Key Highlights
- Drift Protocol was exploited for over $270 million in the largest DeFi hack of 2026, with investigators linking the attack to a North Korean state-affiliated group that spent six months infiltrating the protocol.
- Bitcoin closed March with a modest 1.84% gain, printing its first green monthly candle since September 2025 and ending its longest losing streak since 2018, while daily transaction fees dropped to a 13-year low.
- The CLARITY Act stablecoin bill moved closer to finalization with Coinbase’s CLO saying a deal is 48 hours away, as the CFTC tightened its grip on crypto and prediction markets, and India’s crypto policy got delayed again.
Welcome to this week’s cryptocurrency market update. If last week was about institutional positioning and geopolitical tension rattling markets, this week was defined by the largest DeFi exploit of the year, Bitcoin finally turning a corner on the monthly chart, stablecoin regulation inching toward a resolution, and a landmark moment for tokenized securities out of France.
In this edition, we cover the Drift Protocol hack and its North Korean links, Bitcoin’s green monthly close, the CLARITY Act stablecoin negotiations, France’s on-chain IPO milestone, regulatory developments from the CFTC and India, and the growing list of security incidents that continue to shadow the industry. Let’s get into it.
Top headlines for this week
Below are the major headlines, giving an overview of what happened in the crypto market this week.
Drift Protocol Exploited for $270M in Largest DeFi Hack of 2026
The biggest story of the week, and arguably the biggest security event of the year so far, was the exploitation of Drift Protocol for over $270 million. The Solana-based decentralized perpetual futures exchange saw its vault balances collapse from $309 million to under $41 million in roughly an hour on April 1. The timing made it worse. Because it happened on April Fools’ Day, early warnings were dismissed as a prank before the scale of the drain became undeniable.
The attacker used Solana’s “durable nonces” feature to pre-sign administrative transfers weeks before executing them, bypassing Drift’s multisig security without exploiting any code vulnerability. The stolen assets spanned over 15 token types, including $155.6 million in JLP tokens, $60.4 million in USDC, and $11.3 million in cbBTC.
The attacker quickly swapped stolen tokens into ETH and moved funds across chains, a pattern that Ledger’s CTO compared directly to the Bybit hack.
Drift’s postmortem, published over the weekend, revealed that a North Korean state-affiliated group spent six months infiltrating the protocol under the guise of a quantitative trading firm. The attackers met Drift contributors at conferences, deposited over $1 million of their own capital, and integrated an Ecosystem Vault before compromising devices via a malicious TestFlight app and a VSCode vulnerability.
The DRIFT token crashed over 20% immediately and is now down roughly 98% from its all-time high. No clear recovery of funds has emerged.
This is now the largest native Solana dApp exploit on record and the third major hack in recent months that did not involve a smart contract bug. Social engineering and operational security failures are becoming the primary attack vector in DeFi, and that should concern everyone.
Bitcoin Ends Five-Month Losing Streak, But Context Matters
Bitcoin closed March at approximately $68,215 with a modest 1.84% gain, printing its first green monthly candle since September 2025. That snapped the longest run of consecutive red monthly closes since the 2018 bear market. Between October 2025 and February 2026, BTC fell from its all-time high of $126,080 to lows near $60,000, shedding roughly $1.57 trillion from the total crypto market cap in the process.
The green candle looks encouraging on paper, but the month was far from calm. Bitcoin rallied to $76,000 by mid-March before dropping back below $65,000 by month’s end. The Fear and Greed Index is still deep in fear territory, BTC remains well below its 20-period and 50-period EMAs, and the broader market cap sits around $2.4 trillion.
On the network side, Bitcoin daily transaction fees dropped to their lowest level since 2011, signaling weakening on-chain demand even as price found some footing. The NVT ratio sitting at 43 further underscored the disconnect between Bitcoin’s valuation and its actual network usage.
The corporate accumulation story continued regardless. Metaplanet added 5,075 BTC in Q1 2026, pushing its holdings toward a 100,000 BTC target. American Bitcoin Corp now holds 7,000 BTC, though its stock continues to struggle. And on the mining front, U.S. senators proposed a bill to support domestic Bitcoin mining, framing it as a matter of national energy independence.
CLARITY Act Inches Closer as Coinbase Says Deal is 48 Hours Away
The stablecoin regulation saga took a meaningful step forward this week. Coinbase’s Chief Legal Officer said the CLARITY Act stablecoin deal is just 48 hours away, signaling that the yield restriction compromise between banks and crypto companies may finally have found a middle ground.
The bill, which has been the single most contentious piece of crypto legislation this year, aims to define which types of stablecoin rewards are allowed while keeping the banking system intact. Senators Thom Tillis and Angela Alsobrooks have been leading the negotiations, and industry representatives from both crypto and banking met with legislative staffers this week to review the revised compromise language.
Separately, the CFTC tightened its grip on crypto, prediction markets, and market abuse, expanding its enforcement posture in a week where Kalshi also faced a setback as a Nevada court extended its ban on the prediction market platform. On the international front, Malta clashed with the EU over ESMA’s crypto power grab, adding friction to Europe’s evolving regulatory landscape.
France Set to Launch World’s First Fully On-Chain IPO
In what might be the most structurally significant development of the week for tokenized securities, France is set to launch the world’s first fully on-chain IPO on April 9. Aerospace subcontractor ST Group, based near Toulouse, will list its shares on Lise (Lightning Stock Exchange), a blockchain-powered platform that combines trading and settlement on a single infrastructure.
The IPO is backed by BNP Paribas, Credit Agricole’s CACEIS, and state investment bank Bpifrance. Lise received regulatory approval under the EU’s DLT Pilot Regime and claims a clear lead over U.S. rival Securitize and Swiss group SIX, neither of which has completed a comparable fully on-chain IPO. Three to four more IPOs are already in the pipeline before the end of 2026.
While Nasdaq and NYSE have been talking about tokenized trading platforms for months, France is actually executing first. For an industry that has spent years debating when tokenization would go live, this is the kind of milestone that tends to accelerate everything that follows.
Ethereum Moves, Ripple Partnerships, and India’s Policy Stall
The Ethereum Foundation staked its largest batch of $46 million in ETH, marking a notable shift from selling to staking for an organization that has historically drawn criticism for dumping tokens. Bitmine added 71,179 ETH in a single week, accelerating its accumulation strategy well beyond prior averages. And Lido proposed a 10,000 stETH buyback to support LDO prices, a move that reflects the pressures facing even the largest liquid staking protocols.
On the partnerships side, Ripple partnered with Convera to power stablecoin cross-border payments, expanding its institutional reach in the payments space. Ethereum’s Justin Drake came under the spotlight over a Google quantum computing paper on Bitcoin, while CZ downplayed quantum risk but flagged the upgrade challenges that would come with quantum-proofing crypto.
In India, crypto policy was delayed again as the RBI blocked a discussion paper, continuing the country’s pattern of regulatory paralysis. Meanwhile, CoinDCX launched a Rs 100 crore ‘Digital Suraksha Network’ after its founders’ arrest, trying to rebuild trust in a market that desperately needs regulatory clarity.
News You Might Have Missed
- US Opens Door for Crypto in 401(k) Plans: A new proposal could allow digital assets in retirement accounts, potentially unlocking a massive new pool of capital.
- Midnight Network Launches: The Cardano-backed Midnight Network debuted with a hybrid ledger and ZK-powered privacy, targeting enterprise use cases.
- Axios Supply Chain Attack: A malicious dependency was deployed via npm in an Axios supply chain attack, adding to the growing list of developer tool compromises.
- Hyperliquid Android App: Hyperliquid rolled out its official Android app MVP for early testing.
- ZachXBT vs Circle: On-chain detective ZachXBT questioned Circle’s response to illicit USDC activity, reigniting the debate over when stablecoin issuers should freeze wallets.
- SIREN Crashes 77% Again: The token crashed 77% for the third time in a row, fitting the textbook definition of a pump-and-dump.
- StakeStone (STO) Pumps 900%: The STO token surged over 900% before a brutal 60% pullback, another reminder that parabolic runs rarely end well.
Buzz of the Week
The buzz this week belonged to the jarring contrast between crypto’s institutional momentum and its persistent security crisis. On one side, France is about to execute the world’s first on-chain IPO, the CLARITY Act is within striking distance of finalization, and Bitcoin ETFs posted $1.32 billion in net inflows for March.
On the other, a North Korean intelligence operation spent six months embedding itself inside a major DeFi protocol before draining $270 million, and the DRIFT token lost 98% of its value.
The Drift hack is the story that will define this week, and possibly this quarter. It was not a smart contract bug. It was not a flash loan attack. It was a social engineering operation that exploited trust, conferences, and working relationships.
The attackers met people in person, deposited real money, and integrated into the ecosystem before striking. If DeFi cannot defend against this kind of infiltration, the next wave of institutional capital is going to demand very different security guarantees.
Meanwhile, the stablecoin market hit $317 billion this week with $1.36 billion in weekly inflows, and total stablecoin transaction volume has now exceeded $28 trillion in 2026, surpassing major payment networks like Visa and Mastercard. That kind of number is impossible to ignore, and it is exactly why the CLARITY Act fight over stablecoin yield matters so much.
What to expect for next week?
Next week will hinge on two things: whether the CLARITY Act text actually drops, and how Bitcoin navigates the $68,000 to $70,000 range.
If Coinbase’s 48-hour timeline holds and the stablecoin compromise language is released, it could be the most significant crypto legislation event of 2026 so far. The yield restriction fight has been the single biggest obstacle to a comprehensive market structure bill, and resolution would remove a major source of uncertainty for institutional allocators. But timelines in Washington have slipped before, and the banking lobby still has leverage.
On the market side, Bitcoin needs to clear $70,000 convincingly to shift sentiment. The green monthly candle was a relief, but with the Fear and Greed Index still in extreme fear and on-chain activity at multi-year lows, there is not much underneath this rally besides ETF inflows and corporate buying. April historically averages a 12.1% return for Bitcoin, but 2026 has not been a year where historical averages mean much.
France’s on-chain IPO on April 9 will be a major test for tokenized securities infrastructure. If ST Group’s listing on Lise goes smoothly, it sets a template for dozens of European SMEs that have been priced out of traditional exchanges. If it stumbles, critics will have ammunition for years.
The Drift hack fallout will also continue to unfold. The protocol needs to publish its full postmortem, the industry needs to reckon with the social engineering vector, and regulators will inevitably point to a $270 million loss as evidence that DeFi needs tighter oversight. The tension between building open systems and defending against state-sponsored attackers has never been sharper.
