Crypto Hackers Steal $92M from DeFi in April 2025

Crypto hackers stole $92 million from decentralized finance platforms in April 2025, according to a new report by blockchain security firm Immunefi. 

The attacks affected 15 different platforms and marked a 124% increase compared to March when $41 million was stolen.

The biggest hit came from UPCX, an open-source DeFi project that lost over $70 million in one incident. KiloEx, another DeFi platform, was the second-largest victim with $7.5 million stolen. The KiloEx attacker later returned the stolen funds a few days after the hack.

$92M Stolen in April DeFi Hacks | Source: x.com/immunefi

Immunefi’s report , published on April 30, said that all the April attacks targeted DeFi protocols. No centralized crypto exchanges were affected during the month. 

The security firm works to protect $190 billion worth of user assets and has paid over $116 million in bug bounties to ethical hackers who report bugs before they are exploited.

Top 10 losses this month |  Source: x.com/immunefi

Immunefi CEO Mitchell Amador warned that threats are growing. “The sheer scale of the attack shows how state-backed actors are arguably the most pressing threat to our industry,” Amador said in a statement. He said security teams need to protect every part of their systems and assume attackers will find a way in.

He added that even trusted-looking apps or emails could be traps. “Protocols must be built for resilience,” Amador said, calling for stronger defenses and a “zero-trust” mindset across all platforms.

The report also noted that April’s thefts pushed 2025’s total losses past $1.7 billion. That number has already passed the estimated $1.49 billion lost in all of 2024. The firm highlighted that despite efforts to boost cybersecurity, attacks are not slowing down. The report followed news of the record-breaking $1.5 billion hack on Bybit in February.