Crypto Hacks and Scams Hit $364M in April, Says CertiK

April 2025 grew to become yet one more historic month for the crypto trade, as blockchain safety agency CertiK confirmed {that a} staggering $364 million was misplaced to scams, hacks, and phishing assaults.

This determine marks a 1,163% improve from March’s $28.8 million in losses. The surge, in response to CertiK’s April 30 publish on X, was pushed primarily by a single, devastating occasion.

The theft concerned 3,520 Bitcoins, valued at $330.7 million, stolen from an aged U.S. citizen, making it the fifth-largest crypto hack ever recorded.

Although April’s whole was closely skewed by this singular occasion, even with out it, the losses remained vital at $34 million, nonetheless up 21% from March.

Essentially the most damaging threats got here within the type of phishing assaults, social engineering, entry management exploits, and value manipulation.

Phishing and Social Engineering

Phishing accounted for the lion’s share of April’s losses, roughly $337 million.

The standout case was the theft from the aged U.S. investor, the place the attacker used extremely superior social engineering techniques to deceive the sufferer and achieve entry to their Bitcoin pockets.

In accordance with CertiK, this occasion marks a brand new wave of cybercrime, the place criminals bypass code and blockchain infrastructure completely, opting as an alternative to use human conduct.

Social engineering, a tactic that manipulates people into revealing confidential data, has turn out to be probably the most efficient methods for crypto criminals.

These assaults are notably insidious as a result of they typically seem legit, tricking even skilled traders.

April’s numbers additionally mirror a broader pattern. CertiK’s report isn’t the one one which paints a troubling image.

Immunefi, one other blockchain safety agency, recorded $92 million in losses throughout 15 incidents in April alone.

The agency additionally confirmed that every one the assaults focused DeFi platforms, with centralized exchanges reporting no safety incidents through the month.

The biggest assault cited by Immunefi, on the open-source platform UPCX, led to over $70 million in damages. It was adopted by the $7.5 million KiloEx exploit.

White Hat Hackers Assist Recuperate Thousands and thousands Amid Mounting Threats

Regardless of the grim numbers, April had a silver lining, as among the stolen funds had been recovered.

CertiK confirmed that roughly $18.2 million was returned, because of the efforts of white-hat hackers and cooperative exploiters.

Moral hackers performed an important function in serving to three platforms, KiloEx, zkSync, and Loopscale, get better their losses.

KiloEx, which had suspended operations following a $7.5 million exploit, noticed the stolen funds returned simply 4 days after the incident. In a uncommon gesture of goodwill, the attacker selected to return the funds in full.

Equally, Loopscale efficiently negotiated with its attacker to get better $5.8 million after a vulnerability in its token pricing mechanism was exploited. The attacker agreed to return the funds in change for a ten% white hat bounty and authorized immunity.

In the meantime, zkSync Affiliation recovered $5 million in stolen tokens after its airdrop distribution contract was breached. The settlement concerned the same bounty reward.

April’s spike in losses could also be stunning, however it’s not remoted. Earlier within the 12 months, February noticed the most costly month up to now, with crypto losses totaling $1.53 billion.

The majority of that was attributed to a $1.46 billion hack on Bybit, believed to have been orchestrated by the North Korean Lazarus Group, now thought of answerable for the most important crypto heist in historical past.

State-backed threats stay probably the most critical long-term dangers to the crypto trade.

Regardless of quite a few warnings, hackers have already stolen extra in 2025 than they did in your entire 12 months of 2024. As of the top of April, over $1.7 billion in crypto has been misplaced, eclipsing final 12 months’s $1.49 billion in simply 4 months.

For now, the $364 million misplaced in April serves as each a brutal monetary hit and a dire warning.

As phishing and social engineering proceed to show efficient, traders are suggested to stay vigilant and educate themselves on greatest practices to remain safe always.

The publish Crypto Hacks and Scams Hit $364M in April, Says CertiK appeared first on Cryptonews.