KelpDAO and Drift Lead Devastating $650M Crypto Hack Wave of April

April 2026 turned out to be an unusual month for the crypto market. While overall activity remained steady on the surface against significant geopolitical turmoil, the space saw a series of exploits that shook investor confidence.

The leading blockchain security firm, CertiK, reported that crypto-related exploits and incidents in April 2026 resulted in total losses of over $650 million.

April Hacks

The largest incidents were led by KelpDAO, which lost $292 million, followed by Drift Protocol at $285.2 million. The Drift Protocol exploit followed weeks of setup and months of social engineering to gain access to protocol signers. The funds were drained in about 12 minutes. In comparison, the KelpDAO hack stemmed from a single-verifier flaw in a LayerZero bridge, as attackers later moved funds through THORChain after over $70 million was frozen on Arbitrum

Other exploits include Rhea Finance at $18.4 million, Grinex at $16.2 million, among others. By sector, DeFi projects saw the highest losses at $609.3 million, while unverified contracts lost $8.5 million, GameFi $3.4 million, bridge-related incidents $2.8 million, and meme-related projects $1.9 million.

In terms of categories, wallet compromises accounted for the majority of losses at $611 million, followed by price manipulation at $18.8 million, code vulnerabilities at $16.9 million, phishing at $3.5 million, and front-end attacks at $544.7k.

Fewer Attacks, Higher Financial Impact

North Korean hacking groups made up 76% of all crypto hack losses in 2026 through April, according to TRM Labs. This was not because they carried out more attacks, but because two major incidents alone caused $577 million in losses, which ended up outweighing all other activity. This pattern of fewer but higher-impact attacks has been typical of North Korea’s strategy since 2017.

TRM found that their share of total crypto theft has steadily increased over the years, rising from under 10% in 2020 and 2021 to 22% in 2022, 37% in 2023, 39% in 2024, and 64% in 2025. That jump in 2025 was largely driven by the Bybit breach, where $1.46 billion was taken through a compromised Safe{Wallet} signing interface, which made it the largest crypto hack recorded so far.