April turned ugly for DeFi security. According to CoinDesk via the cited Coinotag page, April delivered “20+ exploits” and roughly “600M$ loss,” a record in both incident count and damage.
The same source points to two high-profile protocols. It says KelpDAO created bad debt in Aave after “292M$” of trouble, and that Drift was hacked for “280M$,” after which Drift was delisted.
The page also mentions Aave market movement alongside the incident. It lists AAVE at “92.76$” and notes a downtrend, with “support 90.65$.” That’s market context, not proof of causality, but it does frame how quickly news can spill into price action.
Still, the headline risk here is operational. Even when the affected contracts differ, these events share a theme. The CoinDesk summary highlights exploit activity, large losses, and knock-on actions like delisting, which can signal elevated uncertainty for assets exposed to those ecosystems.
For users and builders, the practical takeaway is simple and stubborn. When a protocol ends up tied to bad debt or gets exploited at scale, recovery is not just a security fix. It is also accounting, liquidity, and product risk, with real consequences for the tokens and markets around it.