According to DefiLlama, DeFi and on-chain infrastructure hacks caused $624.58 million in losses in April 2026, marking the sixth-largest monthly loss on record. The 23 incidents recorded that month also represent the highest number of attacks in a single month since tracking began in 2016.
Notable April hacks included attacks on restaking platform KelpDAO and decentralized exchange Drift Protocol. Attack vectors included cross-chain bridge exploits, oracle manipulation, fake collateral schemes, and hot wallet theft, indicating structural risks across wallet and infrastructure layers rather than isolated vulnerabilities.