April 2026 has become the worst month on record for cryptocurrency hacks, with more than $600 million stolen across nearly 30 incidents, according to blockchain analytics data.
The surge in exploits highlights ongoing vulnerabilities in decentralized finance (DeFi) infrastructure and smart contract systems.
Image from DeFiLlama
Two large-scale attacks accounted for the majority of losses:
- Drift Protocol exploit (~$285 million)
- KelpDAO exploit (~$290 million)
Combined, these incidents represented over 90% of total funds stolen during the month.
data from Certik
Security experts attribute the increase in attacks to:
- Smart contract vulnerabilities
- Cross-chain bridge weaknesses
- More sophisticated threat actors
Groups such as Lazarus Group are believed to be responsible for a significant portion of recent large-scale exploits.
While the largest exploits dominated headlines, smaller incidents revealed equally important weaknesses.
One example involved Hyperbridge, which lost approximately $2.5 million due to a Token Gateway vulnerability. The attacker initially extracted around 245 ETH, then escalated the attack roughly an hour later.
By exploiting a flaw in cross-chain message validation—specifically bypassing Merkle Mountain Range proof verification—the attacker was able to fabricate a message and mint nearly one billion bridged DOT tokens. These tokens were subsequently sold, amplifying the impact of the exploit.
This incident highlights how even relatively small vulnerabilities in cross-chain infrastructure can be leveraged into much larger systemic risks.
The spike in hacks has contributed to increased caution among investors and developers, particularly in DeFi markets.
Major cryptocurrencies including Bitcoin and Ethereum experienced heightened volatility during the period.
April 2026 marks a record-breaking month for crypto hacks, both in scale and frequency. The events underscore the need for stronger security standards as the industry continues to grow.
crypto, defi, hacks, cybersecurity, web3, blockchain, crypto news
