Incidents by month

Crypto hacks and exploits in April 2026

Name: OAK — OnChain Attack Knowledge Dataset
License: https://creativecommons.org/licenses/by-sa/4.0/
Keywords: on-chain attacks, smart contract exploits, crypto laundering, threat actors, taxonomy

9 incidents. Each links to a full write-up: timeline, OAK Techniques, attacker addresses and fund flow, with sources.

Incidents (9)

Volo Admin-Key Social-Engineering Compromise — Sui — 2026-04-21 — 2026-04-21 · loss $3.5M · OAK-T11.014 Operator Privileged-Key Compromise
KelpDAO rsETH exploit (Apr 2026): $292M — 2026-04-18 · loss $292M · OAK-T10.002.001 Off-chain Observer Source-Event Forgery
Hyperbridge Merkle-proof forgery and counterfeit-DOT mint — Polkadot ⇄ Ethereum / Base / BNB / Arbitrum — 2026-04-13 — 2026-04-13 · loss $2.5M · OAK-T10
Drift Protocol durable-nonce admin-takeover and fictitious-collateral drain — Solana — 2026-04-01 — 2026-04-01 · loss $285M · OAK-T11.001 Third-Party Signing-Vendor UI / Signing-Flow Compromise
Zondacrypto Exchange CEO-Transition Custody Failure and Alleged Russian Mafia Takeover — Apr 2026 — ~$96M — loss $96M
Wasabi Protocol UUPS Proxy-Upgrade Admin-Key Exploit — Apr 2026 — ~$4.5–5.5M — loss $4.55M · OAK-T6.005 Proxy-Upgrade Malicious Switching
Rhea Finance Margin-Parser Exploit (Apr 2026): $18.4M — loss $18.4M · OAK-T7.005 Privacy-Chain Hops
RaveDAO ($RAVE) insider OTC distribution and coordinated dump — Multi-CEX (Binance / Bitget / Gate) — 2026-04 — loss $5.7B · OAK-T1.004 Blacklist / Pausable Transfer Weaponization
RAVE Token (Apr 2026): $26 — loss $26