Overview
- Trade.xyz detected unauthorized activity on its GitBook documentation and rolled the pages back to a prior version, completing the restore by 9:15 a.m. ET on Monday.
- The company has told users not to click any links in the documentation while it conducts an internal investigation and has not published technical details about how access was gained or how long the changes were live.
- Trade.xyz says its interface is non-custodial and that trading, on-chain settlement on Hyperliquid, and user funds were not affected, and there have been no reports of wallet drains or asset losses.
- Security researchers recently flagged a wave of DeFi frontend compromises that used malicious pages and toolkits to drain wallets, but Trade.xyz has not linked its GitBook incident to those campaigns.
- Users should avoid documentation links, check connected wallets and approvals, and expect updates from Trade.xyz on attacker access and mitigation steps; the episode may raise fresh scrutiny of frontend controls as the firm pursues a proposed ICE market partnership.