$3M Burn Attack Drains $5M From Hyperliquid Vault—DeFi’s ’Security Tax’ Strikes Again

Another day, another decentralized finance heist—only this time, the attacker paid a $3 million 'entry fee' to walk away with $5 million. Talk about high-stakes arbitrage.

How it went down:

The assailant executed a coordinated burn attack on Hyperliquid's vault, sacrificing $3M in tokens to manipulate the protocol's economics. The payoff? A cool $5M exit—netting a 66% ROI while leaving scorched earth in their wake.

Why it matters:

This isn't your grandma's bank robbery. The attacker burned more cash than most startups raise in seed rounds—just to exploit a vulnerability. When 'security costs' outpace actual theft, maybe it's time to admit DeFi's wild west phase needs some sheriff badges.

The closer:

Another week, another eight-figure crypto caper. At this rate, blockchain auditors might start charging hazard pay.

Attacker Split $3M Across 19 Wallets to Fuel Hyperliquid Assault

Blockchain analytics firm Lookonchain reported on Thursday that the sequence began when the attacker withdrew 3 million USDC from the OKX exchange, distributing it across 19 new wallets.

The trader then deployed the funds on Hyperliquid to open more than $26 million in Leveraged long positions tied to HYPE, the protocol’s POPCAT-denominated perpetual contract.

The attacker proceeded to construct a $20 million buy wall NEAR the $0.21 mark, creating an illusion of strong demand that briefly drove the market higher.

Someone just manipulated $POPCAT to attack #Hyperliquid, burning through $3M of their own funds — and causing $4.9M in losses for the Hyperliquidity Provider (HLP).

The attacker withdrew 3M $USDC from #OKX yesterday, split it across 19 wallets, and deposited it into #Hyperliquid… pic.twitter.com/lnwsRSspFv

When the wall suddenly disappeared, price support evaporated, liquidity dried up, and dozens of overleveraged positions were automatically liquidated.

Hyperliquid’s vault was left absorbing the fallout, recording a $4.9 million deficit, one of the largest single-event losses in its history.

Ironically, the manipulator’s own $3 million stake was entirely erased. Analysts say this points to a motive of structural disruption rather than financial gain, marking the event as a deliberate stress test on Hyperliquid’s liquidity architecture.

Unlike conventional market exploits designed for profit, this maneuver appeared to be aimed at exposing systemic weaknesses in automated liquidity provider vaults.

Community reactions ranged from disbelief to dark humor. One observer called it the “costliest research ever,” while another likened it to “performance art with real money.”

Others described the episode as “peak degen warfare,” underscoring the risks of operating perpetual markets without strong liquidity buffers. “Perp markets are open season for anyone willing to light money on fire,” one user wrote on X.

In response to the turmoil, community member Conor noted that Hyperliquid temporarily paused withdrawals, citing the platform’s “vote emergency lock” function, a safeguard mechanism to prevent further manipulation.

Withdrawals resumed roughly an hour later, though the team did not officially connect the pause to the POPCAT-related event.

It appears that Hyperliquid bridge has stopped processing withdrawals. No activity in 21 minutes pic.twitter.com/NFSeVHhE1t

Hyperliquid Strategies to Raise $1B to Become Largest HYPE Token Holder

As reported, Hyperliquid Strategies has filed with the US Securities and Exchange Commission (SEC) to raise up to $1 billion, with plans to use the proceeds to expand its crypto holdings and acquire additional HYPE tokens.

The MOVE marks a major step in the firm’s push to strengthen its presence in the decentralized derivatives market.

Chardan Capital Markets is advising on the offering, which includes up to 160 million shares of common stock.

The company will emerge from the merger between Sonnet BioTherapeutics and Rorschach I LLC, a SPAC deal that will FORM the new Hyperliquid Strategies entity.

Upon completion, David Schamis will serve as CEO and Bob Diamond, former Barclays chief, will take the role of chairman.

News of the filing drove HYPE token prices up 8% to $37.73, even as the wider crypto market declined slightly.

Once the merger closes, Hyperliquid Strategies is expected to hold 12.6 million HYPE tokens worth about $470 million, alongside $305 million in cash set aside for further acquisitions, making it the largest corporate holder of HYPE.