April witnessed a record number of hacks in the crypto industry. Analysts at DeFiLlama counted more than 20 incidents during the month.
April ends as the most-hacked month in crypto history, by number of incidents. pic.twitter.com/Cx67K3z86O
— DefiLlama.com (@DefiLlama) April 30, 2026
According to CertiK, total losses from attacks reached $651 million. While this figure did not set a monetary record, the number of individual hacks surpassed historical levels.
Combining all the incidents in April we’ve confirmed ~$651M lost to exploits with
~$3.5M of the total attributed to phishing.April has had the highest losses recorded since March 2022 (~$715M), excluding Feb 2025 (Bybit).
More details below 👇 pic.twitter.com/x9uAbLbtMz
— CertiK Alert (@CertiKAlert) April 30, 2026
Analyst Stacy Muur estimated a total of 24 cases of fund theft.
Full list of protocols & pools exploited in April (+2 since yesterday) ↓
Wasabi Protocol: $ unknown
Sweat: $3,500,000
Aftermath Finance: $114,000
Judao: $228,000
Singularity Finance: $413,000
ZetaChain: $300,000
Scallop Lend: $150,000
Purrlend: $1,500,000
Giddy:… https://t.co/pPQ3StmiZv
— Stacy Muur (@stacy_muur) April 30, 2026
The largest incident was the hack of Kelp, resulting in a $292 million loss. The attack caused issues with “bad debts” in the lending protocol Aave, forcing the community to seek emergency loans and donations.
The second largest was the breach of Drift Protocol on the Solana platform, with damages exceeding $280 million. Project representatives stated that the attack was not due to a code bug. According to them, it was a planned operation prepared over six months using social engineering techniques.
Another notable case was the hack of the Hyperbridge protocol on the Polkadot network: the project lost $2.5 million due to forged cross-chain messages. The perpetrator issued about 1 billion DOT tokens and sold them.
At the end of the month, an expert known as Wazz reported the hacking of hundreds of wallets on the Ethereum network, many of which had been inactive for more than seven years.
Hundreds of wallets (many of which haven’t been active in 7+ years) just got drained by the same address on ETH mainnet
Seems like a new live exploit, worth flagging https://t.co/QiKU1b86Uv pic.twitter.com/o1uU85CLPT
— Wazz (@WazzCrypto) April 30, 2026
According to CertiK, April’s losses were the largest since March 2022, excluding the Bybit exchange incident. About $3.5 million of the total was due to phishing.
On April 30, attackers breached the Wasabi project, causing damages exceeding $5 million.
On April 28, the Ethereum infrastructure project Syndicate was hacked. Cybersecurity experts estimated the losses at $330,000.
At the same time, attackers breached the Aftermath Finance exchange in the Sui ecosystem, extracting about $900,000 in USDC.
A day earlier, the L1 network ZetaChain was affected. Developers stated that the incident only impacted the team’s internal wallets. The damage amounted to $333,868.