Binance Analysis mentioned April’s DeFi exploits triggered about $13 billion in complete worth locked outflows, chopping liquidity throughout on-chain protocols.
Abstract
- April exploits compressed DeFi TVL, pushing leverage increased with out clear proof of stronger borrowing demand.
- Drift and KelpDAO assaults made April the worst current month for DeFi safety losses tracked.
- Latest Humanity, Aztec, and Raydium incidents present exploit dangers remained energetic after April throughout DeFi.
The analysis arm mentioned the on-chain leverage ratio rose to about 38%, a degree final seen in 2021, as TVL fell sooner than borrowing.
The transfer didn’t come from a transparent return in actual borrowing demand. Binance Analysis mentioned “significant deleveraging has but to materialize,” even after a wider crypto market pullback. Meaning the ratio moved increased as a result of the bottom of locked capital grew to become smaller. When TVL falls, every greenback of debt weighs extra on the system.
Drift and KelpDAO drive April losses
Binance’s Could market report mentioned DeFi TVL fell 10.7% month over month to $82.7 billion in April. It additionally mentioned protocols suffered $635.24 million in exploits throughout the month, the best month-to-month complete for the reason that Bybit incident in February 2025. DefiLlama counted 28 hack occasions throughout April, which Binance referred to as a report month-to-month depend.
As crypto.information reported, the primary 18 days of April already noticed greater than $606 million stolen throughout 12 incidents. The 2 largest assaults have been Drift Protocol, at about $285 million, and KelpDAO, at about $292 million. Later, crypto.information reported that the 2 assaults collectively represented $577 million in losses and have been linked to North Korea’s Lazarus Group.
These two circumstances carried most of April’s reported losses. Additionally they confirmed that DeFi exploit threat now not comes solely from code bugs. Reviews tied the assaults to social engineering, compromised methods, governance weaknesses, and bridge infrastructure.
Aave and KelpDAO restoration keep in focus
The KelpDAO incident additionally unfold strain throughout related lending markets. Binance Analysis mentioned the KelpDAO exploit created about $230 million in dangerous debt on Aave and minimize Aave’s TVL by half. The occasion confirmed how one bridge failure can transfer by means of DeFi when stolen collateral enters lending markets.
KelpDAO later accomplished the operational a part of its rsETH restoration plan. As beforehand reported, the protocol despatched a remaining batch of 20,373.7 rsETH to the LayerZero sensible contract used for cross-chain transfers. The protocol mentioned minting, redemptions, and reward features have been working usually once more after earlier restart steps.
The restoration steps decreased some direct strain on KelpDAO customers. They didn’t take away the broader concern round DeFi leverage. Binance Analysis’s knowledge means that the market nonetheless carries debt in opposition to a smaller pool of locked property.
Latest exploits present dangers stay energetic
Safety incidents continued after April, although reported losses dropped in Could. CertiK put Could hack losses at $68.3 million, down practically 90% from April’s roughly $650 million, as reported. Nonetheless, DeFi initiatives saved dealing with assaults tied to bridges, previous contracts, non-public keys, and operational controls.
Latest circumstances embody Humanity Protocol, Aztec Join, and Raydium. Humanity Protocol mentioned greater than $36 million was stolen after attackers compromised administrative keys linked to its bridge methods. Aztec Join misplaced about $2.1 million from an previous immutable contract, whereas Raydium mentioned it could reimburse customers after a $1.3 million exploit hit 5 legacy Solana liquidity swimming pools.
The most recent circumstances preserve DeFi safety in focus as leverage stays elevated and liquidity stays weaker than earlier than April’s exploit wave. Binance Analysis’s studying factors to a market the place TVL has fallen, borrowing has not recovered strongly, and deleveraging stays incomplete.


