Hackers stole a staggering $92 million from decentralized finance (DeFi) platforms in April 2025, according to a report by blockchain security firm Immunefi. The wave of attacks hit 15 separate DeFi protocols, representing a massive 124% spike compared to March’s $41 million in losses.
The Biggest DeFi Hacks of April
- UPCX suffered the most significant breach, losing $70 million in a single exploit.
- KiloEx was hit for $7.5 million, though the attacker later returned the funds.
- Centralized exchanges were not affected, highlighting DeFi’s unique security challenges.
Immunefi confirmed that all losses in April were limited to DeFi platforms, underlining how vulnerable open-source and permissionless systems remain.
Immunefi’s Warning to the Industry
Immunefi’s CEO, Mitchell Amador, said the growing sophistication of hackers — particularly state-sponsored actors — is one of the crypto industry’s biggest threats.
“The sheer scale of the attack shows how state-backed actors are arguably the most pressing threat to our industry,” Amador warned.
He stressed the need for a “zero-trust” mindset, urging protocols to assume attackers will breach their systems eventually, and to design accordingly.
2025: The Worst Year Yet?
As of April 30, total stolen funds in 2025 have now surpassed $1.7 billion, outpacing all of 2024, which saw $1.49 billion in theft.
Despite better bug bounty programs and increased auditing efforts, cyberattacks on DeFi protocols are accelerating. The industry’s worst breach this year remains the $1.5 billion Bybit hack in February.
YOU MIGHT ALSO LIKE: What Happened in the Crypto World Today? (April 29, 2025)
