TL;DR verdict
Conditionally safe. Hyperliquid has become the largest decentralized perpetuals platform by volume, with roughly $6 billion in TVL and no smart-contract exploit to date. However, its record is not spotless: in March 2025 the JELLY market-manipulation incident pushed the HLP vault to ~$13.5M in peak unrealized losses and was only resolved when validators voted to delist and force-settle the market — a move that averted losses but raised serious centralization concerns. The protocol's security also relies on a single public audit by Zellic, and its operation on a custom Hyperliquid L1 means chain-level risks (consensus, validators, bridge) sit outside typical smart-contract audit scope. Use with caution, size appropriately, and verify that the risk profile matches your tolerance.
Audit history
The only publicly documented audit for Hyperliquid’s smart contracts comes from Zellic. No date or scope details were disclosed. For a protocol managing $4 billion in user funds, a single audit is unusually thin; comparable perps competitors like GMX (ABDK, Quantstamp, Guardian Audits) or dYdX (Informal Systems, Bware Labs) have engaged multiple top-tier firms. The lack of additional auditors, formal verification, or ongoing code-review programs leaves gaps in assurance. The L1 node software and validators have not been audited separately, further concentrating technical risk.
Incidents and exploits
Hyperliquid has avoided the smart-contract hacks that plagued many DEXs, but it has had a significant market-integrity incident. On 26 March 2025, an attacker opened offsetting long and short JELLY positions and aggressively pumped the low-liquidity JELLY token (up ~400% in an hour). Under Hyperliquid's auto-deleveraging/liquidation design, the HLP vault inherited a large short and faced peak unrealized losses of roughly $13.5M, putting the ~$230M vault at risk. Validators reached consensus within minutes to delist JELLY and force-settle positions at $0.0095 (favorable to HLP), so HLP ultimately avoided a loss — but the episode showed that a small validator quorum could override live market pricing, a notable centralization and governance concern. No core smart-contract exploit or oracle breach has been recorded, yet a single zero-day in the L1 or oracle mechanism could still be catastrophic.
Smart contract risks
The core perpetuals and HLP vault contracts are relatively young, having launched in 2023. Code maturity is moderate—battle-tested only during a two-year bull cycle. Upgradability details are not public, so users must assume changes can be enacted with limited transparency. The protocol relies on a central limit order book (CLOB) matched on Hyperliquid’s own L1; any bug in the consensus mechanism, validator set, or bridge between ecosystems could directly impact funds. Oracle dependencies (likely a committee or push-based feed) also introduce a risk of stale or manipulated prices affecting liquidations.
Operational and counterparty risks
Hyper Foundation governs the protocol with unclear transparency—no public team identities or legal structure were verified. Regulatory risk is elevated: as a derivatives platform processing billions in notional volume, it could face enforcement actions that disrupt operations. Insurance coverage (e.g., Nexus Mutual cover) is minimal or nonexistent. Key dependency: the HLP vault acts as the main liquidity hub; a sharp divergence in its pricing or a bank run could cascade across the system. Users effectively trust a single entity for both L1 consensus and application logic.
How to use it more safely
- Use a hardware wallet: isolate signing keys and never expose them to the L1 node.
- Size positions conservatively: treat any single protocol as a potential total loss; diversify across DEXs like GMX GMX or dYdX dYdX.
- Monitor governance and multisig activity: follow Hyper Foundation updates for sudden parameter changes.
- Understand the liquidation engine: know the oracle feed source and historical slippage before leveraging high.
- Bridge minimal value: only deposit what you intend to trade; do not use the L1 as a general-purpose store of value.
- Stay informed: watch for new audits, bug bounties, and any code upgrades that could alter risk.
Verdict
Hyperliquid's ~$6 billion TVL and absence of any smart-contract exploit are genuine strengths, but the March 2025 JELLY incident — resolved only by a centralized validator vote to override market pricing — tempers confidence in its decentralization and market integrity. Combined with the single-audit trail and proprietary L1, this concentrates risk that is absent in multi-chain, multi-audit alternatives. We assess a safety score of 6.5 out of 10: suitable for experienced traders who accept smart-contract, chain-security, and governance tail risks, but not yet a fortress for passive depositors.
DeFi Intel publishes editorial research, not financial advice. Smart contract risk is never zero. Do your own research and consider position sizing accordingly.