KelpDAO and Drift Lead Devastating $650M Crypto Hack Wave of April
April 2026 turned out to be an uncommon month for the crypto market. While total exercise remained regular on the floor in opposition to vital geopolitical turmoil, the area noticed a collection of exploits that shook investor confidence.
The main blockchain safety agency, CertiK, reported that crypto-related exploits and incidents in April 2026 resulted in whole losses of over $650 million.
April Hacks
The largest incidents have been led by KelpDAO, which misplaced $292 million, adopted by Drift Protocol at $285.2 million. The Drift Protocol exploit adopted weeks of setup and months of social engineering to achieve entry to protocol signers. The funds have been drained in about 12 minutes. In comparability, the KelpDAO hack stemmed from a single-verifier flaw in a LayerZero bridge, as attackers later moved funds by THORChain after over $70 million was frozen on Arbitrum
Other exploits include Rhea Finance at $18.4 million, Grinex at $16.2 million, amongst others. By sector, DeFi tasks noticed the very best losses at $609.3 million, whereas unverified contracts misplaced $8.5 million, GameFi $3.4 million, bridge-related incidents $2.8 million, and meme-related tasks $1.9 million.
In phrases of classes, pockets compromises accounted for almost all of losses at $611 million, adopted by worth manipulation at $18.8 million, code vulnerabilities at $16.9 million, phishing at $3.5 million, and front-end assaults at $544.7k.
Fewer Attacks, Higher Financial Impact
North Korean hacking teams made up 76% of all crypto hack losses in 2026 by April, in keeping with TRM Labs. This was not as a result of they carried out extra assaults, however as a result of two main incidents alone induced $577 million in losses, which ended up outweighing all different exercise. This sample of fewer however higher-impact assaults has been typical of North Korea’s technique since 2017.
TRM found that their share of whole crypto theft has steadily elevated over time, rising from below 10% in 2020 and 2021 to 22% in 2022, 37% in 2023, 39% in 2024, and 64% in 2025. That soar in 2025 was largely pushed by the Bybit breach, the place $1.46 billion was taken by a compromised Safe{Wallet} signing interface, which made it the biggest crypto hack recorded thus far.
In 2026, the mixed losses from KelpDAO and Drift stand out in an identical means. What stays constant is the tempo of exercise, with solely a small quantity of fastidiously deliberate operations every year. What is altering, nonetheless, is how these assaults are carried out.
North Korea’s whole crypto theft has now crossed $6 billion since 2017, as per TRM’s findings. Experts imagine that these teams could also be utilizing AI instruments to enhance reconnaissance and social engineering for extra exact and focused exploits.
The publish KelpDAO and Drift Lead Devastating $650M Crypto Hack Wave of April appeared first on CryptoPotato.
