Hyperliquid user account hacked: 738,600 USDC stolen

A Hyperliquid user account was unauthorizedly controlled, approximately 738,600 USDC was transferred away, and another 10,287 HYPE was unstaked. The victim account belongs to a certain address, and part of the stolen funds flowed to addresses suspected to be related to Bitget. As of the time of verification, 10,287 HYPE remains in the staked balance and has not yet entered the withdrawal queue.

If the attacker continues to initiate cWithdraw, the related assets will be further transferred after a 7-day waiting period. In two recent similar cases, staked assets were stolen again due to the lack of an emergency pause mechanism that users could trigger, resulting in losses exceeding 1.1 million dollars. Related suggestions include launching a Guardian or Recovery mechanism that users can pre-enable, temporarily pausing withdrawals, transfers, and authorization changes, suspending automatic expiration, and requiring time locks and evidence review for recovery, with records on the blockchain.