April 2026 is pure exploit hell in crypto.

$606M+ drained worst month for hacks in over a year. Every few days another one drops. What's going on?

The monsters:

• Drift Protocol (Apr 1) $285M on Solana. Oracle/governance abuse + fake collateral. Lazarus suspected.

• Kelp DAO (Apr 18-19) $292-293M. LayerZero cross chain bridge spoofed, rsETH drained. Biggest of 2026. Lazarus linked.

The rest piling up:

• Rhea Finance $7.6M (oracle/fake liquidity manipulation)

• Grinex $13.74M (wallet drain)

• Volo Vault (Sui) $3.5M (Apr 21-22, targeted vaults with WBTC/XAUm/USDC drained)

• Scallop (Sui) ~$142K (~$140-150K, Apr 26, flash loan on sSUI reward pool / deprecated contract)

• Purrlend $1.5M (Apr 25, multi-network)

• Giddy $1.3M (Apr 23)

• CoW Swap $1.2M (domain hijack)

• Silo Finance $392K (oracle)

• Aethir $423K (access control)

• Dango $410K (bridge/smart contract bug)

There’s more:

ZetaBridge, PulseVault, AeroSwap, NodeFi, LendHub, CrestDAO, etc.

Bonus:

Litecoin (LTC) got hit with a zero-day bug (Apr 25-26) invalid MWEB txs forced a 13-block reorg to reverse fake transactions sent to exchanges.

Not a massive drain but exposed node vulnerabilities and sparked inside job? debates.

Bridges, oracles and key management are still getting absolutely cooked.

Lazarus eating good while the rest of us watch the body count rise daily.

This isn’t building it’s bleeding