Is Hyperliquid safe? An honest risk review

By the Hyper Primer team · Updated 23 October 2026

Hyperliquid has not lost user deposits to a protocol hack, but it has had several market-manipulation incidents that cost its HLP vault money, a 37-minute API outage, and criticism for a small, concentrated validator set. It is a high-risk venue for leveraged trading, and most user losses come from leverage and phishing.

The short version

Safety on Hyperliquid has three layers: the platform (code, validators, bridge), the market design (how liquidations and HLP absorb stress) and you (leverage, wallet security, phishing). As of October 2026 we found no case of user deposits being stolen through a flaw in Hyperliquid's core protocol. The incidents below were market-structure events, an outage, or problems in third-party apps.

Notable incidents

ETH whale, 12 March 2025

A trader turned about $10M into a roughly $270M leveraged ETH long, then withdrew collateral so that the position was liquidated into HLP rather than unwound on the market. The trader netted about $1.8M and HLP absorbed about $4M. Hyperliquid said it was not an exploit, and cut maximum leverage to 40x on BTC and 25x on ETH (Cointelegraph).

JELLYJELLY, 26 March 2025

A trader opened a large short on the small JELLYJELLY token and the position ended up with HLP through liquidation, after which the token's price spiked. HLP's unrealised loss reached about $12M and Binance and OKX listed JELLYJELLY perps within about an hour. Validators voted to delist the market and settle positions, and the Hyper Foundation said it would compensate users other than flagged addresses (The Block). Many critics saw the intervention as proof that Hyperliquid can be steered by a small group; supporters called it risk containment. Afterwards Hyperliquid said it would review its listing standards and margin parameters for smaller assets.

API outage, 29 July 2025

A traffic spike overloaded the API servers for about 37 minutes. Hyperliquid said it was not a hack and refunded about $2M to affected traders (Cointelegraph).

Market crash, 10 October 2025

In the crash that wiped out more than $19B of leveraged positions across exchanges, Hyperliquid stayed online but auto-deleveraging closed profitable shorts, frustrating many traders. HLP reportedly earned over $40M (The Defiant).

POPCAT, November 2025

An attacker reportedly used about $3M across 19 wallets to build a $20M–$30M POPCAT long, propped up the price with a large buy wall, then pulled it. HLP was left with about $4.9M of bad debt (CoinDesk).

FARTCOIN, 9 April 2026

PeckShield flagged suspected manipulation using about $15M of longs across four wallets. HLP lost about $1.5M over 24 hours and ADL was triggered (Forklog).

Third-party and user-side losses

The HyperEVM lending protocol Hyperdrive was exploited for about $782K in September 2025, and phishing campaigns using fake Hyperliquid sites, fake airdrops and search ads have drained individual wallets in 2025 and 2026. None of these were flaws in Hyperliquid itself, but the money is just as gone.

Validators and centralisation

Hyperliquid's L1 runs on HyperBFT consensus with an active set capped at the top 27 validators by stake. Critics raise several points: the set is small compared with mature L1s, a large share of stake sits with a few validators including Foundation-run ones, the node software is a single implementation that is not fully open source, and the JELLYJELLY episode showed validators can act quickly to change outcomes. Supporters answer that the validator set has grown since launch and that becoming a validator is permissionless with 10,000 HYPE self-stake. Both can be true.

The bridge and USDC

For most of its life Hyperliquid relied on a bridge from Arbitrum, where withdrawals are signed by validators. Its logic was audited by Zellic. Circle has since brought native USDC and CCTP to Hyperliquid, and the docs say the legacy Arbitrum bridge now holds less than 10% of USDC on HyperCore. Bridges remain one of crypto's biggest attack surfaces: a compromise of enough validator keys could put bridged funds at risk.

Ready to trade? Check that Hyperliquid is allowed where you live, then sign up with code POLYGOLD for 4% off trading fees.

Open Hyperliquid

How to stay safe

Bookmark app.hyperliquid.xyz and never use links from ads, DMs or "airdrop" posts.
Use a hardware wallet or a dedicated wallet just for trading, and never share a seed phrase.
Keep only trading capital on the exchange. Withdraw what you are not using.
Use low leverage and isolated margin, and set stop-losses (see avoid liquidation).
Be careful with thin, newly listed markets, which are where manipulation tends to happen.
Treat HLP and user vaults as risky investments, not savings.
Revoke old token approvals if you use HyperEVM apps.
Check you are allowed to use it where you live (see is Hyperliquid legal).

Frequently asked questions

Has Hyperliquid been hacked?

We found no case of user deposits being stolen through a flaw in Hyperliquid's core protocol as of October 2026. There have been manipulation incidents that cost the HLP vault money, an API outage, and exploits of third-party HyperEVM apps.

What happened with JELLYJELLY on Hyperliquid?

In March 2025 a manipulated JELLYJELLY short left HLP with an unrealised loss of about $12M. Validators delisted the market and settled positions, and the Hyper Foundation compensated users other than flagged addresses.

Is Hyperliquid decentralised?

Partly. It runs on its own proof-of-stake chain, but the active validator set is capped at 27 and critics say stake and software are concentrated.