BIGGEST CRYPTO EXPLOITS OF APRIL
April was marked by a wave of major crypto exploits:
#DriftProtocol
Exploit date: April 1, 2026
Amount lost: $285M
The attack relied on social engineering to compromise multisig governance and used Solana’s durable nonces to pre-sign admin transfers weeks in advance, allowing the attackers to bypass security and execute the exploit within minutes.
#KelpDAO
Exploit date: April 18, 2026
Amount lost: $293M
The attacker tricked LayerZero's cross-chain messaging layer into believing a valid instruction had arrived from another network, which triggered Kelp's bridge to release 116,500 rsETH to an attacker-controlled address. The attack is attributed to the North Korea-linked Lazarus Group.
April was marked by a wave of major crypto exploits:
#DriftProtocol
Exploit date: April 1, 2026
Amount lost: $285M
The attack relied on social engineering to compromise multisig governance and used Solana’s durable nonces to pre-sign admin transfers weeks in advance, allowing the attackers to bypass security and execute the exploit within minutes.
#KelpDAO
Exploit date: April 18, 2026
Amount lost: $293M
The attacker tricked LayerZero's cross-chain messaging layer into believing a valid instruction had arrived from another network, which triggered Kelp's bridge to release 116,500 rsETH to an attacker-controlled address. The attack is attributed to the North Korea-linked Lazarus Group.