April 2026 turned out to be an uncommon month for the crypto market. Whereas general exercise remained regular on the floor in opposition to important geopolitical turmoil, the house noticed a sequence of exploits that shook investor confidence.
The main blockchain safety agency, CertiK, reported that crypto-related exploits and incidents in April 2026 resulted in complete losses of over $650 million.
April Hacks
The biggest incidents have been led by KelpDAO, which misplaced $292 million, adopted by Drift Protocol at $285.2 million. The Drift Protocol exploit adopted weeks of setup and months of social engineering to realize entry to protocol signers. The funds have been drained in about 12 minutes. Compared, the KelpDAO hack stemmed from a single-verifier flaw in a LayerZero bridge, as attackers later moved funds by means of THORChain after over $70 million was frozen on Arbitrum
Different exploits embrace Rhea Finance at $18.4 million, Grinex at $16.2 million, amongst others. By sector, DeFi initiatives noticed the very best losses at $609.3 million, whereas unverified contracts misplaced $8.5 million, GameFi $3.4 million, bridge-related incidents $2.8 million, and meme-related initiatives $1.9 million.
When it comes to classes, pockets compromises accounted for almost all of losses at $611 million, adopted by value manipulation at $18.8 million, code vulnerabilities at $16.9 million, phishing at $3.5 million, and front-end assaults at $544.7k.
Fewer Assaults, Larger Monetary Impression
North Korean hacking teams made up 76% of all crypto hack losses in 2026 by means of April, in line with TRM Labs. This was not as a result of they carried out extra assaults, however as a result of two main incidents alone brought on $577 million in losses, which ended up outweighing all different exercise. This sample of fewer however higher-impact assaults has been typical of North Korea’s technique since 2017.
TRM discovered that their share of complete crypto theft has steadily elevated through the years, rising from underneath 10% in 2020 and 2021 to 22% in 2022, 37% in 2023, 39% in 2024, and 64% in 2025. That leap in 2025 was largely pushed by the Bybit breach, the place $1.46 billion was taken by means of a compromised Protected{Pockets} signing interface, which made it the biggest crypto hack recorded thus far.
In 2026, the mixed losses from KelpDAO and Drift stand out in an analogous means. What stays constant is the tempo of exercise, with solely a small variety of rigorously deliberate operations every year. What’s altering, nevertheless, is how these assaults are carried out.
North Korea’s complete crypto theft has now crossed $6 billion since 2017, as per TRM’s findings. Consultants imagine that these teams could also be utilizing AI instruments to enhance reconnaissance and social engineering for extra exact and focused exploits.
The publish KelpDAO and Drift Lead Devastating $650M Crypto Hack Wave of April appeared first on CryptoPotato.