Decentralized finance (DeFi) protocol HyperVault is suspected to have executed a “rug pull,” as on-chain analytics account PeckShield noted an abnormal outflow of funds from the protocol, worth close to $3.6 million.
PeckShield noted that the stolen funds were bridged from Hyperliquid to Ethereum, swapped into ETH, and then 752 ETH were deposited into Tornado Cash. For the uninitiated, Tornado Cash is a popular crypto mixer that is typically used by hackers to erase their on-chain trail.
Notably, UPUMP tokens worth $191,494, USDC worth $107,358, WHYPE worth $1.55 million, and several other tokens were stolen from HyperVault. PeckShield noted that HyperVault have also deactivated all their socials – including the X handle – virtually confirming the rug pull.
To explain, a rug pull is a type of crypto scam where developers suddenly abandon a project and drain its funds, leaving investors with worthless tokens. It’s common in DeFi and NFT spaces, where anonymity and lack of regulation make quick exits easier.
HyperVault offered “unmanaged” auto-compounding vaults, strategy adapters, and keeper-bot harvests. These features helped users route their digital assets to lending, looping, and concentrated liquidity venues on HyperEVM.
I have just reached Pashov (blockchain audit firm) on Telegram, asking if Hypervaut is doing an audit via them. The answer was: “First time I hear the project with this name”. WTF? This is super suspicious. I am withdrawing all the funds from the protocol until the team clarifies what’s going on.
Unfortunately, users continued to deposit funds into the DeFi protocol, lured by the protocol’s promised 90% APR yields on HYPE tokens. However, the extraordinarily high-yield promises at the time did not raise the alarm among users.
That said, the HYPE token appears to be minimally impacted by this suspected rug pull, as it is trading at $42.89 at the time of writing, up 2.8% on the day. However, the token is down almost 25% over the past week.
