About $3.6 million vanished from Hypervault and was funneled through Tornado Cash as the project deleted all online accounts.
About $3.6 million has disappeared from the DeFi platform Hypervault, sparking fears of a classic rug pull. As per a recent X post by blockchain security firm PeckShield, the stolen funds were first bridged from Hyperliquid to Ethereum ETH $3 940 24h volatility: 1.6% Market cap: $475.55 B Vol. 24h: $54.34 B , then swapped for ETH.
#PeckShieldAlert #Rugpull? We have detected an abnormal withdrawal of ~$3.6M worth of cryptos from @hypervaultfi.
The funds were bridged from #Hyperliquid to #Ethereum, swapped into $ETH, and then 752 $ETH was deposited into #TornadoCash. pic.twitter.com/mHQLPYXvzS
— PeckShieldAlert (@PeckShieldAlert) September 26, 2025
Soon after, around 752 ETH, nearly $3 million, was sent through Tornado Cash TORN $11.66 24h volatility: 2.0% Market cap: $44.45 M Vol. 24h: $3.58 M , a service often used to hide stolen funds.
Hypervault’s entire online presence disappeared almost immediately after the suspicious transfers.
The project’s website became inaccessible, its X account @hypervaultfi was deleted, and its Discord channel was taken offline. Investors trying to access promotional links now find only dead pages, suggesting that the team behind the platform may have exited with user funds.
Prior to the incident, Hypervault had marketed itself as an “unmanaged” auto-compounding vault system. It promised annual yields of up to 76% on stablecoins and 95% for HYPE HYPE $43.24 24h volatility: 5.1% Market cap: $11.71 B Vol. 24h: $1.09 B liquidity pools.
At the time of the suspected exploit, the platform held roughly $5.91 million in total value locked (TVL) across over 1,100 depositors, according to DeFiLlama.
Red flags over audits and security
Hypervault had portrayed itself as a long-term project, sharing plans to lower yields for sustainability and even launching a new crypto token later this year. Developers claimed an audit was underway with well-known security firms Spearbit, Pashov, and Code4rena.
However, when community members contacted the mentioned auditors, Pashov replied that they had never heard of Hypervault. Code4rena’s website also listed no pending audits for the protocol. These discrepancies triggered early warnings from crypto investors.
MAX REPOST 🚨: HYPERVAULT PROJECT IS DOING SHADY STUFF
Friends, withdraw your funds from the protocol ASAP until further updates! When I asked Hypervault developers about audits, they answered that: “Audits are pending via Spearbit, Pashov, and Code4rena; expected turnaround for… https://t.co/SMKLP9S1tR pic.twitter.com/NBwrsbwRT6
— HypingBull (@hypingbull) September 4, 2025
HypingBull publicly called the project’s actions “shady” earlier this month and withdrew funds before the platform went offline.
Despite these alerts, Hypervault continued to operate normally until the final hours, encouraging users to explore other HyperEVM protocols and suggesting an imminent official audit. The abrupt shutdown and untraceable transfers now point to a likely exit scam.
Not the first rug pull of 2025
The Hypervault collapse is only the latest in the list of high-profile rug pulls this year. Earlier in August, the Test Token (TST), a meme coin that originated from a Binance tutorial, abruptly drained investor funds in a 15-minute price freefall, leaving holders with worthless tokens.
Earlier this year, First Lady Melania Trump-linked meme coin, Official Melania Meme MELANIA $0.16 24h volatility: 0.5% Market cap: $125.85 M Vol. 24h: $5.61 M was accused of a similar exit scam. This suggests how even projects with famous names or heavy promotion can suddenly vanish.
next