.

Capital can gather at different points

Each bar shows the largest provider inside its own group. The groups overlap, so their dollar totals are not added together.

ChainPolygon Bridge · 86.7%
RestakingEigenCloud · 64.4%
CEXBinance CEX · 55.5%
Liquid StakingLido · 42.7%
Canonical BridgeArbitrum Bridge · 32.8%
BridgeLayerZero V2 · 19.7%

Polygon Bridge · 86.7% is the highest leader share on this screen. It tells us where a failure could have a large reach. It does not say that a failure is likely.

Where the digital dollars sit

This is the stock of tracked stablecoins on each network. It is not daily trading and it is not money owned by the chain.

Ethereum$148.0bn
Tron$94.0bn
Solana$16.0bn
BSC$13.3bn
Base$5.2bn
Arbitrum$4.0bn
Polygon$2.9bn
Avalanche$1.4bn
XRPL$1.2bn
Robinhood Chain$1.1bn

Remove Ethereum, and Tron holds 63.0% of what remains. Concentration does not disappear; it changes address.

The failure record points sideways

Known losses do not line up neatly by layer. Keys, permissions, bridges, prices and websites can cut across the full stack.

Known loss · one year

$2.5bn across 315 records with a loss amount.

Keys and permissions

44.2% of known loss came from access-control or private-key failures.

Bridge losses

31.0% of known loss was marked as bridge or cross-chain.

The deepest risk often runs across the diagram, not down one numbered layer.

What actually broke?

These are known loss amounts grouped by the failure named in the incident record. Missing amounts remain missing.

Key Compromise$717.0mn
Bridge & Cross-Chain$699.9mn
Token & Share Accounting$387.0mn
Access Control$376.7mn
Oracle Manipulation$78.1mn
Frontend & Infrastructure$63.8mn
Social Engineering$43.8mn
Governance$43.1mn

The three largest failure types account for 73.0% of known loss. A long list of smaller categories should not hide where most of the money went.

Losses arrive in lumps

Monthly known loss over the last year. A quiet month does not mean the system became safe; one large event can redraw the year.

Nov 25$179.7mn
Dec 25$24.9mn
Jan 26$104.1mn
Feb 26$21.5mn
Mar 26$42.7mn
Apr 26$648.1mn
May 26$83.1mn
Jun 26$86.9mn
Jul 26$254.4mn
Aug 26$255.5mn
Sep 26$742.0mn
Oct 26$4.8mn

The latest quarter contains 49.4% of the one-year known loss. Timing changes the story, so the page keeps the full twelve-month strip visible.

The latest recorded breaks

Recent events are shown with the stated loss. “Not reported” is kept separate from zero.

Swipe the table, or focus it and use the arrow keys.

DateProjectWhat brokeNetworkKnown loss
07 Oct 2026Locus FinanceNot classifiedArbitrum$18,000
06 Oct 2026Set ProtocolToken & Share AccountingEthereum$21,873
06 Oct 2026MakerDAO ETH-A Liquidation Keeper BotAccess ControlEthereum$538,000
02 Oct 2026GoldPesaToken & Share AccountingBase$114,900
01 Oct 2026FlashLoopAdapterAccess ControlEthereum$305,000
01 Oct 2026NEAR IntentsBridge & Cross-ChainBSC$3.8mn
30 Sep 2026SKYDAOProtocol LogicBSC$183,483
27 Sep 2026Fake GIWA BridgeSocial EngineeringEthereum$2.1mn
24 Sep 2026DuelbitsKey CompromiseEthereum, BSC, Bitcoin, Tron$7.0mn
24 Sep 2026BitgetKey CompromiseEthereum, XRP, Tron, Zcash$387.0mn

Only 7 records in the one-year window state returned funds. The known returned amount is $5.4mn, or 0.2% of known loss. That is incomplete reporting, not a recovery rate for the whole market.

Research by for Charlie Quant Lab · Updated