Crypto hackers hit DeFi for $92M in April as attacks double from March

5 hours ago

Crypto hackers person already surpassed the $1.49 cardinal stolen during 2024, according to Immunefi’s latest research.

Crypto hackers deed DeFi for $92M successful April arsenic attacks treble from March

Cryptocurrency hackers stole much than $90 cardinal successful April, dealing different stroke to the industry’s mainstream estimation contempt ongoing efforts to amended cybersecurity.

Hackers made disconnected with $92 cardinal of integer assets crossed 15 incidents successful April, according to an April 30 probe study by blockchain cybersecurity steadfast Immunefi.

The full marks a 124% month-over-month summation from March, erstwhile hackers stole $41 million.

The month’s largest hack connected open-source level UPCX accounted for astir of the harm successful April, with over $70 million successful losses, portion KiloEx mislaid $7.5 million arsenic April’s second-largest hack.

The KiloEx exploiter returned the stolen funds conscionable days aft the onslaught occurred.

All of April’s reported attacks targeted decentralized concern (DeFi) platforms. Centralized exchanges reported nary incidents during the month, the study noted.

Immunefi, which says it helps support $190 cardinal successful idiosyncratic funds, has paid much than $116 cardinal successful bounties to achromatic chapeau hackers.

State-backed threats rise alarms

The study comes astir 2 months aft Bybit speech lost implicit $1.4 billion connected Feb. 21 — the largest hack successful crypto history.

“The sheer standard of the onslaught shows however state-backed actors are arguably the astir pressing menace to our industry,” according to Mitchell Amador, Founder and CEO of Immunefi.

“This is simply a reminder of the request for information measures that support the full information stack and assistance protocols forestall catastrophic attacks earlier they happen,” Amador told Cointelegraph, adding:

“Protocols indispensable beryllium built for resilience nether the presumption that attackers volition find a mode in, and investors indispensable presume that adjacent the safest-looking interfaces oregon emails mightiness beryllium traps.”

He called for protocols to follow a “zero-trust” attack and instrumentality much robust protections crossed the full exertion stack.

Bug bounties, regular audits and ceremonial verifications volition beryllium indispensable to guarantee to information of astute contracts and backed infrastructure, helium said.

As of the extremity of April, hackers person already stolen much than $1.7 cardinal worthy of integer assets successful 2025, already surpassing the estimated $1.49 cardinal successful losses for each of 2024, according to Immunefi.

The state-backed North Korean Lazarus Group’s intermission successful the 2nd fractional of 2024 whitethorn person been a repositioning successful preparation for staging the world’s largest hack connected Bybit, Eric Jardine, Chainalysis' cybercrimes probe Lead, told Cointelegraph.