Overview
- PeckShield identified the victim wallet as 0x0cdC…E955 and said the attacker had full control consistent with a private key compromise.
- The haul included about 17.75 million DAI and roughly 3.11 million SyrupUSDC, which were bridged to Ethereum and shuffled across multiple addresses.
- Analysts stress there is no evidence of a smart-contract flaw at Hyperliquid, and the exchange continues operating normally.
- The incident lands during a period of rapid growth for Hyperliquid, with more than $3.5 billion in weekly volume and a recent airdrop to about 94,000 addresses.
- Experts recommend hardware wallets, offline encrypted backups, and regular approval reviews; one report also noted the theft followed the trader closing a large position.