Hyperliquid scams to avoid

Why scammers target Hyperliquid users

Hyperliquid is non-custodial: your wallet’s private key is the only thing that can move your funds. There’s no password reset and no fraud department that can reverse a transaction. So scams don’t try to break Hyperliquid; they try to get you to hand over a seed phrase or sign something harmful.

Most of the tricks below come straight from Hyperliquid’s own support guide. Two rules stop nearly all of them:

1. Never share your seed phrase or private key, with anyone or any website.
2. Never sign something you don’t understand. If your wallet’s pop-up doesn’t say clearly what will happen, close it.

1. Fake support in your DMs

Someone replies to your question on X, Discord or Telegram, says they’re “Hyperliquid support” and offers to help with a stuck deposit. They send a link or ask for your seed phrase to “sync” your wallet.

The facts: Hyperliquid’s support guide says to open a ticket yourself in the “open-ticket” channel of the official Discord (via the “Create ticket” button) or the Zendesk email form linked from the docs. Support only happens in that ticket. “Do not respond to any DMs, which are from impersonator accounts.” Tickets can take up to 48 hours, longer at weekends. Anyone faster and friendlier in your DMs is not support.

2. Lookalike websites

Phishing sites copy the real app and ask you to connect and sign. Hyperliquid’s own example of a fake is “hyperliguid.xyz” (a “g” in place of the “q”).

How to avoid it: type or bookmark app.hyperliquid.xyz and use the bookmark. Check the full URL before connecting. The real Hyper Foundation site is hyperfoundation.org. Our official links page lists the real addresses.

3. Sponsored search results

The docs specifically warn about “sponsored links on your search engine.” Scam sites buy ads on searches like “hyperliquid app” so the fake appears above the real one. Skip the ads, or better, use your bookmark.

4. Fake apps

Android: Google Play lists Hyperliquid by Hyperliquid Corp (last updated 9 Sep 2026 when we checked), and Hyperliquid’s support guide links to it.

iPhone: an App Store search for “Hyperliquid” on 4 Nov 2026 returned only third-party apps: trackers, wallets and trading apps from other developers, none published by Hyperliquid Corp. Some third-party apps are legitimate (Hyperliquid’s docs list Dexari, MetaMask and Phantom as ways to trade), but treat any app calling itself “the official Hyperliquid iOS app” with suspicion. See Hyperliquid on mobile.

5. The staking-link trap

Hyperliquid lets you link a staking account to a trading account so staked HYPE lowers the trading account’s fees. A scammer offers you a bigger fee discount: “just link your account to my staking account.”

The facts: the fee docs say the staking account “will be able to unilaterally transfer all funds from the trading user to the staking user’s account in a single irreversible transaction,” and that linking is permanent. Never link to an account you don’t control. More in how to stake HYPE.

6. Being turned into someone else’s multi-sig

HyperCore has a built-in multi-sig feature (an account that needs signatures from several keys). Once an account is converted to multi-sig, every action must be signed by its authorised keys. If an attacker gets you to sign a conversion naming their keys, or gets your key, they control the account. The scam/hacked guide lists “an unknown multi-sig on your Hyperliquid account” as a sign of compromise.

7. Signing approvals you didn’t mean to

Not every dangerous signature moves money immediately. Two to watch:

• Builder fee approvals. Apps can ask you to approve a maximum builder fee (up to 0.1% on perps, 1% on spot) that they then charge on your trades. That’s normal for legitimate front ends, but a dodgy app can ask you to approve the maximum. You can have up to 10 active approvals and revoke them at any time. See builder codes.
• Smart-contract approvals on the HyperEVM, which let a contract spend your tokens. Review and revoke them at revoke.cash.

8. “Send” to an exchange address

This one is a mistake more than a scam, but scammers exploit it (“send it to this address and I’ll release your withdrawal”). On Hyperliquid, Send moves funds to another Hyperliquid account; Withdraw moves them to another blockchain. If you Send to a centralized exchange’s deposit address, only that exchange can reach the funds. The app shows an explicit warning. See how to withdraw.

9. Trading bots that won’t let go

Many Telegram trading bots are set up to automatically re-deposit any balance, so your withdrawal keeps bouncing back. The docs’ fix: Send the USDC to another Hyperliquid address you control and withdraw from there, or ask the bot’s own support. Be careful what keys you give any bot in the first place.

10. Too-good-to-be-true offers

• Bigger or “lifetime” referral discounts. Every valid Hyperliquid code gives the same 4% off fees on your first $25M of volume. Nothing more is on offer from Hyperliquid’s program. See our referral code page.
• Airdrop checkers and “claim” sites. Hyperliquid’s points programs ended in 2024. A site asking you to connect and sign to claim something is almost always a drainer.
• Copy-trading or vault tips in DMs. Real vaults are on app.hyperliquid.xyz/vaults; you don’t need anyone’s link.
• Recovery services. Onchain transactions can’t be reversed. Anyone charging to “recover” stolen funds is running a second scam.

Ecosystem lookalikes: the Elysium example

New launches attract copycats. Around the run-up to Kinetiq’s Elysium network, we saw these domains between 25 and 30 Oct 2026:

Domain	What we found
elysp.com	Says it is not affiliated with Kinetiq
stockium.fun	Says it is not affiliated with Kinetiq
tradium.fun	Says it is not affiliated with Kinetiq
kineitiq.cc	Typosquat of the Kinetiq name
kinetlq.vercel.app	Typosquat (“l” for “i”)

The lesson generalises: get project links from the project’s own docs or X account, not from replies or search ads.

The real Hyperliquid channels

Per Hyperliquid’s support guide:

• Trading app: app.hyperliquid.xyz
• Android app: Google Play listing xyz.hyperliquid.app
• Hyper Foundation: hyperfoundation.org
• X: x.com/HyperliquidX and x.com/HyperFND
• Telegram announcements: t.me/hyperliquid_announcements
• Support: Discord “open-ticket” channel, or the Zendesk form linked from the docs

If you’ve been scammed or hacked

Hyperliquid’s docs recommend:

1. Stop using the compromised address. Treat it as permanently unsafe.
2. Create a new wallet with a trusted wallet provider.
3. Move any remaining funds, across all apps, including anything on the HyperEVM, and including the case where your HyperCore address was converted to a multi-sig you don’t control.
4. Revoke smart-contract permissions at revoke.cash.
5. Clear your browser’s cache and cookies, especially if you suspect malware.
6. Find out how it happened, so it doesn’t repeat. Check the device for malware.

Going forward the docs suggest a hardware wallet (Ledger, Trezor or Keystone) paired with a browser wallet, never downloading unknown apps or PDFs, and assuming most DMs are scams.