Crypto Hacks Reach $630M in April, Driven by DeFi Exploits

Crypto hack losses have surpassed $630 million in April, marking the highest total since February 2025. According to DeFiLlama, the total value hacked in April amounts to $629.7 million, with decentralized finance (DeFi) being the most targeted sector. The majority of the losses can be attributed to two major incidents: KelpDAO's $293 million hack and Drift Protocol's $280 million exploit, which together account for 82% of the monthly losses.

The recent surge in DeFi hack losses can be attributed to a shift towards more sophisticated, multi-stage attacks targeting off-chain infrastructure rather than smart contract vulnerabilities. Yaniv Nissenboim, head of security solutions at Chainalysis, notes that attackers are exploiting the seams between on-chain protocols and the off-chain systems they depend on. This includes compromised remote procedure call (RPC) nodes, breaches of cloud key management systems, and long-running social engineering campaigns.

Experts believe that April's spike in crypto exploits may be driven by a small number of "precision strikes" targeting high-liquidity protocols. Meir Dolev, co-founder of Cyvers, notes that the month ranks among the worst for DeFi hacks in five years, with losses driven by social engineering and cross-chain complexity. Despite the recent hacks, analysts at Standard Chartered expect DeFi growth to remain on track as the industry puts solutions in place to reduce vulnerabilities.

The recent attacks have also highlighted the importance of real-time monitoring and automated safeguards in preventing and detecting hacks. In one case, rapid detection helped prevent a second theft of roughly $95 million during the KelpDAO incident. As the DeFi sector continues to evolve, it is likely that we will see a greater emphasis on security and risk management to mitigate the threat of hacks and exploits.