DeFiLlama confirmed April 2026 as the worst month on record for hacks with 28–30 separate exploits and more than $625 million stolen. Two large attacks — Drift Protocol on Solana (~$285M, April 1, linked to Lazarus Group social-engineering) and KelpDAO (~$293M, ~April 18, LayerZero bridge message spoofing) — made up about 93% of the dollar losses. The remaining 26+ incidents were mostly under $5M (many below $1M) and targeted lending pools, vaults, staking contracts, oracle configs and cross-chain bridges. Monthly incident count spiked to a record high (nearly one attack per day); YTD totals through April reached ~68 incidents and over $1B stolen. April’s losses prompted large DeFi outflows (~$14B TVL movement), calls for stronger operational security (multi-sig, AI monitoring, security sprints, user insurance), and ongoing investigations. DeFiLlama’s lifetime totals now exceed $16.5B in hacks, with DeFi losses near $7.7B and bridge exploits about $2.9B.

Record 28–30 incidents and >$625M stolen in April 2026, with two attacks (Drift ~$285M on Solana and KelpDAO ~$293M via LayerZero) accounting for ~93% of losses; monthly incident count and dollar losses are unprecedented, and the events triggered ~$14B in DeFi outflows — facts likely to move market sentiment and assets tied to affected chains/bridges.