Verify a decision

{"actor":"system:backfill","investigation_id":"8facea4a-4e4d-45b0-bc48-5a873679d13f","kind":"publish","page_slug":"hyperlend","published_at":"2026-10-13T05:13:47.169Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"HyperLend","sections":[{"content":"HyperLend describes itself via its DefiLlama listing as a lending protocol on Hyperliquid's HyperEVM, with app at app.hyperlend.finance and governance token HPL. The DefiLlama protocol data read for this page showed approximately $335.8M supplied, $179.1M borrowed and $1.1M in staking on its latest data point; the date of that data point was not visible in the retrieved text. The requester-provided figures (about $390M TVL, about $204M borrowed on 7 Oct 2026) could not be independently confirmed and TVL on lending protocols can change quickly, so readers should check a live dashboard. Third-party coverage cited other figures at other dates (for example, about $492M TVL in a May 2026 dossier), which were not verified from a primary source and are not relied on here.","heading":"Overview and Scale","severity":"low","sources":[{"credibility":2,"name":"DefiLlama protocol API: HyperLend","type":"on_chain","url":"https://api.llama.fi/protocol/hyperlend"}]},{"content":"HyperLend ran a public audit competition on Cantina from 13 Nov 2024 to 4 Dec 2024 with a total reward pool of $100,000 and 399 findings submitted. Scope included Hyperlend Core (a fork of Aave v3.0.2), Hyperlend Isolated (a fork of Fraxlend V3), a peer-to-peer lending contract and a HyperEVM oracle contract. Out-of-scope items included external price manipulation, invalid third-party oracle data and permissioned/admin misconfiguration. The competition page does not itself constitute a final audit report, and no published results or later audit report were located during this investigation. Reliance on privileged admin or oracle configuration is therefore not covered by that contest's stated scope.","heading":"Smart Contract Audit Status","severity":"medium","sources":[{"credibility":2,"name":"Cantina: HyperLend competition","type":"official","url":"https://cantina.xyz/competitions/cd180bb3-5d7d-46ed-8b99-d905e54a9d0b"}]},{"content":"HyperLend sought recognition from Aave governance as a friendly fork of Aave v3 on HyperEVM. The forum proposal described a 10% revenue share with the Aave DAO and an allocation of 3.5% of token supply to the DAO treasury, with 1% airdropped to stAAVE holders. Governance forum posts show a Temp Check and an ARFC stage with delegate support. The final on-chain vote result was not located in this investigation, and a news report's timing of the recognition was not reconciled with the forum timeline.","heading":"Aave Fork Relationship and Governance","severity":"low","sources":[{"credibility":2,"name":"Aave Governance: [ARFC] Recognize HyperLend as a Friendly Fork","type":"official","url":"https://governance.aave.com/t/arfc-recognize-hyperlend-as-a-friendly-fork/21129"},{"credibility":2,"name":"Aave Governance: [TEMP CHECK] Recognize HyperLend as a Friendly Fork","type":"official","url":"https://governance.aave.com/t/temp-check-recognize-hyperlend-as-a-friendly-fork/20969"}]},{"content":"No exploit, hack or regulatory action specifically against HyperLend was found in the searches run. Other HyperEVM lending protocols have been affected: Purrlend was reported by Crypto Briefing to have been drained of about $1.5 million in a suspected exploit, with operations paused. This is a separate protocol and is noted only as ecosystem context. Absence of reports is not evidence of safety; coverage of HyperLend by independent security firms was not located.","heading":"Security Incidents and Ecosystem Risk","severity":"medium","sources":[{"credibility":2,"name":"Crypto Briefing: Purrlend drained","type":"news_article","url":"https://cryptobriefing.com/defi-attack-impact-purrlend-drained/?rand=59535"}]},{"content":"In March 2026, Hyperion DeFi (NASDAQ: HYPD) announced a private lending pool built by HyperLend on HyperEVM. A Defiant article reported that HyperLend filled its HYPE and wstHYPE staking caps within about an hour; the article's date and body could not be retrieved. These are company-reported or headline-level items and are not independent assessments of risk.","heading":"Institutional and Ecosystem Integrations","severity":"low","sources":[{"credibility":2,"name":"Finviz: Hyperion DeFi announces private lending pool built by HyperLend","type":"news_article","url":"https://finviz.com/news/333490/hyperion-defi-announces-private-lending-pool-built-by-hyperlend"},{"credibility":2,"name":"The Defiant: Hyperlend Fills Staking Caps in One Hour","type":"news_article","url":"https://thedefiant.io/news/defi/hyperlend-fills-staking-caps-in-one-hour"}]}],"sources_used":[{"credibility":2,"name":"DefiLlama protocol API: HyperLend","type":"on_chain","url":"https://api.llama.fi/protocol/hyperlend"},{"credibility":2,"name":"Cantina: HyperLend competition","type":"official","url":"https://cantina.xyz/competitions/cd180bb3-5d7d-46ed-8b99-d905e54a9d0b"},{"credibility":2,"name":"Aave Governance: [ARFC] Recognize HyperLend as a Friendly Fork","type":"official","url":"https://governance.aave.com/t/arfc-recognize-hyperlend-as-a-friendly-fork/21129"},{"credibility":2,"name":"Aave Governance: [TEMP CHECK] Recognize HyperLend as a Friendly Fork","type":"official","url":"https://governance.aave.com/t/temp-check-recognize-hyperlend-as-a-friendly-fork/20969"},{"credibility":2,"name":"Crypto Briefing: Purrlend drained","type":"news_article","url":"https://cryptobriefing.com/defi-attack-impact-purrlend-drained/?rand=59535"},{"credibility":2,"name":"Finviz: Hyperion DeFi announces private lending pool built by HyperLend","type":"news_article","url":"https://finviz.com/news/333490/hyperion-defi-announces-private-lending-pool-built-by-hyperlend"},{"credibility":2,"name":"The Defiant: Hyperlend Fills Staking Caps in One Hour","type":"news_article","url":"https://thedefiant.io/news/defi/hyperlend-fills-staking-caps-in-one-hour"}],"summary":"HyperLend is a lending and borrowing protocol on HyperEVM (the EVM layer of Hyperliquid), built on a fork of Aave v3.0.2 plus isolated-pool contracts, with the HPL governance token. Searches found no reported exploit or enforcement action against HyperLend itself; a public Cantina audit contest was run in late 2024, but no final audit report or results were located. Figures supplied by the requester (about $390M TVL, about $204M borrowed on 7 Oct 2026) could not be reproduced from a primary source; the DefiLlama protocol data read during this investigation showed lower values (about $335.8M supplied, $179.1M borrowed, as of an undated latest data point).","timeline":[{"date":"2024-11","event":"HyperLend Cantina audit competition begins (ran to December 2024; $100,000 reward pool).","source":"Cantina","source_url":"https://cantina.xyz/competitions/cd180bb3-5d7d-46ed-8b99-d905e54a9d0b"},{"date":"2024-12","event":"HyperLend Cantina audit competition ends with 399 findings submitted.","source":"Cantina","source_url":"https://cantina.xyz/competitions/cd180bb3-5d7d-46ed-8b99-d905e54a9d0b"},{"date":"2026-03","event":"Hyperion DeFi announces a private lending pool built by HyperLend.","source":"Finviz","source_url":"https://finviz.com/news/333490/hyperion-defi-announces-private-lending-pool-built-by-hyperlend"}]},"v":1}