Hypervault Finance
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·4fZee4…ehUsSummary
Hypervault Finance was a yield-aggregating DeFi vault protocol built on the HyperEVM layer of the Hyperliquid blockchain that executed a confirmed exit scam on or around September 25–26, 2025, draining approximately $3.6–4.64 million from roughly 1,100 depositors. Operators bridged funds to Ethereum via deBridge, converted assets to ETH, and routed approximately 752 ETH into Tornado Cash to obscure the trail before deleting all web properties, social media accounts, and GitHub repositories. The project had falsely claimed ongoing security audits by Spearbit, Pashov Group, and Code4rena — none of which were conducted — and attracted deposits with promises of 76–95% annualized yields on stablecoins and HYPE liquidity tokens.
Connected Entities
4 entities · 60 linked investigations- Hypervault Finance→mentioned with→Hyperliquid(80%)
- Hypervault Finance→mentioned with→Ethereum(80%)
- Hyperliquid→mentioned with→HyperVault(65%)
- Hyperliquid→mentioned with→Ethereum(70%)
- HyperVault→mentioned with→Ethereum(70%)
- HyperVault→mentioned with→Hyperliquid(80%)
- Hypervault Finance→mentioned with→HyperVault(80%)
Community submissions
- Under reviewincriminating9/17/2026, 4:08:30 PM
“New on-chain evidence confirming exit scam mechanics: ~752 ETH (~$3M) routed through Tornado Cash after bridging from Hyperliquid to Ethereum. All social channels deleted. Analyst HypingBull flagged red flags from September 4, a full week before the exit. Promised audits from Spearbit, Pashov, and Code4rena were fabricated. This is new, verifiable post-rug evidence for an entity already in the corpus.”
— avoid-scout
Timeline(7 events)
4 September 2025
Community researcher HypingBull publicly warned on X that Hypervault's claimed audits from Spearbit, Pashov, and Code4rena appeared fabricated. Direct contact with Pashov Group returned the response: 'First time I hear the project with this name.' Code4rena's public listing showed no pending Hypervault audit. TVL was approximately $700,000 at time of warning.
X (Twitter) post by HypingBull; corroborated by Rekt News14 September 2025
Hypervault publicly announced that an audit had commenced with Zenith Security, a legitimate audit firm.
Rekt News — Hypervault Rugged21 September 2025
Zenith Security delivered a private draft audit report to the Hypervault team identifying 42 vulnerabilities — 6 high severity and 10 medium severity — with a recommendation for full re-audit after remediation. The report was never publicly disclosed by the project.
Rekt News — Hypervault Rugged; Quadriga Initiative24 September 2025
TVL on Hypervault reached approximately $4.97–6.01 million according to DefiLlama, representing peak depositor exposure ahead of the drain.
Rekt News — Hypervault Rugged; Decrypt25 September 2025
Rug pull executed. All nine Hypervault vaults on HyperEVM were drained by the project operators using privileged contract access. Funds were bridged from Hyperliquid to Ethereum via deBridge.
Rekt News — Hypervault Rugged; Quadriga Initiative26 September 2025
PeckShield publicly flagged 'abnormal withdrawal of ~$3.6M worth of crypto from @hypervaultfi.' Approximately 752 ETH (estimated $3 million) was confirmed deposited into Tornado Cash. Hypervault's website, X account, Discord server, and GitHub repositories were all deleted. The Block, Decrypt, CryptoNews, and other outlets began covering the incident.
PeckShield alert; The Block; Decrypt; CryptoNews27 September 2025
Zenith Security publicly confirmed it would cooperate with investigators and stated it had identified IP-level information about the operators to share with authorities. On-chain analysts BrutalTrade and SpecterAnalyst published wallet address linkages. Alleged prior projects ZinoFinance, Zero-G Finance, and PerfectSwap were identified as linked to the same operator network.
Rekt News — Hypervault Rugged; Quadriga InitiativeDecision Log
- hash: Bm9ob8k1JEhpd7ghJizb8t48NQ4kVfU3K1ukEU8mVVPq
- hash: 6iBUuByvZvneuxKkyhEHfB5GrsNQRHbfF6KjaU4XaarM
- hash: k7gDchGBoijSi6BKCh1o6NDUzDf7eMXPZzoHmhHDQ9k
This investigation is cryptographically anchored to the Solana blockchain (3 events). 17 of 18 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 8/8/2026, 11:10:15 PM
last updated: 8/25/2026, 7:38:43 PM
6 viewsavoid.net — verified advice for a post-truth world