...
Hyperliquid Protocol, a blockchain project that focused on offering a trading platform to users, encountered significant challenges related to validator centralization. Reports revealed that the blockchain ran on four validators that relied on the same client software and heavily depended on a single cloud provider for infrastructure. Additionally, a few large staking pools controlled the majority of the protocol’s stake.
These factors made the network vulnerable to disruptions as the bridge between the Hyperliquid platform and Arbitrum experienced downtime. This incident led to transaction delays of over four hours, and user funds had to be kept locked on the platform to prevent any hacking incidents. Concerns were also raised about governance, with dominant staking pools having the ability to veto proposals, undermining decentralization.
Intelligence reports identified suspicious activity by North Korean actors targeting validator nodes, exploiting known vulnerabilities in the client software and cloud setups. It involved attempts to gain control over multiple validators simultaneously, which could have compromised the network’s consensus mechanism.
While the attack was mitigated in time, it caused panic in the market, leading to a decline in HYPE’s price (native token of the protocol) by over 30% within 24 hours. The transaction value locked (TVL) on the chain was over $2.7 billion at the time of this incident. The threat also sparked widespread debate about the protocol’s security practices and reliance on centralized infrastructure.
...