Kelp DAO experienced a supply‑chain breach on April 18, 2026, resulting in the theft of 116,500 rsETH—approximately $293 million—directly affecting crypto users on the Ethereum blockchain.
DeFi Hack Summary
Finbold’s research indicates that from January 1, 2026, through June 2026, hackers exfiltrated $955,864,608 from five prominent DeFi protocols. The aggregate loss underscores the heightened risk environment confronting investors and developers alike.
Drift Protocol, a Solana‑based trading platform, suffered a $285 million breach on April 1, 2026 after attackers employed a social‑engineering scheme targeting retail participants. This incident ranks as the second‑largest hack recorded in the first half of the year.
Security Tactics
Additional high‑profile exploits involved private‑key exposure at Step Finance and Humanity Protocol, while Truebit fell victim to a vulnerable smart‑contract code path. Each method reveals distinct flaws in the security architectures governing blockchain applications.
These diverse attack vectors compel the web3 community to reassess defensive designs, as the frequency of breaches threatens confidence among both retail users and institutional investors.
Market Implications
Despite the surge in illicit activity, institutional capital continues to flow into crypto assets, driven by clearer regulatory signals and expectations of a market reversal. Investors monitor price fluctuations closely, aware that large‑scale hacks can depress market sentiment and trigger volatility across major coin valuations.