ARTFEED — Contemporary Art Intelligence

April 2026 Sets Record for Crypto Hacks with $629.69M Lost

other · 2026-05-02

April 2026 marked a record month for hacking incidents in the cryptocurrency realm, with between 28 and 30 breaches resulting in losses of $629.69 million, according to DefiLlama. The majority of the $614.17 million lost in DeFi protocols stemmed from two significant attacks: on April 1, the Drift Protocol on Solana suffered a $285 million loss attributed to North Korea's Lazarus Group, while KelpDAO experienced a $293 million loss on April 18 due to a message-spoofing exploit. This latter incident triggered a crisis, leading to $190 million borrowed in Ethereum, Aave's bad debt reaching between $123 and $230 million, and a $13 billion drop in DeFi TVL. By April 2026, North Korea was responsible for 75% of crypto hacking losses, totaling $577 million for the year. Additional smaller hacks included Rhea Finance, which lost $18.4 million. In response, over 14 organizations committed $300 million to a rescue fund.

Key facts

  • April 2026 recorded 28–30 separate crypto exploits, the highest monthly count ever.
  • Total losses reached $629.69 million, with DeFi protocols losing $614.17 million.
  • Drift Protocol on Solana lost $285 million on April 1 via a Lazarus Group social-engineering attack.
  • KelpDAO lost $293 million on April 18 through a message-spoofing exploit on a LayerZero bridge.
  • The KelpDAO attack caused Aave to suffer $123–230 million in bad debt and $8.4 billion in outflows.
  • Total DeFi TVL dropped by $13 billion following the KelpDAO incident.
  • North Korea was responsible for 75% of all crypto hack losses through April 2026 ($577M of $759M).
  • Over 14 organizations pledged $300 million to the DeFi United rescue fund after the KelpDAO attack.

Entities

Institutions

  • DefiLlama
  • Drift Protocol
  • Solana
  • Lazarus Group
  • KelpDAO
  • LayerZero
  • Aave
  • Galaxy Research
  • Morpho
  • Spark
  • Lido
  • Yearn
  • Beefy
  • TRM Labs
  • Rhea Finance
  • Tether
  • Grinex
  • SunSwap
  • CoW Swap
  • Hyperbridge
  • Polkadot
  • Wasabi Protocol
  • DeFi United
  • Arbitrum Security Council
  • CertiK
  • NFT Plazas

Locations

  • North Korea
  • Kyrgyzstan
  • Ethereum mainnet

Sources