738,600 USDC Transferred Out, Hyperliquid User Account Compromised with Over 10,000 HYPE Unstaked

Odaily Odaily News A Hyperliquid user's account was compromised through unauthorized control, with approximately 738,600 USDC transferred out and an additional 10,287 HYPE unstaked. The affected account belongs to a specific address, with some of the stolen funds allegedly flowing to an address linked to Bitget. As of the time of verification, the 10,287 HYPE remained in the staking balance and had not yet entered the withdrawal queue. If the attacker proceeds to initiate a cWithdraw, the related assets would be further transferred after a 7-day waiting period. In two recent similar cases, staked assets were stolen a second time due to the lack of a user-triggerable emergency pause mechanism, resulting in losses exceeding $1.1 million. Relevant recommendations include introducing a Guardian or Recovery mechanism that users can pre-enable, which would only temporarily pause withdrawals, transfers, and authorization changes, with the pause automatically expiring, and recovery requiring a time lock, evidence review, and on-chain recording.