Hyperliquid’s HyperDrive DeFi Loses $773K in Account Compromise, Funds Bridged to BNB Chain and Ethereum

HyperDrive DeFi protocol has suffered a $773,000 exploit affecting two accounts in its Treasury Invoice market, with stolen funds cut up between BNB Chain and Ethereum networks via bridge transfers.

The assault compromised positions utilizing Theo Community’s thBILL as collateral, prompting instant suspension of all cash markets and withdrawals throughout the platform.

Second Main Exploit Strikes Hyperliquid Ecosystem in 72 Hours

CertiK’s evaluation revealed the attacker exploited an arbitrary name vulnerability within the router contract, stealing 672,934 USDT0 and 110,244 thBILL tokens.

The stolen funds have been bridged through the deBridge protocol, with roughly $494,000 moved to Ethereum and $279,000 to BNB Chain earlier than being consolidated at a single deal with.

The incident marks the second main safety breach concentrating on Hyperliquid’s ecosystem inside three days, following the $3.6 million HyperVault rug pull, during which builders disappeared after deleting all their social media accounts.

The fast succession of assaults raises considerations in regards to the safety posture of tasks constructing on the decentralized alternate platform.

HyperDrive officers confirmed the exploit was restricted to the Major USDT0 Market and Treasury USDT Market, with no impression on the protocol’s native HYPED token.

The staff has engaged safety and forensics consultants whereas exploring compensation plans for affected customers.

Router Vulnerability Allows Systematic Fund Extraction

The attacker repeatedly exploited a vital flaw in HyperDrive’s router contract that allowed arbitrary operate calls, thereby bypassing regular safety restrictions and draining consumer funds.

CertiK’s forensic evaluation recognized the particular vulnerability that enabled the systematic extraction of funds from the thBILL Treasury Market.

The exploit focused accounts holding positions backed by Theo Community’s Treasury Invoice tokens, which function collateral in HyperDrive’s lending markets.

Notably, safety consultants have speculated that the attacker’s methodical strategy suggests a excessive stage of information of the protocol’s inner mechanics and sensible contract structure.

They famous the stolen funds have been shortly moved off-chain via deBridge, a cross-chain protocol that facilitates asset transfers between totally different blockchain networks.

HyperDrive’s staff reached out to the exploiter on-chain, providing a ten% white-hat bounty in alternate for returning the remaining funds.

The protocol suspended all market operations and withdrawal features to stop further malicious exercise whereas investigating the complete scope of the compromise.

The incident prompted broader safety critiques throughout Hyperliquid’s ecosystem, as a number of tasks constructing on the platform face elevated scrutiny following the latest wave of exploits and rug pulls.

Hyperliquid Ecosystem Beneath Siege From A number of Threats

The HyperDrive exploit compounds stress on Hyperliquid following the devastating HyperVault rug pull simply 48 hours earlier, the place builders vanished with $3.6 million after depositing stolen ETH into Twister Money.

The HyperVault rip-off ignored early neighborhood warnings about fabricated audit claims from revered corporations.

Earlier safety incidents embrace the March JELLY token manipulation that price Hyperliquid’s vault $13.5 million via synthetic value pumping and leveraged place exploitation.

The “ETH 50x Large Man” dealer equally netted $1.8 million revenue whereas inflicting $4 million in vault losses.

These assaults happen as ASTER DEX challenges Hyperliquid’s market dominance, processing over $13 billion in every day perpetual futures quantity in comparison with Hyperliquid’s lowered exercise.

Moreover, ASTER has just lately built-in Belief Pockets, offering 100 million customers with direct entry to perpetual contracts.

Arthur Hayes beforehand exited his whole HYPE place for $823,000 revenue, citing large token unlocks value $11.9 billion beginning November 29.

He just lately polled his followers about re-entering HYPE after the token dropped 23% in per week to $35.50.

Regardless of safety challenges, Hyperliquid launched its native USDH stablecoin on September 24, producing $2.2 million in early buying and selling quantity.

Native Markets secured the stablecoin issuance mandate after defeating established gamers, together with Paxos and Ethena Labs, via aggressive governance voting.

The platform has additionally activated HYPE/USDH spot buying and selling following Native Markets’ three-year dedication to stake 200,000 HYPE tokens.

Following the Hayes whale transfer to dump Hayes, citing issues with Hype tokenomics provide, the DBA asset supervisor proposed chopping HYPE’s complete provide by 45% to enhance tokenomics. Nevertheless, critics warned that this might restrict future development flexibility.

The submit Hyperliquid’s HyperDrive DeFi Loses $773K in Account Compromise, Funds Bridged to BNB Chain and Ethereum appeared first on Cryptonews.