Security Incidents

Kamino has temporarily suspended interactions with LayerZero-related tokens as a precaution, while allowing withdrawals and debt repayments. They emphasize that this measure is for risk management and that user funds are safe.

Kelp DAO was hacked on April 19. The attacker used LayerZero’s cross-chain bridge to forge messages, releasing 116,500 rsETH, for losses of about $292 million, making it the largest DeFi event of 2026. This incident highlights security vulnerabilities in cross-chain bridges, triggering a sharp market reaction; related protocols also urgently froze assets, facing further liquidation risk.

Kelp DAO's cross-chain bridge was exploited, resulting in the theft of 116,500 rsETH worth about $292 million, the largest DeFi attack of 2026. Multiple protocols have taken protective measures, and Kelp DAO is investigating the incident with experts.

Gate News message, according to onchain data, KelpDAO's liquid staking token has been exploited for over $100 million. The incident involves KelpDAO's liquid staking token infrastructure.

Grinex’s shutdown is intensifying scrutiny of crypto laundering tactics, as fund movements suggest behavior inconsistent with typical enforcement actions. Chainalysis analysis highlights patterns that raise questions about whether the activity aligns with a conventional external hack or

Rhea Finance suffered an oracle manipulation attack on the NEAR Protocol, with losses reaching $18.4 million—double the initial estimate. The attacker manipulated the pricing of a fake token, causing collateral valuations to be incorrect. Tether froze about $4.34 million in USDT; the attacker returned roughly $3.5 million. To date, more than $7.8 million has been recovered, highlighting the importance of oracle security.

Vitalik Buterin warned on April 18 about an attack on the DNS registrar for eth.limo, urging users to avoid accessing vitalik.eth.limo and related pages. He recommended using IPFS as an alternative until the issue is resolved.

Grinex, a sanctioned crypto-ruble exchange, has halted operations due to a cyberattack that stole over $13.74 million in USDT. The attack is believed to involve state-level actors aiming to destabilize Russia's financial system. Grinex is cooperating with law enforcement but has no timeline for resuming services.

Figure Technology Solutions faced allegations from Morpheus Research of overstating its blockchain technology use, resulting in a significant drop in share prices. Figure defended its operations, highlighting its digital asset features and strong performance metrics.

Robert Dunlap, a Houston entrepreneur, was sentenced to 23 years in prison for a $20 million cryptocurrency fraud involving fake assets and deceptive practices, impacting over 1,000 victims. His case reflects a broader rise in crypto-related cybercrimes.

SlowMist's security team has warned of a social engineering campaign targeting cryptocurrency users. Fraudsters are posing as project partners to trick users into downloading a malicious application disguised as a translation tool. Users are advised to verify software authenticity.

Zonda CEO Przemysław Kral has attributed the exchange's loss of access to 4,500 BTC, valued at $336 million, to missing founder Sylwester Suszek's failure to transfer private keys. Amid allegations of bankruptcy and intensified withdrawal requests, Kral insists Zonda remains solvent and will pursue legal action while searching for Suszek, who disappeared in 2022.

Grinex, a Kyrgyz crypto exchange, suspended trading after a cyberattack resulting in losses of around $15 million. The advanced nature of the attack points to organized or state-level involvement. Grinex has reported the incident to authorities and is assessing the damage.

Tether froze $3.29 million in USDT linked to Rhea Finance exploit, ensuring user protection and ecosystem trust. Blockchain tracking enabled this action against suspicious wallets after attackers moved funds to evade detection.

Circle Internet Group's stock fell 1% after a class action lawsuit alleged it failed to prevent $230 million in stolen USDC during the Drift Protocol exploit. The lawsuit questions Circle's ability to halt the attackers' transactions, raising issues of responsibility for stablecoin issuers in breach scenarios.

The Ethereum Foundation's ETH Rangers Program revealed a major security threat from North Korean operatives infiltrating Web3 companies. The investigation uncovered about 100 operatives, flagged 53 projects, and recovered over $5.8 million. The foundation urges improved hiring processes and global cooperation for enhanced security.

James Wynn launched a memecoin presale, $ASSDAQ, on Solana, raising just $8,000 in ten hours, attracting criticism over past scam allegations. Despite Wynn's claims of trading success, market reluctance signals skepticism about his new project.

CoW Swap, the Ethereum-based decentralized exchange aggregator, paused its protocol on April 14, 2026, after attackers seized control of its website domain and redirected users to a malicious site engineered to harvest wallet approvals, with cybersecurity researcher Vladimir S. estimating

Bitcoin developers are working on BIP-361 to protect against quantum computing threats by migrating funds to safer formats, potentially freezing 1.7 million BTC. Charles Hoskinson critiques the plan, arguing it may lead to permanent freezing of vulnerable coins. The debate highlights tensions in adapting Bitcoin's protocols.

Drift Protocol faced a $280 million loss due to a hack, prompting Tether to launch a $150 million recovery plan, switching settlement assets to USDT. Meanwhile, Circle faces a lawsuit for failing to freeze stolen funds, highlighting regulatory ambiguities in the crypto industry.