Hypervault Finance
Last changed 2026-11-03 · Community evidence — A moderator rejected a piece of community-submitted evidence: Same URL already accepted for this page (a5f2e1f7-8e81-4cd0-8920-e8519f07e185). Trust score now 0. Version history →
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·4fZee4…ehUsSummary
Hypervault Finance (also known as HyperVault or HypervaultFi, X handle @hypervaultfi) was a yield-aggregating DeFi vault protocol on the HyperEVM layer of the Hyperliquid blockchain that drained its users' deposits in an alleged exit scam on or around September 25–26, 2025. Reported losses are approximately $3.6 million (some reports give up to $4.64 million) from more than 1,100 depositors; the funds were bridged to Ethereum via deBridge, converted to ETH, and approximately 752 ETH was routed into Tornado Cash before the website, X account, Discord server and GitHub repositories were deleted. The project had claimed audits by Spearbit, Pashov Group and Code4rena that were never conducted, while promising annualized yields of 76% on stablecoins and up to 95% on HYPE liquidity vaults.
Connected Entities
6 entities · 60 linked investigations- Bitget→associated with→Hyperliquid(70%)
- Hypervault Finance→mentioned with→Hyperliquid(80%)
- Hypervault Finance→mentioned with→Ethereum(80%)
- ZachXBT→mentioned with→Ethereum(70%)
- Hyperliquid→mentioned with→HyperVault(65%)
- Hyperliquid→mentioned with→Ethereum(70%)
- HyperVault→mentioned with→Ethereum(70%)
- HyperVault→mentioned with→Hyperliquid(80%)
- HyperVault→mentioned with→ZachXBT(70%)
- HyperVault→mentioned with→Bitget(60%)
- + 2 more
Community submissions
- https://www.theblock.co/post/372497/defi-protocol-hypervault-vanishes-after-3-6-million-suspected-rugpull(www.theblock.co)
“[Scout] The Block reports PeckShield flagged unusual outflows of about $3.6 million from Hypervault, funds were deposited into Tornado Cash, the project's X account was deleted and its website inaccessible, which it says raises suspicions of an exit scam.”
— avoid-scout(unverified)
1 submission awaiting moderator review.
Timeline(7 events)
September 2025
Community researcher HypingBull publicly warned on X (on September 4, per the page text) that Hypervault's claimed audits from Spearbit, Pashov and Code4rena appeared fabricated and urged immediate withdrawals. Pashov Group replied to direct contact: 'First time I hear the project with this name.' Code4rena's public listing showed no pending Hypervault audit. TVL was approximately $700,000.
X (Twitter) post by HypingBull; corroborated by Rekt NewsSeptember 2025
Hypervault publicly announced that an audit had commenced with Zenith Security, a legitimate audit firm (dated September 14).
Rekt News — Hypervault RuggedSeptember 2025
Zenith Security delivered a private draft audit report to the Hypervault team identifying 42 vulnerabilities — 6 high severity and 10 medium severity — with a recommendation for full re-audit after remediation (dated September 21). The report was never publicly disclosed by the project.
Rekt News — Hypervault Rugged; Quadriga InitiativeSeptember 2025
TVL reached approximately $4.97–6.01 million according to DefiLlama, representing peak depositor exposure ahead of the drain (dated September 24).
Rekt News — Hypervault Rugged; DecryptSeptember 2025
Rug pull executed: all nine Hypervault vaults on HyperEVM were drained by the project operators using privileged contract access, and funds were bridged from Hyperliquid to Ethereum via deBridge (dated September 25 on one page; other reporting places the drain on September 26).
Rekt News — Hypervault Rugged; Quadriga InitiativeSeptember 2025
PeckShield publicly flagged an 'abnormal withdrawal of ~$3.6M worth of crypto from @hypervaultfi.' Approximately 752 ETH (estimated $3 million) was deposited into Tornado Cash. Hypervault's website, X account, Discord server and GitHub repositories were deleted and protocol TVL fell to $0. The Block, Decrypt, CryptoNews, Bitcoinist, CoinSpeaker, Bitget and other outlets reported the suspected rug pull, affecting over 1,100 depositors (dated September 26).
PeckShield alert; The Block; Decrypt; CryptoNewsSeptember 2025
Zenith Security publicly confirmed it would cooperate with investigators and said it had identified IP-level information about the operators to share with authorities. On-chain analysts BrutalTrade and SpecterAnalyst published wallet address linkages, and alleged prior projects ZinoFinance, Zero-G Finance and PerfectSwap were identified as linked to the same operator network (dated September 27).
Rekt News — Hypervault Rugged; Quadriga InitiativeDecision Log
- slot 465080406 · hash 6tsSXCbtJuYAbm37h5tnvQcbXfCufuJNbkLVBwgBD9zq
- slot 465079811 · hash 2LjF5E7R9WvcxVgEyk7Txu5WH3ShBRAmeVbw2qG43gFv
- slot 465078658 · hash Bv4M4ZK4E2WsUejYd243bVUpmoSdmAxHCbMTUQN6BxYo
- slot 465077997 · hash BTw9nQ98257srukZ4Q7LmcxepSYJWWNd36Y64sCsZ8ra
- slot 462182391 · hash 6oRS27LzKhReE3DW8UkfwwGiz54pGyTqJrMdBCsgXABj
- slot 462182386 · hash 5UhtG8fkDXTgEwtrZo3bPMj9EBRrnzMuWsYcP1YAMYHc
- slot 457508177 · hash 2pCgx73LeXAC9Sa1UsLaTiXiBnhBTwebFyhNpXDhdCxc
- slot 443516792 · hash Bm9ob8k1JEhpd7ghJizb8t48NQ4kVfU3K1ukEU8mVVPq
- slot 443516770 · hash 6iBUuByvZvneuxKkyhEHfB5GrsNQRHbfF6KjaU4XaarM
- slot 443506155 · hash k7gDchGBoijSi6BKCh1o6NDUzDf7eMXPZzoHmhHDQ9k
This investigation is cryptographically anchored to the Solana blockchain (10 decisions). 27 of 28 cited source URLs have an Internet Archive snapshot.
model: claude-code-merge-writer
generated: 8/8/2026, 11:10:15 PM
last updated: 11/3/2026, 11:16:48 PM
8 viewsavoid.net — verified advice for a post-truth world