A DeFi audit scope study finds 94.4% of losses in 68 incidents fell outside identified scopes, or 72.1% excluding two outliers.