Hyperliquid User Loses $21 Million to Hackers After Private Key Breach

A Hyperliquid user operating wallet address 0x0cdC…E955 has lost $21 million worth of crypto to hackers, following a private key ￰1￱ security specialists at PeckShield tracked the movement of stolen assets through on-chain analysis, revealing that the attackers quickly moved to transfer the compromised funds to the Ethereum ￰2￱ stolen haul included approximately 17.75 million DAI tokens and 3.11 million MSYRUPUSDP tokens. PeckShield’s investigation included visual evidence in the form of screenshots that map out various wallet addresses implicated in the theft. #PeckShieldAlert A victim 0x0cdC…E955 lost ~$21M worth of cryptos on #Hyperliquid due to a private key ￰3￱ hacker has bridged the stolen funds to #Ethereum , including 17.75M $DAI & 3.11M $MSYRUPUSDP.

pic. twitter. com/yZUMM6xL5f — PeckShieldAlert (@PeckShieldAlert) October 10, 2025 The data shows a clear trail of stolen tokens being systematically transferred and redistributed through Monero dark ￰4￱ methodology closely mirrors the tactics employed by cybercriminals in previous high-profile cryptocurrency thefts. $16M Long Trade Close Links to the Hyperliquid Private Key Breach A mysterious aspect of the hacking incident involves the timing of certain trading ￰5￱ when PeckShield issued its initial alert about the breach, trading records show that a Hyperliquid account executed a closure of a HYPE long position valued at $16 million.), has suggested that the victim’s losses may be even more ￰6￱ to Cannon’s analysis , an additional $300,000 may have been drained from associated wallet addresses that the hacker managed to ￰7￱ Hacking Incidents On Hyperliquid Paint a Troubling Picture Another Hyperliquid user shared that he lost $700k in HYPE in a similar incident last ￰8￱ to him, he’s not sure how he was hacked, “No malware, no discord chats, no TG calls, no email download,” he ￰9￱ 700k in hype in a similar incident last ￰10￱ sure how they ￰11￱ malware, no discord chats, no TG calls, no email download. — BRVX (@TradeThreads) October 9, 2025 He believes the hack was most likely achieved through Windows malware, as he hadn’t touched crypto wallets in a week prior to the hack and had gotten a new MacBook, too, but the wallet wasn’t set up on ￰12￱ smart contract bugs or exchange exploits, this attack happened because of a private key ￰13￱ means the attacker gained direct access to the wallet’s login ￰14￱ leaks often occur due to phishing links, malware, or unsafe key ￰15￱ experts have long warned that high-value accounts should always use cold wallets or multi-signature protection to prevent such ￰16￱ issued an urgent security alert warning users about a sophisticated phishing campaign targeting Jade hardware wallet owners through fake firmware update emails. #Phishing #Crypto ￰0￱ — ￰17￱ (@cryptonews) September 13, 2025 But it seems users continue to fall victim to these exploits.

A Pattern of Private Key Breaches Just a few weeks ago, SFUND, the official token of Seedify, plummeted by 99% after North Korean hackers extracted $1.2 million from the DAO launchpad by gaining access to a Seedify developer’s private keys. Similarly, in September, a user of the Venus lending protocol on BNB Chain lost assets worth about $27 million due to a private key ￰18￱ to a report by blockchain security firm CertiK, last year alone saw a loss of $2.36 billion in total across 760 on-chain security incidents. A whopping $1.05 billion was lost to private key breaches through over 296 incidents, accounting for 39% of the total number of attacks suffered in crypto.), the second-most targeted chain when it comes to phishing scams.