KelpDAO and Drift have been linked to crypto exploits in April 2026 with reported losses totaling $650 million, according to early security analyses from blockchain forensics firms.
What the April 2026 Exploits Linked to KelpDAO and Drift Involve
TLDR KEYPOINTS
- KelpDAO and Drift are tied to separate April 2026 exploits with a combined reported loss of $650 million.
- Blockchain analytics firm Chainalysis has published initial findings on both incidents.
- Details on attack vectors, fund recovery, and confirmed breakdowns remain limited at this stage.
Chainalysis published an analysis of what it described as a KelpDAO bridge exploit that occurred in April 2026. The firm also released a separate examination covering lessons from the Drift hack, placing both incidents within the same monthly window.
Two Projects, One Combined Total
The $650 million figure spans both the KelpDAO and Drift incidents. The exact breakdown between the two exploits has not been independently confirmed through verified on-chain data accessible to this publication.
Separately, Cointelegraph reported that Aave deposits dropped following the KelpDAO exploit, suggesting downstream effects across DeFi lending protocols.
Why the Combined Figure Matters for Crypto Security
Aggregate Exploit Totals Shape Market Perception
When two large-scale incidents are grouped under a single monthly total, the combined number shapes how the market perceives systemic risk. If confirmed, the figure would place April 2026 among the most costly exploit months in recent memory.
It is important to distinguish between the headline-scale impact of this combined figure and the still-limited confirmed detail behind each individual incident. Neither project has released a full post-mortem with verified fund flows as of this writing. Readers tracking broader fraud risks in the crypto space may note that regulators in other jurisdictions have been weighing restrictions on crypto access points amid rising concerns.
What to Watch Next From KelpDAO, Drift, and the Broader Market
Official Statements and Investigation Updates
Readers should monitor both KelpDAO and Drift for official statements, including any fund recovery disclosures or third-party audit results. Any confirmed breakdown of how the total splits between the two projects would significantly clarify the scope of each incident.
Traders managing risk exposure across DeFi protocols may want to track how lending platforms like Aave adjust deposit conditions in response. Market participants watching for broader volatility triggers, including macroeconomic policy shifts that raise risk for leveraged positions, should factor exploit-driven sentiment into their assessments.
Projects facing exploit scrutiny often see users rotate into alternative ecosystems. Those following token migrations and upcoming protocol deadlines should keep this rotation dynamic in view.
This story is developing. The claims reported here rely on early analyses, and readers should separate confirmed updates from preliminary reporting as more details emerge.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
