Crypto had another heavy week. A billion fake DOT tokens briefly existed on Ethereum before being dumped for peanuts, the Trump-linked WLFI project traded “see you in court” threats with one of its biggest early backers, and Drift Protocol finally drew a line under its $280 million hack with a Tether-backed relaunch that broke its relationship with Circle. Bitcoin pushed back above $77,000, Strategy and Tether kept stacking, and Litecoin quietly went full smart-contract. Let’s get into it.
Polkadot’s bridge nightmare: 1 billion fake DOT, $237K in profit
The biggest security story of the week was not a billion-dollar hack. It was a hack that should have been a billion dollars and ended up being a rounding error. On April 13, an attacker exploited a vulnerability in Hyperbridge’s Ethereum gateway contract, forged a cross-chain message, and seized admin control of the bridged DOT token contract. With that access, they minted 1 billion bridged DOT in a single transaction, roughly 2,800 times the legitimate circulating bridged supply.
Then came the punchline. The bridged DOT pool on Ethereum was so thin that dumping a billion tokens through Uniswap V4 only pulled out about 108.2 ETH, worth roughly $237,000. CertiK flagged the attack vector, and Polkadot confirmed that native DOT, parachains, and the relay chain were untouched. Only the bridged DOT on Ethereum via Hyperbridge was affected.
The market did not take the distinction calmly. DOT slid roughly 4.8% in the hours after the exploit, and Upbit and Bithumb both suspended DOT deposits and withdrawals. Hyperbridge paused the bridge while the team investigated, and later clarified that the bug sat in a Merkle mountain range verifier that was treating invalid proofs as valid. In plain terms, one validation failure gave an anonymous attacker mint rights on a multibillion-dollar asset. The industry got a cheap reminder that bridges remain the softest target in crypto.
Justin Sun vs WLFI goes thermonuclear
The Justin Sun and World Liberty Financial feud that started as an X spat last week turned into something much uglier. On April 13, Sun went on the offensive again, accusing WLFI of hiding behind a single guardian EOA with “one-signature” power to freeze any holder’s tokens. Asset seizure requires a 3-of-5 multisig, but freezing, Sun argued, sits with one anonymous wallet. He called the governance setup “theater” and demanded the people running the official WLFI account identify themselves.
The market took his side with its feet. WLFI dropped over 20% in a week, hitting a fresh all-time low of $0.07714 before stabilizing around the $0.08 area. His frozen 545 million tokens are now worth under $50 million on paper.
Then Chaos Labs entered the chat and made things worse. The risk firm published a breakdown showing WLFI’s team is running a $1 billion looping collateral strategy on Dolomite, with the project accounting for more than 80% of the protocol’s total borrowing activity. One multisig is running a USD1 and USDC recycling loop where borrowed stablecoins on one position serve as collateral for another. The whole structure liquidates if WLFI drops roughly 75%, and Merkl’s rewards propping up the loop were set to expire within days.
By April 16, Sun had shifted targets again, publicly questioning the fairness of WLFI’s governance model and pointing out that holders with frozen tokens, including himself, could not even vote on proposals affecting their own allocations. WLFI’s response to all of this remained the same three words. “See you in court.”
Drift closes the chapter: $147.5M Tether lifeline, USDT over USDC
Two weeks after the $280 million exploit by a DPRK-linked group, Drift Protocol finally had a recovery plan to announce. On April 16, the team locked in a $147.5 million rescue package backed by Tether and, in the same breath, announced it was switching its primary stablecoin from USDC to USDT.
The switch was not a small branding decision. Drift’s team had been openly frustrated that Circle did not freeze the attacker’s USDC fast enough in the aftermath of the drain. Within a day, Circle launched a dedicated USDC recovery bridge for affected Drift users, but the gesture came too late to keep the integration. A day later, a group of Drift users filed a lawsuit against Circle over what they described as an inefficient freeze response.
The incident has now turned into a broader debate over stablecoin freeze powers. How fast should issuers act? Who decides what a legitimate freeze request versus censorship? And how do DeFi protocols build around issuers whose response times might stretch into hours while an exploit drains millions per minute? Drift picked USDT. Others will have to pick too.
Bitcoin back above $77K, treasuries keep stacking
While security held the headlines, the accumulation trade kept grinding. Strategy added another large BTC tranche this week, and Michael Saylor detailed how the firm booked roughly $1.3 billion in Bitcoin gains in April alone, calling BTC Gain the most important metric for treasury-strategy companies. Tether added $70 million in Bitcoin to its reserves, bringing its stack to 97,141 BTC, just shy of the 100,000 mark. UK-listed Smarter Web Company quietly added 11 more coins to reach 2,706 BTC.
On the ETH side, BitMine Immersion snapped up another 71,500 ETH and Bit Digital staked 29,900, pointing to continued treasury competition on the Ethereum side. Whales, more broadly, had their best accumulation month on record. On-chain data showed addresses in the 1,000 to 10,000 BTC range absorbed a record 270,000 BTC over the past month, a pattern that has historically marked cyclical bottoms.
Price followed the flow. Bitcoin pushed back above $77,000 on Friday, and Hyperliquid rode the move to a $5.23 million single-day revenue print, its biggest day since February.
CLARITY Act delayed again, Warsh discloses crypto
Regulation had another week of almost. The CLARITY Act, which was supposed to hit the Senate floor this week, got punted as the chamber prioritized Kevin Warsh’s Fed chair hearing. By Wednesday, Senator Thom Tillis was telling the press that Coinbase, Ripple, and industry groups are ready, but there is no date, with the realistic window now late April or May. On Friday, Tillis confirmed the stablecoin yield text would not even drop this week.
The Warsh side of the story produced its own twist. Financial disclosures released ahead of his confirmation hearing showed the Fed chair nominee holds crypto exposure, a first for the role and a signal that the old wall between monetary policy and digital assets is getting thinner.
Solana’s quiet expansion week
While Bitcoin and Ethereum soaked up the oxygen, Solana had arguably the busiest week of any ecosystem. XRP went live on Solana through a wrapped wXRP token, giving Ripple’s asset its first real DeFi venue outside the XRPL. On the same day, Singapore Gulf Bank launched stablecoin rails on Solana, becoming one of the first licensed banks in Asia to run settlements on the network. Solana keeps picking up the kind of infrastructure wins that do not move price in a day but reshape where the ecosystem sits in a year.
News you might have missed
- Bitcoin’s quantum problem hit the main stage. BIP 361, a proposed migration path for Bitcoin to post-quantum addresses, triggered heated debate after developers flagged that the migration plan could involve freezing coins in legacy address types that fail to move in time. Justin Sun, fresh from his WLFI war, piled on and took shots at Bitcoin and Ethereum over their pace on post-quantum security.
- Litecoin went full smart contract. The network launched its LiteForge testnet with LitVM support, opening up smart contracts on a chain that has been purely payments-focused for 14 years.
- Bitget’s IPO Prime hit the market fast. The launchpad raised $72 million and was oversubscribed within hours, a sign that institutional appetite for crypto IPOs is back.
- Two more exploits landed. DeFi aggregator CoW Swap warned users to stay off its frontend after a suspected attack, and Russian exchange Grinex halted operations after a $13 million hack, blaming Western actors in a statement that read more like politics than forensics.
- Apple got called out again. Musician G. Love lost $424,000 in Bitcoin to a fake Ledger app that slipped through App Store review, prompting ZachXBT to publicly slam Apple’s vetting process.
- Errol Musk weighed in. Elon’s father told a conference he has no doubt crypto will be the future of finance, adding another Musk to the long list of crypto believers.
Buzz of the week
The buzz of the week was RaveDAO. The RAVE token kept pumping with 98% of supply under concentrated control even as its claimed endorsements from CZ and Donald Trump Jr. quietly fell apart under public scrutiny.
CZ’s team distanced itself from the project, and the Trump Jr. angle turned out to be based on a single photo op being stretched into a fabricated partnership.
What remains is a chart that keeps climbing on an air-thin float while the “credibility” marketing evaporates. Classic 2026 playbook, and a reminder that in this cycle, a pump and a partnership can coexist without either being real. Watch the unlock schedule, not the tweets.
Looking ahead
Next week, the pressure points are clear. The CLARITY Act still does not have a floor date, and whether Warsh’s hearing goes clean will shape when crypto legislation actually gets air. WLFI’s governance vote and Dolomite loop will be watched closely once Merkl rewards expire. Drift will need to prove the USDT relaunch sticks, and Circle will have to answer a lawsuit that could set a precedent for every stablecoin-DeFi integration in the market.
And Bitcoin holding $77,000 with whales at record accumulation is the kind of setup that either breaks up hard or breaks the thesis entirely. Either way, it will not be boring.
