HyperVault Hack

On September 26, 2025, DeFi protocol Hypervault disappeared with approximately $3.6 million in user assets in a suspected exit scam. The project withdrew all funds from Hyperliquid, bridged them to Ethereum, converted them to ETH, and deposited 752 ETH into Tornado Cash before deleting all online presence.

Hypervault promoted itself as a yield farming platform offering "hands-free" auto-compounding, yield farming bots, and adapters for redirecting assets into lending protocols and concentrated liquidity pools on HyperEVM. User deposits were distributed across external services to implement complex income-generating strategies. The team executed a classic rug pull by withdrawing approximately $3.6 million in user funds from the Hyperliquid platform and bridging them to the Ethereum network.

Once on Ethereum, the funds were swapped for ETH, with 752 ETH (valued at around $3 million) deposited into Tornado Cash for laundering. Following the fund withdrawal, the project's X (Twitter) account was deleted and the official website became inaccessible, confirming suspicions of an orchestrated exit scam rather than a security exploit.