According to online reports, CertiK's latest estimates show that the cryptocurrency field lost approximately US$364 million due to hacking, fraud and exploit in April, the vast majority of which (US$337 million) was related to phishing attacks. Most of the illegal gains originated from a single incident in which the attacker used sophisticated social engineering to steal 3520 bitcoins from a wallet. In addition, decentralized exchange KiloEX lost US$7.5 million due to a "price oracle vulnerability", Loopscale was stolen by US$5.8 million, and the Ethereum expansion agreement ZKsync airdrop contract was withdrawn by nearly US$5.3 million. However, these three platforms have all recovered funds from white-hat hackers. The loss in April increased significantly from March (US$28.8 million), but was still small compared with the US$1.5 billion loss caused by the North Korean hacker group Lazarus Group's attack on Bybit in February. In view of the frequent occurrence of phishing attacks, CertiK reminds crypto companies and investors to verify the authenticity of websites and smart contracts before transferring money. It also recommends using cold wallets for storage and not sharing position information on social media.