sDOLA LlamaLend 遭闪电贷价格操纵攻击，损失约 24 万美元

North Korean Actors Extract $577M in Crypto Hacks Through April 2026, Accounting for 76% of Global Losses

According to TRM Labs, North Korean actors extracted approximately $577 million in the first four months of 2026, representing 76% of all global cryptocurrency hack losses during the period. The theft stems from two April incidents: the $292 million KelpDAO exploit and the $285 million Drift

North Korea Accounted for 76% of 2026 Crypto Hack Losses in First Four Months, $577M Stolen: TRM Labs

According to TRM Labs, North Korean actors extracted approximately $577 million through the first four months of 2026, representing 76% of all global cryptocurrency hack losses during the period. The losses stem from two April incidents: the $292 million KelpDAO exploit and the $285 million Drift Pr

Kelp 兩週後全面升級跨鏈橋、ether.fi 同步硬化 WeETH

4月18日 rsETH 跨鏈橋遭駭後兩週，Kelp 於4/29完成升級：驗證者4/4、區塊確認64、拓撲採 hub-and-spoke，跨鏈訊息必須經以太主網中轉。ether.fi 亦同步硬化 weETH，並加入 DeFi United 捐贈5,000 ETH。DeFi United動員逾70,000 ETH救援資金，Aave 等市場利率顯著下降；但攻擊者仍持有約107,000 rsETH待清算，需治理與委員會式流程回收。

Wasabi 遭駭 290 萬美元：管理員私鑰外洩、合約被改成惡意版本

DeFi 衍生品 Wasabi Protocol 4/30 遭管理員私鑰外洩，攻擊者透過 Deployer EOA 獲得 ADMIN_ROLE，再利用 UUPS 升級機制替換 perp vaults 與 LongPool 為惡意版本，直接提款。CertiK 初估損失約 290 萬美元，影響以太坊主網與 Base；Wasabi 已公告暫停互動，Virtuals Protocol 也凍結 Wasabi 相關保證金。此事件凸顯上游私鑰安全對下游生態的風險。