Drift Protocol released a detailed Saturday update on its April 1 incident that drained about $280 million from its Solana perpetuals exchange, describing a roughly six-month social engineering campaign that began around fall 2025. The attackers allegedly posed as a quant firm, met contributors at multiple conferences, and deposited over $1 million into an Ecosystem Vault before obtaining pre-signed approvals and taking control within minutes. Drift and SEAL 911 said they have “medium-high” confidence the operation matches the North Korea-aligned actors behind the $50 million Radiant Capital hack in October 2024, while Mandiant has not yet issued formal attribution.

Anthropic changed how Claude Pro and Max subscriptions apply to third-party agent frameworks on April 4, 2026, starting with Openclaw, pushing heavier users toward pay-as-you-go "extra usage" or API keys. The shift has raised expected costs for always-on crypto automation, with extreme one-day agent runs estimated at $1,000 to $5,000. Enforcement is expected to broaden to other third-party harnesses starting April 2026.

X plans to automatically lock any account the first time it mentions cryptocurrency, forcing additional verification before it can post again. X Head of Product Nikita Bier said the change removes "99%" of incentives for phishing-driven account takeovers, though it could add friction for legitimate first-time crypto posters.

X will begin automatically locking any account that mentions cryptocurrency for the first time, requiring extra verification before it can post again. X Head of Product Nikita Bier said the change would remove "99%" of phishing incentives, but critics argue it could also force legitimate first-time crypto posters to verify their identity.

On April 5, 2026, Ripple said Ripple Treasury joined the SWIFT Certified Partner Program, linking its treasury tools to SWIFT’s Alliance Lite2 for bank connectivity. The company says teams can manage fiat alongside XRP and RLUSD from one interface and choose settlement via SWIFT or on-chain, where transfers may complete in three to five seconds.

On April 3, 2026, a Nevada state judge in Carson City issued a preliminary injunction against Kalshi, finding its event contracts effectively mirror unlicensed gambling. The order extends a temporary restraining order first entered on March 20, 2026, and requires Kalshi to add geofencing by May 4, 2026, to block Nevada-based users.

Dmail Network said it will permanently end all services on May 15, 2026, bringing its decentralized email offering to a close after five years. The team cited unsustainable infrastructure expenses for decentralized storage, bandwidth, and computing, alongside an economic model that did not become self-sustaining. Users are advised to export their mail and other data and cancel accounts before the deadline, after which content, NFT domains, and points will be deleted.

Cambodia's Senate unanimously approved the Law on Anti-Technology Fraud on April 3, 2026, passing it 58–0. The framework allows 15–30-year prison terms for leaders of online scam operations, upgraded to life imprisonment if a victim dies, and includes fines of up to about $500,000 (2 billion Cambodian Riel). Authorities say they aim to dismantle all illegal scam compounds in the country by an April 2026 deadline.