Security Incidents

According to DeFi Llama, the number of crypto hacks rose to a record high in April, with over 20 exploits marking the most-hacked month in crypto history by incident count. The total losses exceeded $600 million, with KelpDAO's $292 million exploit and Drift Protocol's $280 million hack ranking as t

## Drift Theft Operation North Korean-state-backed spies conducted an in-person operation targeting cryptocurrency platform Drift to drain $285 million, according to reports. The operation involved months of direct engagement with the target. ## Broader North Korean Cyber Threat According to a se

According to Purrlend's official incident report, on April 25, the protocol suffered a security breach resulting in approximately $1.52 million in losses across HyperEVM and MegaETH deployments. Attackers compromised a 2/3 multisig wallet and granted themselves admin privileges including

According to The Block, Polymarket has enlisted Chainalysis on Thursday to help police insider trading and market manipulation as the prediction market seeks to raise $400 million at a $15 billion valuation and gain approval from the Commodity Futures Trading Commission to relaunch in the U.S. marke

According to TRM Labs, North Korean hackers stole approximately $577 million in cryptocurrency during the first four months of 2026, accounting for roughly 76% of all global cryptocurrency losses year-to-date. The figure highlights a strategic shift by elite units such as the Lazarus Group toward hi

According to Syndicate's official statement on May 1, a private key leak led to malicious upgrades of bridge contracts across two blockchains, resulting in the theft of approximately 18.5 million SYND tokens (worth $330K) and $50K in customer assets. The company attributed the vulnerability to priva

According to security intelligence research firm analysis, North Korean-state-backed hackers drained $285 million from Drift through an extended in-person operation in 2026. The hackers account for 76% of all crypto scam and hack losses this year and have stolen $6 billion

According to a Global Ledger investigation published in April 2026, Grinex, a sanctioned cryptocurrency exchange operating out of Kyrgyzstan, was drained of approximately $13.7 million and immediately suspended operations. Grinex had emerged in March 2025 as an apparent successor to Garantex, a

According to Syndicate Labs, on May 1, a private key leak resulted in malicious upgrades to the company's cross-chain bridge contracts on two blockchains. Attackers drained approximately 18.5 million SYND tokens (worth around $330,000) and about $50,000 in user tokens. The incident affected only

According to TRM Labs, North Korean actors extracted approximately $577 million in the first four months of 2026, representing 76% of all global cryptocurrency hack losses during the period. The theft stems from two April incidents: the $292 million KelpDAO exploit and the $285 million Drift

According to TRM Labs, North Korean actors extracted approximately $577 million through the first four months of 2026, representing 76% of all global cryptocurrency hack losses during the period. The losses stem from two April incidents: the $292 million KelpDAO exploit and the $285 million Drift Pr

4月18日 rsETH 跨鏈橋遭駭後兩週，Kelp 於4/29完成升級：驗證者4/4、區塊確認64、拓撲採 hub-and-spoke，跨鏈訊息必須經以太主網中轉。ether.fi 亦同步硬化 weETH，並加入 DeFi United 捐贈5,000 ETH。DeFi United動員逾70,000 ETH救援資金，Aave 等市場利率顯著下降；但攻擊者仍持有約107,000 rsETH待清算，需治理與委員會式流程回收。

DeFi 衍生品 Wasabi Protocol 4/30 遭管理員私鑰外洩，攻擊者透過 Deployer EOA 獲得 ADMIN_ROLE，再利用 UUPS 升級機制替換 perp vaults 與 LongPool 為惡意版本，直接提款。CertiK 初估損失約 290 萬美元，影響以太坊主網與 Base；Wasabi 已公告暫停互動，Virtuals Protocol 也凍結 Wasabi 相關保證金。此事件凸顯上游私鑰安全對下游生態的風險。

According to BlockBeats, WasabiCard issued a security statement on April 30 clarifying that it has no affiliation with Wasabi Protocol, Wasabi Wallet, or related projects and institutions. The platform partners with Safeheron for custodial wallet services and collaborates with security auditor

According to the U.S. Department of Justice, the FBI-led global task force arrested 276 suspects and disrupted nine crypto scam centers on Wednesday. Dubai police arrested 275 individuals, with three charged in California on wire fraud and money laundering counts. Thai authorities arrested one suspe

According to PeckShield, Blockaid, and CertiK, decentralized derivatives platform Wasabi Protocol was exploited for more than $5 million in a coordinated attack spanning Ethereum, Base, Berachain, and Blast. The breach was caused by a compromised admin key rather than a smart contract vulnerability.