Is Hyperliquid Safe? A Security and Risk Breakdown

Video transcript

Is Hyperliquid safe? Its main risks sit in four places: the validators, the legacy bridge, the oracles and the backstops.

On November 6, 2026, five Hyper Foundation validators held 47.4 percent of stake. Three of them alone clear the one third needed to stall consensus.

The legacy Arbitrum bridge held 198.9 million dollars in USDC. Any three of four signers can approve a withdrawal, after a 200 second dispute window.

Liquidations run in three stages. Orders go to the book, then a liquidator vault inside HLP takes over, then auto deleveraging closes profitable opposing positions.

Those backstops have been tested. HLP lost about 4 million dollars in March 2025, JELLY was delisted after a squeeze, and auto deleveraging closed about 2.1 billion dollars in October 2025.

Under HIP three, deployers set their own oracle prices, and slashed stake is burned, not paid to users. One Seoul print in July 2026 liquidated an estimated 57 to 80 million dollars.

Run your own checks. Read the validator set and the bridge contract, isolate risky positions, know the ADL order, and plan your HLP exit.

Read the full breakdown for the risk map and open questions, or talk to Guardian at guardian.security about underwriting your exposure.

Hyperliquid runs its own layer one chain. Every order, trade and liquidation settles onchain under HyperBFT consensus.

This guide gives no verdict on whether Hyperliquid is safe. It dates each risk to its source, then lists open questions and checks to run.

Validators and Consensus

HyperBFT is a variant of HotStuff. Its docs define a quorum as validators holding more than two-thirds of stake, and consensus requires that quorum to be honest.

Running a node is permissionless. The active set is the top 27 validators by stake.

We read the set from Hyperliquid's API:

Any group holding over one-third of stake can withhold the quorum. Three Foundation validators clear that line on their own.

Other controls, per Hyperliquid's docs:

• Slashing: none is automatic today.
• Jailing: a quorum can vote to jail slow validators.
• Unstaking: a 1-day delegation lockup, then a 7-day queue.
• Delegation: Foundation delegations require KYC or KYB.

One signed binary

Validators download a signed binary, hl-visor, from Hyperliquid's servers. Its README says hl-visor verifies each node update and will not upgrade if verification fails.

On November 6, the node repository on GitHub held setup files and the public key for checking binaries. It held no node source code.

The Bridge and Deposits

USDC is now natively minted on Hyperliquid, with Circle's CCTP handling transfers from Arbitrum. The docs say the legacy Arbitrum bridge holds less than 10% of HyperCore's USDC.

Read onchain on November 6, 2026, at Arbitrum block 521,888,476, the bridge held $198.9 million in USDC. Its controls, from the contract and chain state:

• Signers: 4 validator hot wallets of equal power. Any 3 can approve a withdrawal.
• Dispute window: 200 seconds before a withdrawal can be finalized.
• Lockers: 2 locker votes pause the bridge.
• Unlock: a quorum of validator cold wallets.

The contract's comments assume 20 to 30 validators. On November 6 it recorded four. Zellic audited the legacy bridge, per Hyperliquid's docs.

Unit Protocol manages deposits from Bitcoin, Solana and other networks, per Hyperliquid's support guide.

Markets, Oracles and Liquidations

Validators publish oracle prices every 3 seconds. Each takes a weighted median of up to eight spot venues.

The final oracle is a stake-weighted median of those submissions. Mark price, used for liquidations, also blends in Hyperliquid's book and other venues' perp prices.

Liquidations run in three stages:

1. Below maintenance margin, market orders go to the book.
2. Below two-thirds of maintenance margin, a liquidator vault inside HLP takes the position.
3. If an account turns negative, auto-deleveraging (ADL) closes profitable opposing positions.

Our perp DEX security guide compares these designs.

HIP-3 builder markets

Under HIP-3, a deployer staking 500,000 HYPE can launch its own perp exchange. The deployer defines each market, sets its oracle prices and leverage limits, and can settle it.

Validators can slash a deployer by stake-weighted vote. Slashed stake is burned, not paid to affected users.

On November 6, Hyperliquid's API listed 10 HIP-3 exchanges. Galaxy Research reported in July 2026 that TradeXYZ held over 90% of HIP-3 open interest.

The HLP Vault

HLP is a protocol vault. It makes markets, runs backstop liquidations, supplies USDC in Earn and earns a share of fees.

Depositors share its PnL, and deposits lock for 4 days. On November 6, Hyperliquid's API showed HLP at about $150.8 million.

A position the book cannot absorb becomes HLP's position. In March 2025, Hyperliquid said: "HLP is not a risk-free strategy."

Incidents on the Record

The ETH whale

The trader made about $1.8 million while HLP lost about $4 million, CoinDesk reported. Hyperliquid said "there was no protocol exploit or hack."

It cut maximum leverage to 40x for BTC and 25x for ETH.

JELLY

HLP inherited a trader's JELLY short, and its unrealized loss reached $13.5 million, CoinDesk reported. Validators then voted to delist JELLY.

Positions settled at $0.0095 while DEXs fed oracles about $0.50, CoinDesk reported. Hyperliquid's docs now say delisted perps settle to a one-hour time-weighted oracle price.

Hyperliquid said users "apart from flagged addresses" would be made whole by the Hyper Foundation.

ADL in October 2025

Gauntlet CEO Tarun Chitra's paper counts about $2.1 billion closed by ADL. Its February 2026 revision estimates winners lost $45.0 million to $51.7 million more than needed.

Hyperliquid's Jeff Yan rejected the paper's earlier critique, Protos reported. Our perp DEX audit checklist covers ADL design.

SK Hynix on TradeXYZ

One pre-market trade in Seoul printed SK Hynix 29.96% below its prior close. The perp's mark price fell 18.7%, per Galaxy Research.

Onchain analysts estimated $57 million to $80 million liquidated across about 960 accounts, Galaxy reported.

TradeXYZ said its oracle "worked as intended." It called covering eligible losses a "one-time discretionary decision."

Risk Map and Open Questions

Still open:

• Whether the Foundation's stake share falls as the set grows.
• When validator slashing moves beyond "no automatic slashing."
• Whether node source becomes public for outside review.
• Who pays when a HIP-3 oracle misfires. TradeXYZ called its cover one-time.

Checks to Run Yourself

1. Read the validator set. Query validatorSummaries on the info API and sum the Foundation's share.
2. Read the bridge. On Arbitrum, call nValidators, disputePeriodSeconds and paused on the bridge contract.
3. Know your route. Native USDC, the legacy bridge, or Unit for other assets.
4. Name the operator. Validator-run market or HIP-3 deployer, and its oracle spec.
5. Isolate risky positions. Isolated margin keeps one liquidation from taking the rest.
6. Know the ADL order. High leverage and large unrealized gains go first.
7. Plan the HLP exit. Withdrawals open 4 days after your last deposit.
8. Watch validator votes. Delistings, jailing and quote-asset decisions.

How Guardian Helps

Guardian's risk ratings for capital allocators underwrite a position on evidence: the deployed code, who controls it, and what it depends on.

Oracles, bridges, keepers and upstream protocols are "assessed as inherited exposure." On Hyperliquid, that means the validator set, the bridge signers and each HIP-3 deployer.

Each position gets a score from 0 to 100. Signer, threshold and oracle changes reach you the day they happen.

Guardian has also reviewed code at HyperCore's boundary, including USDT0's Hyperliquid deployment. Compare reviewers in Best Perp DEX Auditors.

Frequently Asked Questions

Is Hyperliquid decentralized?

Running a node is permissionless, and 27 validators are active. Hyperliquid's API showed five Hyper Foundation validators with 47.4% of stake on November 6, 2026. Three of them held over one-third, enough to stall consensus.

What happened in the Hyperliquid JELLY incident?

On March 26, 2025, HLP inherited a JELLY short as the price was pushed up on thin DEX markets. CoinDesk reported an unrealized loss of $13.5 million before validators voted to delist JELLY. Positions settled at $0.0095.

Is the HLP vault risk-free?

Hyperliquid said "HLP is not a risk-free strategy" after HLP lost about $4 million in a March 2025 ETH liquidation. HLP takes over backstop liquidations, absorbing positions the order book cannot. Deposits lock for 4 days.

How does the Hyperliquid bridge work?

USDC is now natively minted on Hyperliquid. The legacy Arbitrum bridge holds under 10% of HyperCore USDC: $198.9 million in an onchain read on November 6, 2026. Withdrawals need 3 of its 4 validator signatures, then a 200-second dispute window.

Sources

• Hyperliquid Docs: About Hyperliquid
• Hyperliquid Docs: HyperCore Overview
• Hyperliquid Docs: Staking
• Hyperliquid Docs: Running a Validator
• Hyperliquid Docs: Delegation Program
• Hyperliquid Docs: USDC
• Hyperliquid Docs: Audits
• Hyperliquid Docs: Deposited via Bitcoin Network (Unit Protocol)
• Hyperliquid Docs: Oracle
• Hyperliquid Docs: Robust Price Indices
• Hyperliquid Docs: Liquidations
• Hyperliquid Docs: Auto-deleveraging
• Hyperliquid Docs: Delisting
• Hyperliquid Docs: Clearinghouse
• Hyperliquid Docs: Protocol Vaults
• Hyperliquid Docs: HIP-3, Builder-Deployed Perpetuals
• Hyperliquid Docs: Info Endpoint (validatorSummaries, vaultDetails and perpDexs read November 6, 2026)
• Hyperliquid on GitHub: node repository and README (read November 6, 2026)
• Hyperliquid on GitHub: Bridge2.sol
• Arbiscan: Hyperliquid bridge contract (state read at block 521,888,476, November 6, 2026)
• CoinDesk: Hyperliquid Ends Up Losing $4M After $200M ETH Trade Unwinds (March 12, 2025)
• The Block: HYPE drops 8.5% amid $4 million HLP vault loss following whale liquidation (March 12, 2025)
• CoinDesk: HyperLiquid Delists JELLY After Vault Squeezed in $13M Tussle (March 26, 2025)
• The Block: Hyperliquid delists JELLYJELLY memecoin amid whale manipulation fiasco (March 26, 2025)
• The Block: Hyperliquid plans automated refunds for affected users following API outage (July 30, 2025)
• Cointelegraph: Hyperliquid reimburses $2M to crypto traders after API outage (August 4, 2025)
• arXiv: Tarun Chitra, Autodeleveraging: Impossibilities and Optimization, v3 (February 16, 2026)
• Protos: Outdated algorithm caused $650M excess losses on Hyperliquid, report (December 10, 2025)
• Galaxy Research: Hyperliquid, TradeXYZ and the SK Hynix oracle liquidations (July 31, 2026)
• Cointelegraph: Trade.xyz to cover SK Hynix perp liquidations after price anomaly (July 29, 2026)
• Guardian: Perp DEX Security, The Attack Surface of Perpetual Exchanges
• Guardian: Perp DEX Audit Checklist