HypervaultFi, one of the recently promoted high-yield vaults on Hyperliquid, seems to have rug-pulled its depositors. On-chain data showed withdrawals of $3.6M, while the HypervaultFi site and social media have been wiped out. The coins moved from the HyperEVM ecosystem into Ethereum, with the funds immediately mixed on Tornado Cash. Moreover, on-chain data showed the exploiter managed to gain 752 ETH after bridging the funds.  #PeckShieldAlert #Rugpull? We have detected an abnormal withdrawal of ~$3.6M worth of cryptos from @hypervaultfi. The funds were bridged from #Hyperliquid to #Ethereum, swapped into $ETH, and then 752 $ETH was deposited into #TornadoCash. pic.twitter.com/mHQLPYXvzS — PeckShieldAlert (@PeckShieldAlert) September 26, 2025 The X account @hypervaultfi has been nuked, and the former promotional links lead to a non-existent site. The funds have been taken from active Hyperliquid traders, who nevertheless chose a vault promising higher yields.  The special vaults promised up to 76% annualized yield on stablecoins and up to 95% for HYPE liquidity. Just before crashing, the protocol had around 1,100 depositors, with $5.86M in total value locked, based on DeFiLlama data.  If the vaults were not artificially inflated, this would be among the biggest rug pulls and losses through Hyperliquid vaults. Until now, most of the rapid pool drains were the result of risky trading and aggressive whale positions.  The rug pull arrived as Hyperliquid was facing the highest levels of competition from other perp DEXs and ecosystems.  HypervaultFi did not affect the wider Hyperliquid ecosystem HyperEVM and Hyperliquid remain safe, though still containing inherent vault risk. Previous cases of drained vaults or aggressive trading have not been compensated, as depositing into vaults is a personal risk of crypto finance.  The vault was drained of HYPE tokens, which were then moved through DeBridge and sold, as the main draining wallet reveals. The Hyperliquid community warned that the rug pull event was not a sign that the leading perpetual DEX was inherently flawed.  For now, the rug pull on the high-risk vault has not further undermined HYPE, as the token still traded around $42.53 after the attack.  Hypervault promised point farming, airdrop Hypervault was behaving as a usual DeFi app, communicating with its supporters until the last minute. The project shared long-term plans for lowering the yield and becoming more sustainable.  HypervaultFi even promised to launch a token before the end of the year. One of the project’s founders, 0xnick, mentioned the product was still in the early stages and had a long development ahead. Users were also encouraged to use other HyperEVM protocols like Hyperlend and HyPurrFi to farm points.  Just before the rug pull, the protocol was preparing for its first official audit, creating a reputation of safety. However, analysts noted that the reported auditors did not even know about the project, raising the first red flags.  Hyperliquid’s HyperEVM has prepared to expand its ecosystem with new points and airdrop projects. The current list of projects is spread across several tiers, and point farming may contain varying levels of risk. Hypervault was not among the tracked projects, and mostly relied on its high-yield strategy. The smartest crypto minds already read our newsletter. Want in? Join them.HypervaultFi, one of the recently promoted high-yield vaults on Hyperliquid, seems to have rug-pulled its depositors. On-chain data showed withdrawals of $3.6M, while the HypervaultFi site and social media have been wiped out. The coins moved from the HyperEVM ecosystem into Ethereum, with the funds immediately mixed on Tornado Cash. Moreover, on-chain data showed the exploiter managed to gain 752 ETH after bridging the funds.  #PeckShieldAlert #Rugpull? We have detected an abnormal withdrawal of ~$3.6M worth of cryptos from @hypervaultfi. The funds were bridged from #Hyperliquid to #Ethereum, swapped into $ETH, and then 752 $ETH was deposited into #TornadoCash. pic.twitter.com/mHQLPYXvzS — PeckShieldAlert (@PeckShieldAlert) September 26, 2025 The X account @hypervaultfi has been nuked, and the former promotional links lead to a non-existent site. The funds have been taken from active Hyperliquid traders, who nevertheless chose a vault promising higher yields.  The special vaults promised up to 76% annualized yield on stablecoins and up to 95% for HYPE liquidity. Just before crashing, the protocol had around 1,100 depositors, with $5.86M in total value locked, based on DeFiLlama data.  If the vaults were not artificially inflated, this would be among the biggest rug pulls and losses through Hyperliquid vaults. Until now, most of the rapid pool drains were the result of risky trading and aggressive whale positions.  The rug pull arrived as Hyperliquid was facing the highest levels of competition from other perp DEXs and ecosystems.  HypervaultFi did not affect the wider Hyperliquid ecosystem HyperEVM and Hyperliquid remain safe, though still containing inherent vault risk. Previous cases of drained vaults or aggressive trading have not been compensated, as depositing into vaults is a personal risk of crypto finance.  The vault was drained of HYPE tokens, which were then moved through DeBridge and sold, as the main draining wallet reveals. The Hyperliquid community warned that the rug pull event was not a sign that the leading perpetual DEX was inherently flawed.  For now, the rug pull on the high-risk vault has not further undermined HYPE, as the token still traded around $42.53 after the attack.  Hypervault promised point farming, airdrop Hypervault was behaving as a usual DeFi app, communicating with its supporters until the last minute. The project shared long-term plans for lowering the yield and becoming more sustainable.  HypervaultFi even promised to launch a token before the end of the year. One of the project’s founders, 0xnick, mentioned the product was still in the early stages and had a long development ahead. Users were also encouraged to use other HyperEVM protocols like Hyperlend and HyPurrFi to farm points.  Just before the rug pull, the protocol was preparing for its first official audit, creating a reputation of safety. However, analysts noted that the reported auditors did not even know about the project, raising the first red flags.  Hyperliquid’s HyperEVM has prepared to expand its ecosystem with new points and airdrop projects. The current list of projects is spread across several tiers, and point farming may contain varying levels of risk. Hypervault was not among the tracked projects, and mostly relied on its high-yield strategy. The smartest crypto minds already read our newsletter. Want in? Join them.

HypervaultFi accused of rug pull after draining $3.6M

2025/09/26 18:30
3 min read

HypervaultFi, one of the recently promoted high-yield vaults on Hyperliquid, seems to have rug-pulled its depositors.

On-chain data showed withdrawals of $3.6M, while the HypervaultFi site and social media have been wiped out. The coins moved from the HyperEVM ecosystem into Ethereum, with the funds immediately mixed on Tornado Cash. Moreover, on-chain data showed the exploiter managed to gain 752 ETH after bridging the funds. 

The X account @hypervaultfi has been nuked, and the former promotional links lead to a non-existent site. The funds have been taken from active Hyperliquid traders, who nevertheless chose a vault promising higher yields. 

The special vaults promised up to 76% annualized yield on stablecoins and up to 95% for HYPE liquidity. Just before crashing, the protocol had around 1,100 depositors, with $5.86M in total value locked, based on DeFiLlama data

If the vaults were not artificially inflated, this would be among the biggest rug pulls and losses through Hyperliquid vaults. Until now, most of the rapid pool drains were the result of risky trading and aggressive whale positions. 

The rug pull arrived as Hyperliquid was facing the highest levels of competition from other perp DEXs and ecosystems. 

HypervaultFi did not affect the wider Hyperliquid ecosystem

HyperEVM and Hyperliquid remain safe, though still containing inherent vault risk. Previous cases of drained vaults or aggressive trading have not been compensated, as depositing into vaults is a personal risk of crypto finance. 

The vault was drained of HYPE tokens, which were then moved through DeBridge and sold, as the main draining wallet reveals. The Hyperliquid community warned that the rug pull event was not a sign that the leading perpetual DEX was inherently flawed. 

For now, the rug pull on the high-risk vault has not further undermined HYPE, as the token still traded around $42.53 after the attack. 

Hypervault promised point farming, airdrop

Hypervault was behaving as a usual DeFi app, communicating with its supporters until the last minute. The project shared long-term plans for lowering the yield and becoming more sustainable. 

HypervaultFi even promised to launch a token before the end of the year. One of the project’s founders, 0xnick, mentioned the product was still in the early stages and had a long development ahead. Users were also encouraged to use other HyperEVM protocols like Hyperlend and HyPurrFi to farm points. 

Just before the rug pull, the protocol was preparing for its first official audit, creating a reputation of safety. However, analysts noted that the reported auditors did not even know about the project, raising the first red flags. 

Hyperliquid’s HyperEVM has prepared to expand its ecosystem with new points and airdrop projects. The current list of projects is spread across several tiers, and point farming may contain varying levels of risk. Hypervault was not among the tracked projects, and mostly relied on its high-yield strategy.

The smartest crypto minds already read our newsletter. Want in? Join them.

Market Opportunity
Griffin AI Logo
Griffin AI Price(GAIN)
$0.00211
$0.00211$0.00211
-13.77%
USD
Griffin AI (GAIN) Live Price Chart
Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact service@support.mexc.com for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.

You May Also Like

The Future of Metalworking: Advancements and Innovations

The Future of Metalworking: Advancements and Innovations

The demand for precision and efficiency in manufacturing processes continues to rise, leading to groundbreaking advancements in metalworking. This sector constantly
Share
Techbullion2026/02/07 19:24
Crypto whale loses $6M to sneaky phishing scheme targeting staked Ethereum

Crypto whale loses $6M to sneaky phishing scheme targeting staked Ethereum

The post Crypto whale loses $6M to sneaky phishing scheme targeting staked Ethereum appeared on BitcoinEthereumNews.com. A crypto whale lost more than $6 million in staked Ethereum (stETH) and Aave-wrapped Bitcoin (aEthWBTC) after approving malicious signatures in a phishing scheme on Sept. 18, according to blockchain security firm Scam Sniffer. According to the firm, the attackers disguised their move as a routine wallet confirmation through “Permit” signatures, which tricked the victim into authorizing fund transfers without triggering obvious red flags. Yu Xian, founder of blockchain security company SlowMist, noted that the victim did not recognize the danger because the transaction required no gas fees. He wrote: “From the victim’s perspective, he just clicked a few times to confirm the wallet’s pop-up signature requests, didn’t spend a single penny of gas, and $6.28 million was gone.” How Permit exploits work Permit approvals were originally designed to simplify token transfers. Instead of submitting an on-chain approval and paying fees, a user can sign an off-chain message authorizing a spender. That efficiency, however, has created a new attack surface for malicious players. Once a user signs such a permit, attackers can combine two functions—Permit and TransferFrom—to drain assets directly. Because the authorization takes place off-chain, wallet dashboards show no unusual activity until the funds move. As a result, the assets are gone when the approval executes on-chain, and tokens are redirected to the attacker’s wallet. This loophole has made permit exploits increasingly attractive for malicious actors, who can siphon millions without needing complex hacks or high-cost gas wars. Phishing losses The latest theft highlights a wider trend of escalating phishing campaigns. Scam Sniffer reported that in August alone, attackers stole $12.17 million from more than 15,200 victims. That figure represented a 72% jump in losses compared with July. According to the firm, the most significant share of August’s damages came from three large accounts that accounted for nearly half…
Share
BitcoinEthereumNews2025/09/19 02:31
WHALE ALERT: $351 MILLION Bitcoin Dump Incoming

WHALE ALERT: $351 MILLION Bitcoin Dump Incoming

One crypto whale transferred 5,000 Bitcoin, which is worth about 351 million, to Binance. Ash Crypto reported this transfer. It happened only several days after
Share
Coinfomania2026/02/07 19:36