Cryptocurrency hackers stole more than $90 million in April, dealing another blow to the industry\u2019s mainstream reputation despite ongoing efforts to improve cybersecurity.<\/p>\n
Hackers made off with $92 million of digital assets across 15 incidents in April, according to an April 30 research report by blockchain cybersecurity firm Immunefi.<\/p>\n
The total marks a 124% month-over-month increase from March, when hackers stole $41 million.<\/p>\n
Crypto stole in April 2025. Source: Immunefi<\/em><\/p>\n The month\u2019s largest hack on open-source platform UPCX accounted for most of the damage in April, with over $70 million<\/a> in losses, while KiloEx lost $7.5 million<\/a> as April\u2019s second-largest hack.<\/p>\n The KiloEx exploiter returned<\/a> the stolen funds just days after the attack occurred.<\/p>\n All of April\u2019s reported attacks targeted decentralized finance (DeFi) platforms. Centralized exchanges reported no incidents during the month, the report noted. <\/p>\n Top 10 losses in April. Source: Immunefi<\/em><\/p>\n Immunefi, which says it helps protect $190 billion in user funds, has paid more than $116 million in bounties to white hat hackers.<\/p>\n Related: <\/strong><\/em>Bitcoin volatility lowest in 563 days, Hayes predicts $1M BTC by 2028<\/strong><\/em><\/a><\/p>\n The report comes nearly two months after Bybit exchange lost over $1.4 billion<\/a> on Feb. 21 \u2014 the largest hack in crypto history<\/a>.<\/p>\n \u201cThe sheer scale of the attack shows how state-backed actors are arguably the most pressing threat to our industry,\u201d according to Mitchell Amador, Founder and CEO of Immunefi.<\/p>\n \u201cThis is a reminder of the need for security measures that protect the entire security stack and help protocols prevent catastrophic attacks before they happen,\u201d Amador told Cointelegraph, adding:<\/p>\n \u201cProtocols must be built for resilience under the assumption that attackers will find a way in, and investors must assume that even the safest-looking interfaces or emails might be traps.\u201d<\/p>\n He called for protocols to adopt a \u201czero-trust\u201d approach and implement more robust protections across the entire technology stack. <\/p>\n Related: <\/strong><\/em>Bunq, Europe\u2019s second-largest neobank, expands into crypto<\/strong><\/em><\/a><\/p>\n Bug bounties, regular audits and formal verifications will be essential to ensure to security of smart contracts and backed infrastructure, he said.<\/p>\n As of the end of April, hackers have already stolen more than $1.7 billion worth of digital assets in 2025, already surpassing the estimated $1.49 billion in losses for all of 2024, according to Immunefi.<\/p>\n The state-backed\u00a0 North Korean Lazarus Group<\/a>\u2019s pause in the second half of 2024 may have been a repositioning in preparation<\/a> for staging the world\u2019s largest hack on Bybit, Eric Jardine, Chainalysis’ cybercrimes research Lead, told Cointelegraph.<\/p>\nState-backed threats raise alarms<\/h2>\n