The Hyperdrive DEFI protocol underwent a feat of $ 773,000 with two accounts in its cash ticket market, with stolen funds divided between the BNB chain and Ethereum networks through bridges transfers.
The attack compromised the positions using the Theo Network THBILL as a guarantee, which caused immediate suspension of all monetary markets and withdrawals on the platform.
Certik’s analysis revealed that the attacker has exploited an arbitrary vulnerability of appeal in the router contract, steering wheel 672 934 USDT0 and 110,244 Thbill tokens.
The stolen funds were filled via the Debridge protocol, with around $ 494,000 moved to Ethereum and $ 279,000 to the BNB channel before being consolidated at a single address.
The incident marks the second major security violation targeting the hyperliquid ecosystem within three days, following the hypervault carpet of $ 3.6 million, in which the developers disappeared after having removed all their social media accounts.
The rapid succession of attacks raises concerns about the security posture of projects that are built on the decentralized exchange platform.
Hyperdrive officials confirmed that the feat was limited to the main USD0 and USDT treasure market, without impact on the native medical token of the protocol.
The team has hired security and criminalic experts while exploring remuneration plans for affected users.
The striker has repeatedly exploited a critical flaw in the Hyperdrive router contract which has enabled calls for arbitrary function, thus bypassing normal security restrictions and draining user funds.
Certik’s forensic analysis has identified the specific vulnerability that has enabled the systematic extraction of Thill’s Treasury market funds.
The target feat of accounts occupying positions supported by the invoice tokens of the Treasury of Theo Network, which serve as a guarantee on the Hyperdrive loan markets.
In particular, security experts have hypothesized that the attacker’s methodical approach suggests a high level of knowledge of the internal mechanics of the protocol and the architecture of intelligent contracts.
They noted that the stolen funds were quickly removed from the chain via Debridge, a transverse protocol that facilitates asset transfers between different blockchain networks.
The Hyperdrive team contacted it in the chain, offering a 10% white cart premium in exchange for the return of the remaining funds.
The protocol suspended all market operations and withdrawal functions to prevent additional malicious activity while studying the full range of compromise.
