Why is April 2026 the worst month for crypto hacks recently?

April 2026 has seen over $606 million stolen in just 18 days, making it the worst month since the February 2025 Bybit hack. This figure already exceeds total losses from the entire first quarter of 2026. The scale and speed of losses highlight a sharp spike in security risks.

Which crypto hacks caused most of the April 2026 losses?

Two major incidents drove nearly all losses: the $285 million Drift Protocol exploit and the $292 million KelpDAO breach. Together, they account for about 95% of April’s total. Both attacks have been linked to the Lazarus Group.

How does April 2026 compare to earlier crypto losses this year?

April’s $606 million in losses is about 3.7 times larger than the entire first quarter’s $165.5 million. Year-to-date losses now total roughly $771.8 million. This shows a sharp acceleration in both size and frequency of attacks.

How often are crypto hacks happening in 2026?

There have been 47 incidents so far in 2026, compared to 28 during the same period in 2025. That represents a 68% increase in attack frequency. On average, a hack is occurring roughly every 2.9 days.

Why are crypto hacks becoming more frequent and severe?

Attackers are using a wider range of methods, including smart contract exploits, infrastructure attacks, and social engineering. This diversification makes it harder to defend systems with traditional audits alone. The growing size of DeFi (over $120 billion TVL) also increases the attack surface.

What impact did the KelpDAO hack have on the wider market?

The KelpDAO exploit triggered over $10 billion in outflows from Aave and affected more than 20 connected protocols. This shows how interconnected DeFi systems can amplify the impact of a single breach. It also highlights systemic risk across platforms.

Is this bad for crypto investors and DeFi users?

Yes, this is negative in the short term as it increases risk and can reduce trust in DeFi platforms. Large hacks can lead to price volatility and capital outflows. However, they may also push the industry toward stronger security practices over time.

What is a “security risk premium” in crypto markets?

A security risk premium means investors demand higher returns to compensate for increased risk. In this case, frequent hacks are making DeFi assets appear riskier. This can lower valuations or slow new investment.

April crypto hacks hit $606M worst since 2025

Written by Mahathir BayenaPublished Apr. 23 2026Last Updated Apr. 23 2026

Crypto protocols lost more than $606 million to hacks in the first 18 days of April 2026, making it the worst month for theft since the 2025 Bybit breach.

Data from DefiLlama showed 12 separate incidents during the period, with losses already 3.7 times higher than the entire first quarter of 2026.

“None of these accounts for the collateral damage seen across TVL, user trust, valuations, and the space’s morale,”

An analyst said, adding:

“DeFi remains a niche market until risk can be properly priced.”

Two exploits — the $285 million Drift Protocol attack and the $292 million KelpDAO breach — accounted for roughly 95% of April’s total losses and were both linked to the Lazarus Group.

The surge also reflects a rise in attack frequency, with 47 incidents recorded so far in 2026 compared with 28 over the same period last year.

Researchers said attackers are increasingly targeting infrastructure, private keys and human vulnerabilities rather than just smart contract flaws, complicating traditional security approaches.

The spike in losses has prompted concerns among institutional investors, with analysts warning that persistent security risks could slow adoption and lead to a pricing premium on decentralised finance assets.