Hyperliquid’s HyperDrive DeFi Loses $773K in Account Compromise, Funds Bridged to BNB Chain and Ethereum

HyperDrive DeFi protocol has suffered a $773,000 exploit affecting two accounts in its Treasury Invoice market, with stolen funds cut up between BNB Chain and Ethereum networks via bridge transfers.

The assault compromised positions utilizing Theo Community’s thBILL as collateral, prompting quick suspension of all cash markets and withdrawals throughout the platform.

Second Main Exploit Strikes Hyperliquid Ecosystem in 72 Hours

CertiK’s evaluation revealed the attacker exploited an arbitrary name vulnerability within the router contract, stealing 672,934 USDT0 and 110,244 thBILL tokens.

The stolen funds had been bridged by way of the deBridge protocol, with roughly $494,000 moved to Ethereum and $279,000 to BNB Chain earlier than being consolidated at a single deal with.

The incident marks the second main safety breach focusing on Hyperliquid’s ecosystem inside three days, following the $3.6 million HyperVault rug pull, wherein builders disappeared after deleting all their social media accounts.

The fast succession of assaults raises considerations in regards to the safety posture of tasks constructing on the decentralized alternate platform.

HyperDrive officers confirmed the exploit was restricted to the Major USDT0 Market and Treasury USDT Market, with no influence on the protocol’s native HYPED token.

The group has engaged safety and forensics consultants whereas exploring compensation plans for affected customers.

Router Vulnerability Permits Systematic Fund Extraction

The attacker repeatedly exploited a essential flaw in HyperDrive’s router contract that allowed arbitrary perform calls, thereby bypassing regular safety restrictions and draining person funds.

CertiK’s forensic evaluation recognized the precise vulnerability that enabled the systematic extraction of funds from the thBILL Treasury Market.

The exploit focused accounts holding positions backed by Theo Community’s Treasury Invoice tokens, which function collateral in HyperDrive’s lending markets.

Notably, safety consultants have speculated that the attacker’s methodical strategy suggests a excessive stage of information of the protocol’s inside mechanics and sensible contract structure.

They famous the stolen funds had been shortly moved off-chain via deBridge, a cross-chain protocol that facilitates asset transfers between totally different blockchain networks.

HyperDrive’s group reached out to the exploiter on-chain, providing a ten% white-hat bounty in alternate for returning the remaining funds.

The protocol suspended all market operations and withdrawal capabilities to forestall further malicious exercise whereas investigating the total scope of the compromise.

The incident prompted broader safety evaluations throughout Hyperliquid’s ecosystem, as a number of tasks constructing on the platform face elevated scrutiny following the current wave of exploits and rug pulls.

Hyperliquid Ecosystem Beneath Siege From A number of Threats

The HyperDrive exploit compounds strain on Hyperliquid following the devastating HyperVault rug pull simply 48 hours earlier, the place builders vanished with $3.6 million after depositing stolen ETH into Twister Money.

The HyperVault rip-off ignored early neighborhood warnings about fabricated audit claims from revered companies.

Earlier safety incidents embody the March JELLY token manipulation that value Hyperliquid’s vault $13.5 million via synthetic value pumping and leveraged place exploitation.

The “ETH 50x Large Man” dealer equally netted $1.8 million revenue whereas inflicting $4 million in vault losses.

These assaults happen as ASTER DEX challenges Hyperliquid’s market dominance, processing over $13 billion in day by day perpetual futures quantity in comparison with Hyperliquid’s lowered exercise.

Moreover, ASTER has just lately built-in Belief Pockets, offering 100 million customers with direct entry to perpetual contracts.

Arthur Hayes beforehand exited his whole HYPE place for $823,000 revenue, citing huge token unlocks price $11.9 billion beginning November 29.

He just lately polled his followers about re-entering HYPE after the token dropped 23% in per week to $35.50.

Regardless of safety challenges, Hyperliquid launched its native USDH stablecoin on September 24, producing $2.2 million in early buying and selling quantity.

Native Markets secured the stablecoin issuance mandate after defeating established gamers, together with Paxos and Ethena Labs, via aggressive governance voting.

The platform has additionally activated HYPE/USDH spot buying and selling following Native Markets’ three-year dedication to stake 200,000 HYPE tokens.

Following the Hayes whale transfer to dump Hayes, citing issues with Hype tokenomics provide, the DBA asset supervisor proposed slicing HYPE’s whole provide by 45% to enhance tokenomics. Nonetheless, critics warned that this might restrict future progress flexibility.

The submit Hyperliquid’s HyperDrive DeFi Loses $773K in Account Compromise, Funds Bridged to BNB Chain and Ethereum appeared first on Cryptonews.