CertiK, a blockchain security firm, reported a significant drop of 68% in crypto-related exploits and scams in April compared to the previous month, hitting a record low of $25.7 million. The breakdown revealed that the majority of the losses, totaling $21 million, were attributed to exploits targeting blockchain protocols. Additionally, users suffered losses of $4.3 million due to exit scams and rug pulls orchestrated by malicious founders, with flash loans contributing a nominal $129,000 to the overall figure.

CertiK explained to CryptoSlate that the notable decrease in losses was attributed to the absence of private key compromises, which typically result in substantial losses. Only three such incidents occurred in April, whereas the industry experienced 11 occurrences in March.

Despite the decline, April was not devoid of controversies. The focus centered on ZKasino, a decentralized gambling platform, which unilaterally transferred $33 million worth of Ethereum from its users to the liquid staking pool, Lido.

CertiK noted that only three breaches surpassed the $1 million mark in April, indicating a certain level of resilience within the ecosystem. The most significant incident occurred at FixedFloat, a decentralized exchange, which suffered a $2.8 million loss on April 1 due to an exploit on its Ethereum-based hot wallet. Interestingly, FixedFloat had previously experienced a breach in February, resulting in a $26 million loss, and confirmed that the April attack originated from the same group.

In a separate incident, the RWA tokenization platform Grandbase fell victim to a $2 million theft due to a private key leak. The perpetrator minted an excess supply of GB tokens, withdrew them, and exchanged them for ETH.

Moreover, April witnessed 13 rug pulls, with CondomSol being the most significant. It raised approximately $933,000 in a presale and dumped it on investors.