Is Hyperliquid safe to connect?
Exchange ยท Hyperliquid L1 (HyperCore/HyperEVM), USDC via Arbitrum bridge. Checked 2026-10-24; every line links its source.
Worst case: You keep your keys, but your deposit sits in a validator-controlled bridge that can be paused, profitable positions can be force-closed by auto-deleveraging, and HLP vault deposits absorb manipulation losses; a leaked main-wallet key (not an API wallet) can withdraw everything.
Safe setup in 3 steps
- Give bots a dedicated API (agent) wallet with a valid_until expiry, never your main wallet's private key
- Generate a fresh agent wallet instead of re-approving an old address after deregistering it
- Only use the app at app.hyperliquid.xyz and keep only trading margin on Hyperliquid, not long-term savings
Hyperliquid also has a full listing with an Agent Risk Score Agent risk 64% (partial, 5 of 7 inputs): Hyperliquid on TradingAgentStack.
What it can do with your money
| Who holds the keys | You hold the keys You sign with your own wallet; deposited USDC sits in the Hyperliquid bridge contract, which permissioned validators control (2/3 of a 4-validator hot set signs withdrawals). source |
|---|---|
| Can funds be sent out to any address? | Yes. Withdrawals go through the bridge after a ~200s challenge period; validators/lockers can pause it (it was paused about an hour in Nov 2025). source |
| Can it hold or freeze your funds? | No KYC account freezes as on a CEX, but L2BEAT notes funds can be frozen if the validator set stops processing withdrawals or if permissioned 'lockers' (threshold 2) pause the bridge, and funds could be stolen if a majority of the hot validators signed an invalid withdrawal. Validators have also delisted a market and force-settled positions (JELLYJELLY, Mar 2025). source |
| What a leaked API key can do | No exchange-style API keys: you approve an 'API wallet' (agent wallet) with approveAgent. An account can have 1 unnamed and up to 3 named API wallets (plus 2 named per subaccount); an expiry can be set with valid_until, at most 180 days ahead. API wallets only sign trading (L1) actions, not transfers or withdrawals, which need the main wallet's signature (per Chainstack's integration guide). Hyperliquid warns not to reuse an agent address after it is deregistered, because pruned nonces can let old signed actions be replayed. source |
| Monero and Zcash | ZEC: perpetual futures only (USDC-margined synthetic exposure; ZEC is one of the most actively traded perps); native ZEC deposit/withdraw not documented source |
Official links
- Website:
hyperliquid.xyz - X:
@HyperliquidX
Where we confirmed these
Incidents
| Date | What happened | Amount | Outcome | Source |
|---|---|---|---|---|
| 2026-04-09 | FARTCOIN pump and self-liquidation dumped a losing position onto HLP | ~$1.5M (HLP) | Loss borne by HLP depositors | source |
| 2025-11-13 | POPCAT price manipulation left ~$4.9M bad debt in the HLP vault; bridge withdrawals paused via 'vote emergency lock' | ~$4.9M (HLP) | Withdrawals resumed after about an hour; loss borne by HLP | source |
| 2025-10-10 | First-ever cross-margin auto-deleveraging (ADL) during the 10 Oct crash: profitable positions were force-closed at mark price | Affected traders' positions closed early; no compensation reported | source | |
| 2025-03-26 | JELLYJELLY short-squeeze manipulation threatened the HLP vault; validators delisted the market and settled positions | ~$10M HLP loss reportedly avoided | Hyperliquid said it would compensate affected JELLYJELLY traders | source |