The THORChain exploit adds to an already brutal stretch for crypto security. April 2026 saw total hack losses reach $629.7 million, the worst month for the industry since February 2025 when $1.47 billion was stolen. The bulk of April's damage came from two incidents: a $293 million exploit of KelpDAO and a $280 million hack of Drift Protocol, together accounting for 82% of the month's total losses. DeFi continues to be the sector bearing the most damage, and the scale of these incidents shows no sign of slowing as protocols grow larger and more interconnected.

What makes the current wave of attacks particularly concerning is the shift in how they are being carried out. Rather than exploiting straightforward smart contract bugs, attackers are increasingly targeting bridges, privileged access points, and operational failures within protocol infrastructure, exactly the kind of vulnerability that allowed the THORChain attacker to gradually extract vault key material over time without triggering immediate alarms. This evolution in attack strategy means that traditional security audits focused on contract code are no longer sufficient on their own. As the targets get bigger and the methods get more sophisticated, the pressure on DeFi protocols to rethink their security architecture from the ground up is only going to intensify.