DeFi protocol Hypervault vanishes after $3.6 million suspected rugpull
Quick Take PeckShield has flagged $3.6 million in abnormal outflows from Hypervault. Most of the funds were bridged from Hyperliquid to Ethereum and deposited into Tornado Cash, potentially indicating a rug pull. The project’s X account has been deleted, and the official website remains inaccessible.
Blockchain security firm PeckShield has flagged unusual outflows of about $3.6 million from the decentralized finance platform Hypervault, noting that funds were bridged from Hyperliquid to Ethereum.
The funds were then swapped into ETH, and approximately 752 ETH, worth almost $3 million, was deposited into Tornado Cash, a step that often precedes or accompanies a rug pull.
A “rug pull” refers to a scenario in which project operators withdraw onchain liquidity or user deposits and disappear, typically after marketing high yields or providing incomplete audits.
Hypervault’s website and documentation have promoted “unmanaged” auto-compounding vaults, keeper-bot harvests, and strategy adapters that route assets to lending, looping, and concentrated liquidity venues on HyperEVM. It deployed user deposits across external venues via modular strategies to generate returns.
PeckShield’s alert did not immediately identify specific wallets beyond the Tornado Cash deposit. Additionally, the project’s X account has been deleted, and the official website remains inaccessible, which raises suspicions of an exit scam.
Hypervault X page deleted after abnormal withdrawals. | Images: X
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
After bitcoin returns to $90,000, is Christmas or a Christmas crash coming next?
This Thanksgiving, we are grateful for bitcoin returning to $90,000.

Bitcoin security reaches a historic high, but miner revenue drops to a historic low. Where will mining companies find new sources of income?
The current paradox of the Bitcoin network is particularly striking: while the protocol layer has never been more secure due to high hash power, the underlying mining industry is facing pressure from capital liquidation and consolidation.

What are the privacy messaging apps Session and SimpleX donated by Vitalik?
Why did Vitalik take action? From content encryption to metadata privacy.

The covert war escalates: Hyperliquid faces a "kamikaze" attack, but the real battle may have just begun
The attacker incurred a loss of 3 million in a "suicidal" attack, but may have achieved breakeven through external hedging. This appears more like a low-cost "stress test" targeting the protocol's defensive capabilities.

