Crypto Hacks Hit $630M in April, Worst Month in 14 Months

Crypto hack losses reached $630 million in April 2026. This is the highest monthly total since February 2025, when the Bybit exchange lost $1.47 billion. Security firms CertiK, PeckShield, and DeFiLlama all confirmed the April figure. Individual estimates ranged from $630 million to $651 million, depending on methodology. No firm reported a total below $630 million.

Two protocols lost over $570 million combinedKelpDAO and Drift Protocol were the two largest victims in April. KelpDAO, a decentralised finance (DeFi) protocol built on Ethereum, lost approximately $293 million. Attackers exploited a vulnerability in the LayerZero cross-chain bridge on 18 April 2026. KelpDAO paused its contracts after the breach. Drift Protocol, a DeFi platform on the Solana blockchain, lost approximately $280 million after attackers compromised an administrator key. Together, the two incidents account for over 90% of April's total losses.

"We are working with LayerZero, Unichain, our auditors and top security experts on RCA.", 18 April 2026. — KelpDAO Team, Official Team, KelpDAO Protocol

April 2026 was worst month in 14 monthsThe last comparable month was February 2025, when the Bybit exchange hack recorded $1.47 billion in losses. April 2026 ranks as the second-worst month for crypto theft in that 14-month period. DL News described April as the highest monthly loss total in DeFi history when measured by DeFi-only incidents. Other firms measured all crypto sectors combined and cited the February 2025 comparison. The difference reflects each firm's scope of measurement, not a factual conflict in the underlying data. April 2026 was worst month in 14 monthsThe last comparable month was February 2025, when the Bybit exchange hack recorded $1.47 billion in losses. April 2026 ranks as the second-worst month for crypto theft in that 14-month period. DL News described April as the highest monthly loss total in DeFi history when measured by DeFi-only incidents. Other firms measured all crypto sectors combined and cited the February 2025 comparison. The difference reflects each firm's scope of measurement, not a factual conflict in the underlying data. The last comparable month was February 2025, when the Bybit exchange hack recorded $1.47 billion in losses. April 2026 ranks as the second-worst month for crypto theft in that 14-month period. DL News described April as the highest monthly loss total in DeFi history when measured by DeFi-only incidents. Other firms measured all crypto sectors combined and cited the February 2025 comparison. The difference reflects each firm's scope of measurement, not a factual conflict in the underlying data. Cryptocurrencies are highly volatile and involve significant risk. You may lose part or all of your investment. All information on Coinpaprika is provided for informational purposes only and does not constitute financial or investment advice. Always conduct your own research (DYOR) and consult a qualified financial advisor before making investment decisions. Coinpaprika is not liable for any losses resulting from the use of this information.