North Korea-linked hackers stole ~$577M across the Drift Protocol and KelpDAO hacks in April, accounting for 76% of total crypto hack losses so far in 2026
Key takeaways — North Korean hackers, from two distinct groups, stole approximately USD 577 million in 2026 YTD …
Context & Ripple Effects
The reported losses follow a documented escalation: related coverage describes North Korea-linked theft at more than $600M in 2023, a majority of 2024 crypto theft losses, and a record $2.02B in 2025.
This early-2026 concentration in two named protocol incidents shows that the prior pattern has persisted into new targets rather than remaining a historical peak.
First-order effects
- Drift Protocol and KelpDAO must contend with the immediate security, loss-management, and user-confidence fallout from incidents tied to the reported $577M.
- North Korea-linked groups account for a dominant share of reported 2026 crypto hack losses so far, concentrating the year’s security risk in a small set of state-linked actors.
Second-order effects
- Other crypto protocols face stronger pressure to reassess wallet, access-control, and operational-security exposure, since a few successful breaches can dominate sector-wide losses.
- Users and institutional counterparties may place greater weight on a protocol’s security posture and incident response when deciding where to hold or deploy assets.
Third-order effects
- If repeated concentration of losses among North Korea-linked groups continues, crypto security will increasingly be treated as a systemic market-integrity issue rather than an isolated protocol-level failure.
- The pattern reinforces the crypto legitimacy gap: sustained large-scale theft can slow trust-building even as individual platforms improve their defenses.
The trend: Crypto is facing a persistent security-concentration trend in which state-linked attackers can impose outsized losses on decentralized financial infrastructure.