Two mega hacks alone wiped almost $600 million, dominating April’s $650 million crypto loss.
April 2026 turned out to be an uncommon month for the crypto market. Whereas total exercise remained regular on the floor towards important geopolitical turmoil, the area noticed a collection of exploits that shook investor confidence.
The main blockchain safety agency, CertiK, reported that crypto-related exploits and incidents in April 2026 resulted in complete losses of over $650 million.
April Hacks
The most important incidents had been led by KelpDAO, which misplaced $292 million, adopted by Drift Protocol at $285.2 million. The Drift Protocol exploit adopted weeks of setup and months of social engineering to realize entry to protocol signers. The funds had been drained in about 12 minutes. As compared, the KelpDAO hack stemmed from a single-verifier flaw in a LayerZero bridge, as attackers later moved funds by way of THORChain after over $70 million was frozen on Arbitrum
Different exploits include Rhea Finance at $18.4 million, Grinex at $16.2 million, amongst others. By sector, DeFi initiatives noticed the very best losses at $609.3 million, whereas unverified contracts misplaced $8.5 million, GameFi $3.4 million, bridge-related incidents $2.8 million, and meme-related initiatives $1.9 million.
By way of classes, pockets compromises accounted for almost all of losses at $611 million, adopted by worth manipulation at $18.8 million, code vulnerabilities at $16.9 million, phishing at $3.5 million, and front-end assaults at $544.7k.
Fewer Assaults, Greater Monetary Impression
North Korean hacking teams made up 76% of all crypto hack losses in 2026 by way of April, in accordance with TRM Labs. This was not as a result of they carried out extra assaults, however as a result of two main incidents alone prompted $577 million in losses, which ended up outweighing all different exercise. This sample of fewer however higher-impact assaults has been typical of North Korea’s technique since 2017.
TRM found that their share of complete crypto theft has steadily elevated over time, rising from below 10% in 2020 and 2021 to 22% in 2022, 37% in 2023, 39% in 2024, and 64% in 2025. That soar in 2025 was largely pushed by the Bybit breach, the place $1.46 billion was taken by way of a compromised Secure{Pockets} signing interface, which made it the most important crypto hack recorded thus far.
You might also like:
In 2026, the mixed losses from KelpDAO and Drift stand out in an identical manner. What stays constant is the tempo of exercise, with solely a small variety of fastidiously deliberate operations every year. What’s altering, nonetheless, is how these assaults are carried out.
North Korea’s complete crypto theft has now crossed $6 billion since 2017, as per TRM’s findings. Specialists imagine that these teams could also be utilizing AI instruments to enhance reconnaissance and social engineering for extra exact and focused exploits.
