Crypto hackers stole $92 million from decentralized finance platforms in April 2025, according to a new report by blockchain security firm Immunefi.
The attacks affected 15 different platforms and marked a 124% increase compared to March when $41 million was stolen.
The biggest hit came from UPCX, an open-source DeFi project that lost over $70 million in one incident. KiloEx, another DeFi platform, was the second-largest victim with $7.5 million stolen. The KiloEx attacker later returned the stolen funds a few days after the hack.
$92M Stolen in April DeFi Hacks | Source: x.com/immunefi
Immunefi’s report , published on April 30, said that all the April attacks targeted DeFi protocols. No centralized crypto exchanges were affected during the month.
The security firm works to protect $190 billion worth of user assets and has paid over $116 million in bug bounties to ethical hackers who report bugs before they are exploited.
Top 10 losses this month | Source: x.com/immunefi
Immunefi CEO Mitchell Amador warned that threats are growing. “The sheer scale of the attack shows how state-backed actors are arguably the most pressing threat to our industry,” Amador said in a statement. He said security teams need to protect every part of their systems and assume attackers will find a way in.
He added that even trusted-looking apps or emails could be traps. “Protocols must be built for resilience,” Amador said, calling for stronger defenses and a “zero-trust” mindset across all platforms.
The report also noted that April’s thefts pushed 2025’s total losses past $1.7 billion. That number has already passed the estimated $1.49 billion lost in all of 2024. The firm highlighted that despite efforts to boost cybersecurity, attacks are not slowing down. The report followed news of the record-breaking $1.5 billion hack on Bybit in February.
