tl;dr
Hyperliquid denies being hacked by North Korea’s Lazarus Group, despite on-chain data showing evidence of large-scale fund withdrawals. Taylor Monahan, a security expert at Metamask, warned of security vulnerabilities in Hyperliquid’s system. Hyperliquid responded via Discord, denying any exploit an...
Hyperliquid denies being hacked by North Korea’s Lazarus Group, despite on-chain evidence of fund withdrawals. Hyperliquid responds to North Korean hack rumors, prompting $60 million in user withdrawals. Lazarus-linked accounts deposit and withdraw substantial ETH amounts from Hyperliquid, sparking security concerns. MetaMask security expert warns of North Korean hacker threat to Hyperliquid. North Korean hackers, specifically Lazarus Group, pose significant security risk to Hyperliquid.
Hyperliquid denies being hacked by North Korea’s Lazarus Group, despite on-chain data showing evidence of large-scale fund withdrawals. Taylor Monahan, a security expert at Metamask, warned of security vulnerabilities in Hyperliquid’s system. Hyperliquid responded via Discord, denying any exploit and stating that user funds are secure. However, on-chain data shows North Korea-linked accounts depositing and withdrawing substantial amounts of ETH from the platform. Security expert Taylor Monahan urged caution, citing the severity of any incident linked to the Lazarus Group. The US government believes Lazarus stole nearly $900 million, and North Korean hackers have been behind major crypto hacks in 2024. Monahan expressed concern that Hyperliquid is at increased risk and criticized its evasive attitude. He highlighted potential security vulnerabilities and the risk of lateral movement by hackers. Despite these concerns, Hyperliquid does not seem stressed about the accusations.
On-chain data reportedly shows that North Korea-linked wallet addresses collectively deposited and withdrew substantial amounts of ETH from the platform on December 23. Taylor Monahan, a security expert at Metamask, warned that the hackers do not need to meddle with user funds to breach security and identified clear vulnerabilities in Hyperliquid’s system.
Hyperliquid, a decentralized exchange, officially responded to its critics via Discord. Rumors of a North Korean hack have been circulating today, leading users to withdraw $60 million from the platform. The exchange’s HYPE token was already falling before this recent development, prompting official accounts to conduct damage control. "There has been no DPRK exploit - or any exploit for that matter - of Hyperliquid. All user funds are accounted for. Hyperliquid Labs takes OpSec seriously. No Vulnerabilities have been shared by any party. To be clear, there was never any allegation of any exploit on Hyperliquid," one of the platform’s executives posted on Discord. Hyperliquid has yet to provide any public statements or announcements to publicly explain the accusations. Instead, on-chain data reveals that Lazarus-linked accounts deposited $476,489 in ETH tokens onto Hyperliquid before subsequently withdrawing them. While these are not concrete signs of an exploit, they do raise questions about why the platform is seeing such a large volume of outflow from suspicious wallet addresses in a single day.
However, MetaMask security expert Taylor Monahan strenuously urged greater caution. The crypto industry is well aware of the severity of any incident linked to the infamous Lazarus Group. Therefore, Hyperliquid should take its threats very seriously, according to the security expert.
The US government believes that Lazarus stole nearly $900 million. Overall, North Korean hackers have been behind some of the biggest crypto hacks of 2024. In fact, DPRK-based actors were behind the critical Radiant Capital hack earlier this year, which involved breaching the platform's sophisticated multisig wallet authentication. The speculation that similar entities could be showing interest in Hyperliquid is extremely concerning.
"I am quite concerned that you guys are at increased risk due to the fact that we know that these specific threat actors are now intimately familiar with your platform. I really want to emphasize that these are the most sophisticated and rapidly evolving of all the DPRK threat groups. They are very creative and persistent," Monahan claimed.
Monahan went on to state that the exchange’s evasive and defiant attitude was a very worrying sign. Even if Lazarus hasn’t disturbed any of the funds on Hyperliquid, it may have already penetrated its security. The Metamask security expert also stated that the firm had no more than 4 validators, all of which run the same code, and an unknown number of higher-ups can bypass key security vulnerabilities. In short, if founders, executives, and engineers use the same devices to access the same systems, then one malware link could unravel the whole operation. Lateral movement is one of the key strategies of North Korean hackers, where they leverage multiple access points to move through a network. So, if one high-level person’s private device gets compromised, a major hack becomes inevitable. However, as of now, Hyperliquid does not seem stressed about these accusations.
Best crypto platforms in Europe | December 2024 eToro, Wirex, YouHodler, Phemex, Margex