Cyberattack — April 2026

⚡️ Storm Trade is back tomorrow

Hey everyone!

Over the past month alone, DeFi has gone through a wave of attacks – AI-powered hackers targeted around a dozen major protocols, with industry losses exceeding $600M in April. That’s the reality of the market. The question isn’t whether an attack will happen, but whether you’re ready for it.

Our protocol was also the target of a coordinated attack. Our monitoring system detected the threat early, and we contained the incident before it could cause any real damage. Funds from both traders and liquidity providers remained safe the entire time.

9 days ago, we paused the protocol to eliminate any potential risks. Since then, the team has reinforced the architecture and migrated Storm to a new infrastructure with multi-layered protection.

🫡 The protocol reopens tomorrow, May 1 at 8:00 (UTC).

1️⃣ What happens to open positions

Storm is a decentralized protocol. We cannot manually interfere with user trades, so all positions that were open at the time of the pause (April 21, 12:05 UTC) remained open. After launch, you’ll be able to manage them as usual – close, modify, or hold.

We understand: the market kept moving during these 9 days while you had no control over your positions. Leaving you alone to deal with that wouldn’t be fair – so we’re taking that impact on ourselves:

• Was in profit → turned into loss: we compensate the difference based on PnL at the moment of the pause • Was in profit → got liquidated: we return margin + unrealized PnL • Was in loss → drawdown increased: we compensate the delta

All payouts in USDT will be sent to your wallets within 24 hours after reopening – for positions where the PnL delta from pause to restart exceeds $5.

Compensation is automatic, regardless of what you do with your position after launch.

2️⃣ SL/TP orders

During downtime, price feeds were not delivered to the protocol, so orders were not executed. After launch:

• TP: if the current price is better than your TP – the order will execute with higher-than-expected profit. • SL: if the price has crossed the trigger – the order will execute at the current price, but all losses since the pause will be compensated

3️⃣ Limit / Stop Limit / Stop Market orders

To prevent incorrect executions, all such orders have been set to expire. Please cancel them manually to release collateral.

4️⃣ No funding fees will be charged during the downtime period.

This challenge made us stronger. Our global plans remain unchanged – we continue active development and integration of Storm V3.

Thank you for your patience, trust, and support. Together, we’re setting a new standard for security and community-first approach in DeFi.

See you on May 1 at 8:00 (UTC).

Your Storm Trade team ⚡️ ➖➖➖➖➖➖➖➖ Web | TG App | Storm Academy | 𝕏 | Chat | VIP Chat | SDK

👾#Crypto

Over the past 10 years, more than $17 billion has been stolen in 518 hacking attacks on cryptocurrency platforms.

🚨 Kelp DAO Got Hacked for $293M, Aave and DeFi Lending Market ROCKED 🚨

Early April 19, a major exploit hit Kelp DAO. Hackers successfully tricked the platform's bridge, leading to the unauthorized release of 116,500 rsETH. This staggering amount, equivalent to approximately $293 million, was drained in under one minute.

The shockwaves of this attack immediately spread beyond Kelp DAO. Aave, the largest lending platform in DeFi, was directly impacted, and numerous other unrelated protocols also suffered.

The overall Total Value Locked (TVL) in the DeFi lending sector plunged from $53.4 billion to below $42.5 billion. In just two days, nearly $11 billion evaporated, marking a significant contraction of over 20% for the entire lending industry.

This massive security breach once again raises a critical question for the crypto space:

Can DeFi truly replace traditional banking, or are these security vulnerabilities an insurmountable obstacle?

👾#Crypto

Vercel has been hacked — Web3 frontends at risk

Hosting provider Vercel confirmed a breach — attackers gained access to part of its internal systems via a third-party AI service.

On a hacker forum where stolen data is sold, a supposed database has already been listed for $2 million — including keys, tokens, and source code. Its authenticity has not yet been confirmed.

What matters:

- a “limited portion” of customers was affected; - the attack began with the compromise of an employee account; - projects are already mass-rotating API keys and conducting audits.

Vercel is one of the key frontend providers for Web3. In theory, interfaces of dApps, wallets, and DEXs could have been at risk.

🏆 TON AI Agent Hackathon: Winners

Two weeks. 160+ submissions. An incredible amount of talent and execution from the community. This was the first major AI Agent competition on TON, and the quality exceeded every expectation. Builders showed up and delivered.

Track 1: Agent Infrastructure ($10,000)

Three winners, $3,333 each. These projects create reusable primitives and infrastructure that the entire TON agent ecosystem can build on.

🏅Imago ($3,333): LLM inference marketplace on TON with Cocoon TEE integration 🏅Catallaxy ($3,333): Decentralized agent marketplace with HTTP 402 payment protocol 🏅ENACT Protocol ($3,333): Trustless escrow for AI agent commerce

Track 2: User-Facing Agents ($10,000 + $5,000 additional prizes)

After listening to community feedback, we expanded this track to recognize both sides of what the hackathon was meant to reward: technical ambition and originality, alongside teams that delivered functional, ready-to-use projects.

🥇MyTonWallet AI Crypto Agent ($5,000): The first native AI agent inside a TON wallet. World-class product, seamless integration. 🥈TON Steward ($3,000): AI agent for fundraising in Telegram. 🥉EIVA ($2,000): A creative take on personal AI agents with TON-native identity. 🏅TON Agent Platform ($3,000): No-code platform for creation of AI agents. 🏅Tonpixio ($2,000): TON blockchain analytics agent

☝️All participants, make sure your reward wallet is connected in your Identity Hub settings under the Wallets section. Rewards and badges will be distributed tomorrow.

Not being selected does not mean your project is not valuable. We saw incredible work from dozens of teams, and many strong submissions pushed the boundaries of agent infrastructure, use cases, and developer tooling. It was genuinely hard to pick winners.

Keep building 💎

Another hack? Apparently Moonwell now

https://x.com/getfailsafe/status/1985628261913919702

https://x.com/certikalert/status/1985620452992253973?s=46&t=lxG9-umCpkbfzvaeAuC5yg

GM

🇰🇵Hackers have been preparing an attack on Drift for almost six months

On April 1, $285 million was withdrawn from the Drift Protocol, which is the largest hack in DeFi in 2026. The operation itself took only 12 minutes.

A group linked to North Korea is most likely behind the attack, the same group that hacked Radiant Capital in 2024. For six months, they posed as an algotrading company: through intermediaries, they got to know the project team at international conferences and conducted technical discussions with them.