Summary: Researchers used a tool to find vulnerable smart-contracts on the Ethereum blockchain and found 34 000. 31 000 of them categorised as "greedy" (no one can withdraw any funds from the contract, including the owner).

Link to full paper: https://arxiv.org/pdf/1802.06038.pdf