Users have withdrawn $96 million worth of USDC from HyperLiquid per day
Earlier, trading activity from users from the DPRK was recorded on the platform
23.12.2024 - 12:55
727
3 min
0
What’s new? HyperLiquid, a decentralized crypto exchange (DEX) of perpetual futures, operating on its own eponymous Layer (L1) blockchain, has faced a sharp outflow of reserves in USDC stablecoins from the issuer Circle. The withdrawal of deposits comes amid rumors spreading that DPRK hackers are interacting with the platform.
What else is known? A blockchain developer under the nickname tayvano_ reported in her X-account that hackers from North Korea are testing HyperLiquid for vulnerabilities by conducting trades, but the platform team itself has shown no concern.
Addresses linked to DPRK hackers have suffered $700+ million in losses while trading on HyperLiquid. Transactions indicate that hackers are potentially familiarizing themselves with the inner workings of the platform to launch a malicious attack: “DPRK doesn’t trade. DPRK tests,” the developer emphasized.
The developer also noted that two weeks ago she offered the HyperLiquid team help in countering the potential threat, as North Korean hackers are notable for their sophistication.
Media report on the mass employment of DPRK developers in crypto startups
Since at least 2018, North Koreans have been infiltrating companies to make money in the face of sanctions, as well as organizing hacks
According to blockchain analytics platform Dune, USDC deposits on HyperLiquid total $2,24 billion. The second most capitalized stablecoin is used on the exchange as collateral. On December 23, users withdrew $96,3 million in USDC from the platform.
HyperLiquid is the leading platform of open-ended futures, its market share exceeds 50%, and in the previous day, the trading volume amounted to $8,6 billion.
On November 29, the platform launched its own token HYPE, holding one of the largest airdrops in the industry’s history, during which time the asset rose from $3,9 to $27,96. However, it has lost 19% over the past 24 hours amid rumors of threats.
Useful material?
Incidents
In a single week, hackers went after PHP websites, the Railway cloud platform and a medical company, and experts started talking about a crisis that is only just beginning.
Oct 28, 2026
Incidents
In 104 minutes, the attacker emptied 1,404 addresses before validators halted the network and froze almost all of the loot.
Oct 19, 2026
Incidents
Developers warned of potential risks to bridges across the ecosystem and asked exchanges for assistance.
Jun 22, 2026
Incidents
The defendant helped move funds stolen through investment scams and earned at least $4 million for his role in the operation.
Jun 10, 2026
Incidents
The company is linking the incident to a compromised private key on a service wallet, rather than a smart contract exploit
May 22, 2026
Incidents
Following the incident, the project temporarily halted trading operations and node activity.
May 15, 2026

Telegram
Twitter