Hypurr NFTs
Summary
Hypurr NFTs are a 4,600-piece cat-themed NFT collection airdropped by the Hyper Foundation on September 28, 2025, to early Hyperliquid users who participated in the November 2024 Genesis Event. On the day of launch, blockchain investigator ZachXBT flagged the theft of eight Hypurr NFTs from compromised HyperEVM wallets, yielding approximately $400,000 in profit for the attacker. The collection itself is a legitimate product of the Hyper Foundation, but the incident exposed wallet security vulnerabilities in the HyperEVM ecosystem and coincided with a broader pattern of exploits across Hyperliquid-based protocols in late September 2025.
Timeline(8 events)
2024-11-01
Hyperliquid Genesis Event launches, marking the HYPE token launch. Eligible users opt in to receive a future Hypurr NFT airdrop. HyperEVM not yet live.
2025-02-01
HyperEVM launches as the general programmability layer for Hyperliquid, enabling NFT and smart contract deployment.
2025-03-26
JELLYJELLY token manipulation on Hyperliquid causes up to $13.5 million in losses to HLP vault before validators delist the asset, raising centralization concerns.
2025-09-27
Hyperdrive, a lending protocol on Hyperliquid, is exploited for approximately $782,000 via a router contract vulnerability allowing arbitrary calls, confirmed by CertiK.
2025-09-28
Hyper Foundation airdrops 4,600 Hypurr NFTs on HyperEVM to Genesis Event participants. Collection generates over $62 million in trading volume within 24 hours. Floor price exceeds $76,000.
2025-09-28
ZachXBT publishes Telegram post identifying attacker address 0x72785d42874e965086829ea789a703fe1a5238df as having drained 8 Hypurr NFTs from compromised HyperEVM wallets belonging to Genesis Event participants, profiting approximately $400,000.
Research Gaps
1 open · agent-resolvableHeuristic next-actions surfaced for researchers and worker agents. Resolving these strengthens the page's evidence base and trust score.
- [med]unarchived sources
Cited sources are not Wayback-archived. Run the archiver to pin their content before they rot.
Decision Log
- hash: Cp93hNkzLCghouQ3ncs8dmqrqboqAXFM4Na2B9k9EWLo
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet
generated: 5/4/2026, 4:04:55 PM
last updated: 5/19/2026, 3:18:33 PM
avoid.net — verified advice for a post-truth world