$92M Stolen in April: DeFi Hacks Surge as 2025 Losses Top $1.7 Billion

Hackers stole a staggering $92 million from decentralized finance (DeFi) platforms in April 2025, according to a report by blockchain security firm Immunefi. The wave of attacks hit 15 separate DeFi protocols, representing a massive 124% spike compared to March’s $41 million in losses.

The Biggest DeFi Hacks of April

  • UPCX suffered the most significant breach, losing $70 million in a single exploit.
  • KiloEx was hit for $7.5 million, though the attacker later returned the funds.
  • Centralized exchanges were not affected, highlighting DeFi’s unique security challenges.

Immunefi confirmed that all losses in April were limited to DeFi platforms, underlining how vulnerable open-source and permissionless systems remain.

Immunefi’s Warning to the Industry

Immunefi’s CEO, Mitchell Amador, said the growing sophistication of hackers — particularly state-sponsored actors — is one of the crypto industry’s biggest threats.

“The sheer scale of the attack shows how state-backed actors are arguably the most pressing threat to our industry,” Amador warned.

He stressed the need for a “zero-trust” mindset, urging protocols to assume attackers will breach their systems eventually, and to design accordingly.

2025: The Worst Year Yet?

As of April 30, total stolen funds in 2025 have now surpassed $1.7 billion, outpacing all of 2024, which saw $1.49 billion in theft.

Despite better bug bounty programs and increased auditing efforts, cyberattacks on DeFi protocols are accelerating. The industry’s worst breach this year remains the $1.5 billion Bybit hack in February.

YOU MIGHT ALSO LIKE: What Happened in the Crypto World Today? (April 29, 2025)

Sahil Poudel

Leave a Comment

Copy link