Monthly Brief: May 2026

April 2026 logged the highest dollar value of crypto exploits in a single month, roughly $625 million drained across 28 separate incidents, while Bitcoin rallied 17% over the past 30 days to close above $82,000 by May 6, its first close above $80K since January. Ethereum followed with a 13% gain to $2,412. Crypto fundraising in April hit a 12-month low at $662M across 64 rounds, down 74% from March's $2.59B. Layer 2 consolidation accelerated: Base and Arbitrum now hold 77% of all DeFi TVL on rollups, with smaller chains losing 61% of usage since June 2025.

Hacks: $625M, 28 incidents, one bad month

April 2026 became the worst month for crypto exploits on record by total dollars stolen. $625 million drained across 28 separate incidents, with two attacks accounting for most of the damage. On April 1, attackers walked away with $285 million from Drift Protocol, a Solana-based perpetuals DEX, in 2026's first nine-figure exploit. The technique wasn't a smart-contract bug: a North Korean group spent six months building trust with Drift employees, then drained the funds in twelve minutes using pre-signed withdrawal instructions. On April 19, Kelp DAO lost $292 million when an attacker drained 116,500 rsETH (about 18% of the token's circulating supply) through the protocol's LayerZero-powered bridge. The stolen wrapped ether ended up scattered across 20 different chains, where the recovery effort stalled: there is no protocol-level mechanism for coordinating clawbacks or freezes across that many independent networks. (Sources: Yahoo Finance on Drift, CoinDesk on Kelp DAO.)

Smaller incidents filled out the month: Wasabi Protocol lost $4.5M to an admin key compromise on April 30, Ekubo lost $1.4M in WBTC to an EVM swap router flaw, and a dozen others added up to single-digit millions each. TRM Labs attributed roughly 75% of all 2026 hack losses to North Korean operators: $577M out of $759M cumulative. The pattern is unmistakable: human manipulation, key compromise, and cross-chain coordination failure now dominate over classical smart-contract bugs. Audits don't catch any of those. Watching what happens on-chain in real time does, which is why explorer transparency and verified contract code matter more in this era than they did in the audit-everything one.

L2s: 77% of TVL now sits on two chains

Base and Arbitrum captured 77% of all Layer 2 DeFi TVL combined as of April 2026, while usage on smaller rollups dropped 61% since June 2025 according to The Block's 2026 L2 Outlook (source). The concentration trend has been visible for a year, but April was the month it became impossible to ignore: new rollups that launched with incentive programs in late 2025 saw activity collapse the moment the rewards stopped. The "experimental playground" phase of L2s is over. What remains are battle-tested protocols with real users and clear product-market fit on a small number of chains.

For chain teams launching now, the distribution problem looks very different than it did 12 months ago. Network effects compound on the dominant L2s, which is why our team keeps saying the same thing to teams evaluating their explorer choices: pick infrastructure that ships across all 3,000+ chains we already cover, so when you're ready to launch on Base today and Arbitrum next month, the explorer stays the same.

Markets: BTC found a floor, ETH followed

Q1 2026 closed ugly. By mid-April, Bitcoin sat at roughly $71,000, down 19% YTD. Ethereum at $2,200, down 27%. (Phemex)

Then the bounce. By May 6, Bitcoin closed at $82,305, its highest level since January 31. Ethereum followed to $2,412. Bitcoin posted a +11.87% return for April and added another 2.63% in May's first week. Altcoin rotation is underway: ZEC and DASH posted double-digit rallies as BTC dominance softened. (CoinDesk)

Sentiment turned cautiously positive after a brutal Q1, but the rally is fragile. Analysts are split between strong macro tailwinds and technical patterns that haven't fully healed. Two specific catalysts are on the table for May: the Federal Reserve's rate-cut path is expected to firm up at the June FOMC meeting, and the Digital Asset Market Clarity Act (CLARITY Act), the first comprehensive US digital-asset regulatory framework, is heading to Senate markup later this month, according to confirmation from Senator Cynthia Lummis. Markup is the first step where lawmakers can amend or block the bill, so the May vote is a real signal on institutional crypto policy direction in 2026.

Funding: builders, brace yourselves

Crypto fundraising had its weakest month in a year. April raised $662.4 million across 64 rounds, down 74% from March's $2.59B and the lowest total since May 2025. Unique investors per month dropped to 211, down 45% MoM and 72% below the April 2024 peak. (MEXC)

Notable rounds did close: Fun raised $72M in Series A funding led by Multicoin Capital and SignalFire (Fortune). Nexchain crossed $15.4M cumulative by Stage 32 with a Q3 mainnet target. Gemini is reportedly fielding acquisition interest from multiple buyers, joining the broader 2026 trend of Web2 companies acquiring crypto businesses for licenses, distribution, and stablecoin infrastructure rather than building from scratch (CoinDesk).

For builders, the takeaway is operational: the easy money is gone, and the bar for "fundable" just went up. Teams that locked in runway in 2025 are fine. Teams that didn't are talking to fewer investors, getting smaller checks, and shipping more before the next conversation.

What we shipped this month

A condensed log of Blockscout's own moves over the past 30 days:

• Supporting Developer Access (May 7). Etherscan announced free-API cuts effective July 1. Max records per request drops from 10,000 to 1,000, and the Internal Transactions by Block Range endpoint is being removed from the free plan entirely. Our Pro API free tier ships with higher RPS, more chains, and more calls, and our paid tiers outperform Etherscan's PRO. Migration guide and use cases inside.
• Meet the Blockscout MCP Server (May 5). The MCP Server gives AI agents a clean tool surface for on-chain data across 3,000+ chains. No RPC plumbing, no custom indexers. Built for agent frameworks that need live blockchain context.
• Rootstock Global Wallet M2 Badge (May 5). Milestone 2 of the Rootstock Wallet-as-a-Service pilot is complete. Full wallet integration is now live inside the Rootstock Blockscout explorer, with Onramp Money ramp baked in for $RBTC on/off. Mint the badge by May 20 for bonus Merits.
• EFGH partnership. We announced a strategic partnership with Embed Financial Group Holdings to develop secure, transparent sovereign chain projects for institutional applications. (Press release)
• Kite mainnet explorer. Blockscout now indexes every agent identity and microtransaction on Kite Chain. Live at kitescan.ai.
• Giveth Security Round. Blockscout is in the Ethereum Security Round on Giveth. 540 ETH matching pool, donations of any size matched generously with a Human Passport score of 15+.