Hack

North Korea has pushed back against U.S. cybercrime accusations, calling the allegations an attempt to smear the country while blockchain investigators continue to tie major crypto thefts to DPRK-linked actors. A North Korean Foreign Ministry spokesperson dismissed U.S. cyber-threat claims as “absurd slander,” according to Reuters. The statement accused U.S. government bodies, media organizations and affiliated groups of spreading a distorted view of the DPRK, while also warning that Pyongyang would take measures to defend its interests in cyberspace. The…

Polymarket has pushed back after a dark-web actor claimed to have obtained more than 300,000 platform records, arguing that the advertised material comes from public APIs and on-chain data rather than a private data breach. The claim surfaced through Dark Web Informer, which flagged a cybercrime-forum post from an actor using the name xorcat. The listing allegedly offered a 750 MB package tied to Polymarket activity, including user profiles, comments, market data, follower lists, reward configurations, and internal identifiers. It…

Layer-1 network ZetaChain said it was hacked on Monday. But the project claimed the attack only affected its own internal team wallets and did not hit user funds.  The network paused cross-chain transactions while the team investigated the incident. This is the second cross-chain exploit in April, after the earlier KelpDAO hack. The team said it had already blocked the attack vector and would release a full post-mortem after completing its investigation. There was an attack against the ZetaChain GatewayEVM…

Stealth address privacy protocol Umbra put its hosted frontend into maintenance mode after confirming that funds stolen in recent hacks had passed through the system.  The team confirmed that roughly 349 Ethereum (ETH), worth about $800,000, came from recent “high-profile” exploits. Umbra Responds to Laundering Reports In a recent post on X (formerly Twitter), Umbra revealed that it made the move at 6:45 AM ET on April 21.  “As has been reported, Umbra was used to move funds associated with…

Sui-based liquid staking platform Volo Protocol said on Wednesday that an attacker drained roughly $3.5 million from three of its vaults, the latest DeFi security breach in a month already shaken by nine-figure exploits. Volo froze every vault after detecting the attack and notified the Sui Foundation. The stolen assets included Wrapped Bitcoin (WBTC), gold-backed XAUm, and USD Coin (USDC). The team said the remaining $28 million in total value locked across other vaults carries no shared attack vector. Inside…

The fallout from the $293 million KelpDAO exploit over the weekend has spread across the DeFi ecosystem, with Total Value Locked (TVL) across several chains dropping significantly in the last 24 hours. According to data from on-chain analytics platform DeFiLlama, at least 126 of the networks it tracks were in the red, with CosmoHub the hardest hit, having lost more than 1,500% of its TVL in that period. A Broad-Based Retreat Across Major Chains Pseudonymous analyst Vet brought attention to…

The $293 million KelpDAO hack on April 18 has left Aave, rsETH holders, and the wider DeFi ecosystem staring at a hole nobody quite knows how to fill. But on Sunday, DeFiLlama co-founder 0xngmi laid out three realistic options on the table and ran the numbers on each. Three Scenarios, None of Them Clean 0xngmi’s first option is to spread the pain. According to them, if KelpDAO socializes losses across all users, it would work out to an 18.5% haircut.…

The cryptocurrency industry saw the most violent hack of 2026 on Saturday evening when an unknown perpetrator breached KelpDAO’s security and drained almost $300 million worth of its liquid staking token, rsETH. They managed to act quickly, depositing the stolen funds into several lending protocols, borrowing money against them, and one of them just experienced a massive investor exodus as its own token crashed hard. CryptoPotato explained in detail the events that took place on Saturday evening from information provided…

Multiple on-chain security companies and industry sleuths reported late on Saturday that the liquid restaking protocol KelpDAO had fallen victim to a major hack in which the perpetrators drained nearly $300 million. The team behind the project confirmed the incident hours later, and added that they have partnered with LayerZero, Unichain, their auditors, and ‘top security experts’ to resolve the issue. The Biggest Hack of 2026 Cyvers was among the security resources that detected the breach in its initial phase…