DeFi Security Breach: April Crypto Hacks Surge to $630 Million

The cryptocurrency sector experienced a significant security setback in April, with total losses from hacks exceeding $629.7 million. This represents the most severe month for exploits in over a year, trailing only a massive $1.47 billion event in February 2025. Decentralized Finance (DeFi) emerged as the primary target, with two massive exploits—KelpDAO and Drift Protocol—accounting for 82% of the monthly total. KelpDAO lost $293 million, while Drift Protocol suffered a $280 million exploit, highlighting the systemic risk posed by high-value protocol concentrations. Other notable breaches included the Wasabi Protocol, which lost approximately $5.5 million across multiple networks, and Sweat Economy, which saw $3.46 million drained from its liquidity pool in under 30 seconds. Aftermath Finance also reported a $1.1 million loss in USDC. Security experts note a tactical shift among attackers. Rather than targeting smart contract bugs, hackers are now exploiting the 'seams' between on-chain protocols and off-chain systems, such as compromised remote procedure call (RPC) nodes and cloud key management systems. Despite the losses, some analysts suggest the industry is maturing. Standard Chartered noted that while the KelpDAO incident raises questions about DeFi banking growth and its impact on AAVE, the overall trajectory remains on track as the sector implements more robust automated safeguards and real-time monitoring.