I reverse engineered Hyperliquid's closed-source validator binary. Key findings:

  • 8 undisclosed addresses control all transaction submission
  • Single private key can set any oracle price instantly: no timelock, no limits
  • Chain can freeze via governance. No undo function exists.
  • TestnetSetYesterdayUserVlm in mainnet binary: retroactive volume manipulation for a system where volume determined airdrop allocation
  • $362M more in user claims than exists in the bridge
  • Hidden lending protocol (BOLE) with $1M+ supplied, no documentation

Every claim includes proofs you can verify yourself.