April crypto exploit losses hit $651M — highest monthly toll since March 2022.

April recorded the highest number of crypto hacking incidents ever tracked by DefiLlama, with CertiK Alert confirming roughly $651 million in total exploit losses for the month — including approximately $3.5 million attributed to phishing attacks.

Stripped of the February 2025 Bybit incident, April now stands as the worst month for exploit losses since March 2022, when the industry absorbed around $715 million in damage. The back-to-back data points from two independent on-chain monitors make the trend hard to dismiss as noise.

The surge is a sharp reminder that security infrastructure has not kept pace with the capital flowing into the space — and that phishing, often treated as a minor vector, is increasingly a meaningful slice of total losses.