Connect with us
DAPA Banner

Crypto World

April 2026 Becomes Worst Month for Crypto Hacks Since February 2025

Published

on

$3 Million Reportedly Lost in CrossCurve Bridge Exploit

Crypto protocols lost over $606 million to hacks in just 18 days of April 2026. That makes it the single worst month for exploits since February 2025.

The surge comes from two attacks on KelpDAO and Drift Protocol. Together, they account for 95% of April’s losses and 75% of 2026’s total of $771.8 million.

April 2026 Crypto Hack Losses Dwarf Q1 Combined

According to data from DefiLlama, April’s $606.2 million total across 12 incidents, it has already eclipsed the first quarter’s $165.5 million haul. That makes the month roughly 3.7 times as large as January, February, and March combined.

Follow us on X to get the latest news as it happens

Advertisement
Month Number of Hacks Amount Lost
January 12 $100.1M
February 8 $24.2M
March 15 $41.3M
April (to April 18) 12 $606.2M
YTD Total 47 $771.8M

Every month since February 2025 has held under $240 million, per DefiLlama’s tracker. That earlier figure was skewed by the $1.4 billion Bybit breach, which drove February 2025’s total to $1.466 billion.

April 2026’s losses arrived without any headline exchange hack of that size. The pattern shows how quickly attackers pivoted to Decentralized Finance (DeFi) infrastructure.

BeInCrypto reported that KelpDAO lost over $290 million on April 18, now the year’s largest single hack. Drift Protocol sits just behind at $285 million.

The damage has stacked up in recent days. Incidents at Vercel, Hyperbridge, Grinex Exchange, and Rhea Finance have piled in 2026.

Advertisement

“None of these accounts for the collateral damage seen across TVL, user trust, valuations, and the space’s morale. DeFi remains a niche market until risk can be properly priced; at this time, we’re far from it,” an anlyst wrote.

DeFi TVL Slides as Sentiment Cracks

DeFi total value locked (TVL) fell by more than 7% over the past 24 hours following the Kelp exploit. Aave alone dropped from $26.4 billion to near $17.9 billion.

“Every protocol is taking a hit now,” analyst Ted Pillows wrote.

Hack frequency is also climbing sharply. DeFi recorded 47 incidents in the first 4.5 months of 2026, compared with 28 over the same period in 2025. That works out to a roughly 68% year-over-year rise.

The reactions point to rising concern that DeFi’s risk pricing has not caught up with infrastructure-layer exploits. Dollar losses sit below 2025’s Bybit-skewed pace, yet incidents keep stacking. The next few weeks will show whether DeFi can tighten security before April’s trend defines the year.

Advertisement

The post April 2026 Becomes Worst Month for Crypto Hacks Since February 2025 appeared first on BeInCrypto.

Source link

Advertisement
Continue Reading
Click to comment

You must be logged in to post a comment Login

Leave a Reply

Crypto World

Three Major Japanese Financial Institutions Tap Canton to Bring Government Bonds On-Chain

Published

on

Three Major Japanese Financial Institutions Tap Canton to Bring Government Bonds On-Chain

Mizuho, Nomura, and Japan’s central clearing house are launching a blockchain-based proof-of-concept for collateral management of Japanese government bonds.

Three of Japan’s most prominent financial institutions — Mizuho Financial Group, Nomura Holdings, and Japan Securities Clearing Corporation (JSCC) — have announced a joint proof-of-concept with Canton’s parent company, Digital Asset, to test digital collateral management for Japanese Government Bonds (JGBs) on the Canton Network.

According to a press release shared with The Defiant, the proof-of-concept is part of a broader initiative supported by the Financial Services Agency’s (FSA) Payment Innovation Project. The move aims to verify the efficacy of blockchain for transferring JGB rights within the country’s existing legal framework, specifically the Act on Book-Entry Transfer of Corporate Bonds and Shares.

The project’s main goal is to enable 24/7 real-time collateral transactions, a meaningful upgrade from current infrastructure constrained by business hours and manual reconciliation. By integrating legacy systems with Canton’s blockchain rails, the consortium hopes to dramatically cut the administrative overhead associated with posting and substituting collateral.

Advertisement

The project will also test cross-border scenarios, examining how JGBs can move between clearing houses, institutional investors, clients, and agents across both domestic and international markets, per the release.

JGBs are among the widely accepted forms of eligible collateral globally, according to the release, making their on-chain availability strategically significant.

Canton Network positions itself as a public Layer 1 blockchain with customizable privacy features designed for TradFi institutions. The “public” claim has drawn heat from prominent voices across the crypto industry.

Canton’s TradFi Moves

Canton has been on an institutional partnership tear heading into 2026. Fintech Transcend recently connected to the network, enabling clients to move collateral and cash in real time across counterparties using a mix of traditional and tokenized assets.

Advertisement

Before that, JPMorgan announced it would issue its deposit token natively on Canton, with rollout planned in phases throughout 2026, following DTCC’s selection of Canton to tokenize a subset of the U.S. Treasury securities it holds, citing the platform’s privacy features.

Meanwhile, fellow Japanese TradFi giant Mitsui & Co. has also been expanding its on-chain footprint, with its crypto arm announced last week that it would bring its tokenized metals asset ZipangCoin to Optimism’s L2 OP Mainnet — the first deployment of the token on a public blockchain.

U.S. Treasury debt currently makes up the largest portion of distributed tokenized real-world assets (RWAs) — assets that are transferable on-chain — with over $13.7 billion, over half of which is on Ethereum, per data from RWAxyz.

In contrast, all of the $334.35 billion in tokenized repurchase agreements (repos) on Canton is considered represented value, as it only uses blockchain, in this case Canton, for record keeping.

Advertisement

This article was written with the assistance of AI workflows. All our stories are curated, edited and fact-checked by a human.

Source link

Continue Reading

Crypto World

BTCC Brings SpaceX Pre-IPO Trading to Crypto Markets

Published

on

BTCC Brings SpaceX Pre-IPO Trading to Crypto Markets

BTCC has launched SPACEXUSDT perpetual futures, opening a new way for users to trade price exposure tied to SpaceX. The product is now live in the exchange’s tokenized stocks section and offers leverage of up to 50x.

The timing is no surprise. SpaceX remains one of the most-watched private companies in the world. Elon Musk’s name keeps attention high, while Starlink’s growth and IPO speculation keep investor interest active. For crypto exchanges, few private firms carry as much attention and trading appeal.

On SpaceX

SpaceX is drawing renewed market attention as IPO talk builds. Starlink’s app downloads and monthly active users more than doubled year over year in the first quarter, while total subscribers passed 10 million in February.

Private market pricing has added more fuel to investor interest. A December 2025 tender offer valued SpaceX at $800 billion, while current IPO talk has pulled valuation estimates as high as $1.75 trillion, with Starlink growth driving much of investor focus.

SpaceX is also staying in the news through the satellite internet race. Amazon agreed to buy Globalstar for $11.57 billion as competition with Starlink intensifies. Amazon remains far behind SpaceX in satellite deployment, with Starlink already operating more than 10,000 satellites.

Advertisement

For retail traders, access remains a major draw. Private company exposure usually comes through secondary transactions and private allocations. A perpetual futures contract gives users a simpler way to trade around SpaceX pricing and investor sentiment. Across crypto exchanges, products linked to familiar companies and active news cycles tend to attract faster interest than lesser-known names. 

BTCC Is Expanding Its Product Mix

BTCC is using the SpaceX launch to push further into products linked to traditional market themes. The exchange has already pointed to strong early activity in its TradFi product line, where users can trade traditional market instruments with USDT.

SpaceX gives BTCC a high-interest name with strong retail recognition and a story traders already understand. In its announcement, BTCC also says it is among the first exchanges to offer SpaceX perpetual futures and describes SPACEXUSDT as having deep order book liquidity.

BTCC has paired the launch with a giveaway offering up to 1,000 USDT in rewards and a Tesla Cyberbeast. The campaign links the contract to the wider Musk brand universe, which gives the launch even more visibility.

Advertisement

Retail Access Expands, But the Risk Remains High

Products like this appeal to traders because they open access to stories usually reserved for private market participants. SpaceX has long been a company many people wanted exposure to, but few could reach directly.

At the same time, leveraged derivatives demand caution. BTCC states in its support materials that leverage increases both upside and downside. For retail users, a product tied to a pre-IPO story and amplified by leverage can produce large swings in either direction.

This is where the appeal and the danger sit side by side. The product is easy to understand from a narrative perspective, but it still trades like a high-risk derivative.

A New Route Into Private Market Speculation

BTCC’s SpaceX contract shows how crypto exchanges are packaging well-known private company stories into round-the-clock trading products. SpaceX brings public attention, IPO curiosity, and strong name recognition, which makes it a natural fit for this kind of listing.

Advertisement

Whether tokenized pre-IPO trading becomes a lasting category will depend on user demand after the first wave of curiosity fades. For now, BTCC is betting SpaceX can draw traders looking for fresh exposure outside the usual crypto lineup.

The post BTCC Brings SpaceX Pre-IPO Trading to Crypto Markets appeared first on BeInCrypto.

Source link

Advertisement
Continue Reading

Crypto World

Friday’s eth.limo Hijack Caused by Social Engineering on EasyDNS

Published

on

Friday’s eth.limo Hijack Caused by Social Engineering on EasyDNS

Ethereum Name Service gateway eth.limo has revealed that the domain hijacking on Friday was caused by a social engineering attack directed against EasyDNS, its domain name service provider. 

According to a postmortem published by eth.limo on Saturday, an attacker impersonated one of its team members to initiate an account recovery process with easyDNS, granting access to the eth.limo account and allowing them to alter domain settings.

“The NS records were changed and directed to Cloudflare… Once we understood that a DNS hijack had taken place, we immediately notified the community as well as Vitalik Buterin and others. We then began contacting EasyDNS in an attempt to respond to the incident,” the company said.

Eth.limo serves as a Web2 bridge, providing access to around 2 million decentralized websites using the .eth domain name. Hijacking the service could allow an attacker to redirect users to malicious websites. Ethereum co-founder Vitalik Buterin warned users Friday to avoid his blog until the incident was resolved.

Advertisement

Mark Jeftovic, CEO of easyDNS, has publicly accepted responsibility for the incident in its own postmortem report. 

“We screwed up and we own it,” said Jeftovic on Saturday. 

“This would mark the first successful social engineering attack against an easyDNS client in our 28-year history. There have been countless attempts.”  

Both companies have pointed to the Domain Name System Security Extension (DNSSEC) in thwarting the hacker’s attempts to do further damage. 

The attacker couldn’t produce valid cryptographic signatures, so Domain Name System resolvers rejected the attacker’s forged DNS responses, causing users to see error messages instead of being redirected to malicious sites. 

Advertisement

“DNSSEC was enabled for their domain when the attackers attempted to flip their nameservers, presumably to effect some manner of phishing or malware injection attack, DNSSEC-aware resolvers, which most are these days, began dropping queries,” Jeftovic said. 

Source: eth.limo

In its postmortem, eth.limo noted that because the attacker lacked the signing keys, they were unable to bypass the safeguards, which likely “reduced the blast radius of the hijack. We are not aware of any user impact at this time. We will provide updates if that changes.”

easyDNS makes changes since the attack

Jeftovic described the social engineering attack as “highly sophisticated,” and said easyDNS is still conducting a post-mortem on how the breach occurred, and has already begun rolling out changes to prevent a recurrence.

Source: easyDNS

“In eth.limo’s case, we will be migrating them to Domainsure, which has a security posture more suited toward enterprise and high-value fintech domains, TLDR there is no mechanism for an account recovery on Domainsure, it’s not a thing,” he added.

“On behalf of everyone here, I apologize to the eth.limo team and the wider Ethereum community. ENS has always had a special place in our heart as the first registrar to enable ENS linking to web2 domains and we’ve been involved in the space since 2017.”

Related: RaveDAO denies manipulation as Binance, Bitget probe RAVE trading activity

Advertisement

The eth.limo incident is the latest in a series of domain hijackings targeting crypto projects. Days earlier, decentralized exchange aggregator CoW Swap lost control of its website after an unknown party hijacked its domain. 

Steakhouse Financial, a DeFi advisory and research firm, similarly disclosed at the end of March that it had lost control of its domain to an attacker.

Magazine: Will the CLARITY Act be good — or bad — for DeFi?