Suspicious North Korean Activity Hits Hyperliquid’s Stability

Highlights:

• North Korean hackers have hit Hyperliquid and are testing its defences for a possible major attack.
• The TVL has taken a hit, but strong trading numbers show that users are still engaged with the platform.
• North Korea tops crypto heists this year with platforms rethinking their security against growing threats.

Hyperliquid, a decentralized exchange, has become the target of North Korean hackers. According to Crypto Tay, abnormal activity has been spotted in wallets belonging to the hackers. These transactions generated losses of over $700,000. These actions, according to analysts, are part of a strategy to break Hyperliquid’s defenses.

Several marked North Korean hacker addresses have recently been trading on Hyperliquid, with a total loss of more than $700,000, according to @tayvano_. Some community members are concerned that these trading activities may mean that North Korean hackers have identified…

— Wu Blockchain (@WuBlockchain) December 23, 2024

The activity has sparked fears of a bigger attack on the platform. It appears that the hackers may have been gaining knowledge about how the exchange works. This testing phase might be to uncover weaknesses. The connection to North Korea compounds concerns about the scale of the threat.

Suspicious Activity Affects TVL of the Platform

Reported suspicious activity has severely affected the performance of Hyperliquid. The total value locked on the platform has plummeted more than $1 billion during the past week. This has resulted in the TVL declining 35% from $3.45 billion to $2.23 billion.

Hyperliquid’s native token also fell sharply in value. Within 24 hours, the token saw a 16.95% drop in its price. A single day saw outflows of $70 million in USDC, further alarming users.

These developments have raised concerns among investors and users. Confidence in the platform is key to maintaining stability. Further significant outflows could pose risks to the future of Hyperliquid, they warn.

TVL Surge Before Security Challenges

Hyperliquid trading activity has increased in the past weeks. The platform had a total trading volume of $11.5 billion, and liquidations of $1.32 billion before the allegations surfaced. The recovery of its TVL shows users’ confidence in the innovative features it offers.

If that wasn’t enough:

HyperLiquid is breaking records as ETH trading activity surpasses Bitcoin. source

The platform's cumulative perpetuals volume has exceeded $500 billion– that’s a 15x increase year-to-date!

Crazy. pic.twitter.com/S6p9d41pEL

— Nic (@nicrypto) December 16, 2024

The token ecosystem of Hyperliquid has also attracted major attention. A recent airdrop of 310 million HYPE tokens has boosted liquidity and trading activity. The unique Dutch auction system of the platform has added excitement to token sales hence driving demand further.

Crypto Heists Surge in 2024

North Korea became the leading country in cryptocurrency theft in 2024 according to a report by Chainalysis. Across the incidents, hackers from the country have stolen $1.34 billion. That is a leap from the $660 million stolen in 2023.

This made up 61% of total cryptocurrency losses in 2024. The largest incidents were $320 million from DMM Bitcoin and $235 million from WazirX. Nearly half of the total losses came from private key compromises. Recently, in November, the South Korean government reported that the 2019 Upbit hack was connected to North Korean hackers.

The first preview chapter for our 2025 Crypto Crime Report is for stolen funds. We look at crypto hacking trends in 2024, the DPRK’s activities, and more: https://t.co/1cu8druW84

— Chainalysis (@chainalysis) December 19, 2024

North Korean hackers are aiming for smaller sums in an attempt to minimize the risk of being caught. This indicates the progression of attack frequency by these cybercriminals. They mainly target decentralized finance platforms.

Such coordinated attacks are becoming a growing threat to crypto platforms. To counter these challenges, strengthening security practices has become necessary. Unless there is urgent action, the scale of these attacks will continue to grow.