Overview
- PeckShield flagged an abnormal $3.6 million withdrawal from Hypervault that was bridged from Hyperliquid to Ethereum, converted to ETH, and sent in batches totaling about 752 ETH to Tornado Cash.
- Hypervault’s website, X account, and Discord went offline shortly after the transfers, and DeFiLlama added a rug-pull notice to the project’s page.
- Security firms including CertiK published wallet addresses linked to the movements, while no recovery efforts or official explanations have been announced.
- Community warnings predated the event, with named auditors Pashov and Code4rena denying active audits despite Hypervault’s claims of pending reviews.
- In a separate incident, Hyperdrive confirmed an attack that drained roughly $700,000 from two user positions, paused money markets, and opened an investigation into abused operator permissions.