April 2026 turned out to be an uncommon month for the crypto market. Whereas total exercise remained regular on the floor towards vital geopolitical turmoil, the house noticed a collection of exploits that shook investor confidence.
The main blockchain safety agency, CertiK, reported that crypto-related exploits and incidents in April 2026 resulted in whole losses of over $650 million.
April Hacks
The biggest incidents have been led by KelpDAO, which misplaced $292 million, adopted by Drift Protocol at $285.2 million. The Drift Protocol exploit adopted weeks of setup and months of social engineering to achieve entry to protocol signers. The funds have been drained in about 12 minutes. As compared, the KelpDAO hack stemmed from a single-verifier flaw in a LayerZero bridge, as attackers later moved funds by THORChain after over $70 million was frozen on Arbitrum
Different exploits embody Rhea Finance at $18.4 million, Grinex at $16.2 million, amongst others. By sector, DeFi tasks noticed the best losses at $609.3 million, whereas unverified contracts misplaced $8.5 million, GameFi $3.4 million, bridge-related incidents $2.8 million, and meme-related tasks $1.9 million.
By way of classes, pockets compromises accounted for almost all of losses at $611 million, adopted by worth manipulation at $18.8 million, code vulnerabilities at $16.9 million, phishing at $3.5 million, and front-end assaults at $544.7k.
Fewer Assaults, Larger Monetary Affect
North Korean hacking teams made up 76% of all crypto hack losses in 2026 by April, in accordance with TRM Labs. This was not as a result of they carried out extra assaults, however as a result of two main incidents alone brought about $577 million in losses, which ended up outweighing all different exercise. This sample of fewer however higher-impact assaults has been typical of North Korea’s technique since 2017.
TRM discovered that their share of whole crypto theft has steadily elevated through the years, rising from underneath 10% in 2020 and 2021 to 22% in 2022, 37% in 2023, 39% in 2024, and 64% in 2025. That leap in 2025 was largely pushed by the Bybit breach, the place $1.46 billion was taken by a compromised Secure{Pockets} signing interface, which made it the biggest crypto hack recorded to this point.
In 2026, the mixed losses from KelpDAO and Drift stand out in an analogous method. What stays constant is the tempo of exercise, with solely a small variety of fastidiously deliberate operations every year. What’s altering, nonetheless, is how these assaults are carried out.
North Korea’s whole crypto theft has now crossed $6 billion since 2017, as per TRM’s findings. Consultants consider that these teams could also be utilizing AI instruments to enhance reconnaissance and social engineering for extra exact and focused exploits.
The publish KelpDAO and Drift Lead Devastating $650M Crypto Hack Wave of April appeared first on CryptoPotato.