Crypto Hackers Steal $92 Million in April: A Sign the Internet’s Wild West Isn’t Over Yet

In case you’ve been living under a rock—or maybe just under your secure crypto wallet—cryptocurrency hackers are back, and they’ve taken more than $90 million in April alone. That’s right, folks. The industry’s security improvements? Still a work in progress. 🙄

According to an April 30 research report by blockchain cybersecurity firm Immunefi, hackers made off with a staggering $92 million across 15 separate incidents. And no, that’s not a typo. $92 MILLION. If you’re wondering how that compares to March, well, you’re in for a treat: it’s up 124% from the $41 million hackers stole last month. I mean, who’s keeping score, right?

Crypto hacker image

The biggest heist of the month took place on the open-source platform UPCX, where hackers made off with over $70 million. That’s a serious chunk of change, folks. KiloEx, in a valiant second place, lost $7.5 million. But wait, there’s a twist! The KiloEx thief actually returned the stolen funds days later. Are we supposed to be impressed? Because I’m not. It’s like a thief who returns the jewelry after it doesn’t fit their mistress. 🧐

All these attacks? They targeted decentralized finance (DeFi) platforms exclusively. No incidents were reported from centralized exchanges, because apparently, those are safe—at least for now.

Crypto heist image

Immunefi, which claims to protect $190 billion in user funds, has even paid over $116 million in bounties to white hat hackers. So, at least someone’s getting paid, right? 👏

State-backed Threats Raise Alarms

The report comes nearly two months after the Bybit exchange got completely raided, losing more than $1.4 billion in one fell swoop—making it the largest hack in crypto history. You know, no big deal. Just another Tuesday in the world of digital finance. 🙃

According to Mitchell Amador, the Founder and CEO of Immunefi, “The sheer scale of the attack shows how state-backed actors are arguably the most pressing threat to our industry.” Translation: if you’re not worried about the governments of rogue nations attacking your portfolio, maybe you should be. 🏃‍♂️💨

Amador’s advice? “Protocols must be built for resilience under the assumption that attackers will find a way in.” In other words, don’t be surprised when hackers pop in for a visit. And remember, even the most innocent-looking email could be a trap. (Maybe don’t open that link promising you a free coffee, okay?) ☕

“Protocols must be built for resilience under the assumption that attackers will find a way in, and investors must assume that even the safest-looking interfaces or emails might be traps.”

He also suggested a “zero-trust” approach, which, honestly, sounds like the mantra for every skeptical millennial in the room. That means regular audits, bug bounties, and more robust security measures. Because if you think your crypto stash is totally secure, you’re in for a surprise. 😬

As of April, hackers have already snatched over $1.7 billion worth of digital assets in 2025. For comparison, in 2024, they only made off with $1.49 billion. So yeah, we’re already surpassing last year’s totals by quite a bit. No one’s learning here, are they?

And remember that quiet moment in the second half of 2024 when North Korea’s Lazarus Group was suspiciously quiet? Well, according to Eric Jardine, the cybercrimes research lead at Chainalysis, that was just them plotting to steal $1.4 billion from Bybit. Classic Lazarus move, right?

Read More

2025-04-30 16:24