April 2026 Was Crypto’s Most Hacked Month — $600M Lost

April 2026 will go down as the worst month in crypto security history. According to DefiLlama, more than $600 million was stolen across nearly 30 separate crypto hacks last month. That is more than any single month on record. The damage was not spread thin, two attacks alone accounted for almost all of it. Crypto news today is a sobering reminder that bigger markets attract bigger threats.

Two Attacks. Nearly All the Damage.

The crypto hack numbers are brutal. Drift Protocol lost $285 million after attackers compromised an admin key on Solana. KelpDAO lost $293 million through a LayerZero bridge vulnerability on Ethereum. Together, those two incidents account for roughly $578 million of the total losses.

April ends as the most-hacked month in crypto history, by number of incidents. pic.twitter.com/Cx67K3z86O

— DefiLlama.com (@DefiLlama) April 30, 2026

The KelpDAO exploit hit fast. On April 18, the team identified suspicious cross-chain activity involving rsETH and immediately paused contracts across mainnet and several L2s. They stated clearly, “We are working with LayerZero, Unichain, our auditors and top security experts on RCA.”

The Drift Protocol crypto hack followed a similar pattern. An admin key compromise gave attackers full control. No smart contract bug. No code flaw. Just a single point of human failure that opened the door to hundreds of millions in losses.

How the Recovery Effort Came Together

After the KelpDAO exploit, the DeFi community did not sit still. A recovery fund called DeFi United, led by Aave, was organized quickly. Partners including Mantle, Consensys, Arbitrum, ether.fi, Lido Finance, and Compound all stepped in to help.

Kelp confirms it has fulfilled its pledged contribution to the recovery fund.

Post April 18, DeFi United led by @aave has defined the path to restore rsETH backing and return markets to normal operation.

We appreciate the support from our partners @Mantle_Official @Consensys…

— Kelp (@KelpDAO) April 30, 2026

KelpDAO contributed 2,000 ETH from its own treasury to the fund. The team was direct about their commitment. “Our internal commitment before any public statement: rsETH holders would not be left behind,” they said. “That commitment has shaped every decision we have made since.”

The recovery plan includes recapitalizing the bridge lockbox, restoring Oracle functionality, and clearing deficits across affected markets. A governance proposal has also moved to Snapshot voting to release frozen ETH from the Arbitrum Security Council to support the effort. It is a rare show of coordinated response in an industry that often moves too slowly after an attack.

Social Engineering Is the Real Threat

Here is what makes April’s hacks especially alarming. Most of the major attacks did not exploit code. They exploited people. Social engineering, compromised private keys, and bridge vulnerabilities were the primary crypto hack vectors throughout the month. That changes the security conversation entirely. Audits help, but they cannot catch a stolen key or a manipulated employee. The kelpdao exploit and the Drift Protocol breach both point to the same weakness, operational security at the human level. Crypto news today is full of calls for stronger key management practices, hardware security modules, and multi-signature controls across DeFi protocols.

What April Means for DeFi Going Forward

April’s record losses sent a clear signal. As more capital flows into DeFi, the targets get bigger and the attacks get bolder. LayerZero bridge infrastructure, cross-chain protocols, and admin key management are all now firmly in the crosshairs. The industry has the tools to do better. April 2026 crypto hacks are the wake-up call it needed to actually use them.