16.28 XMR1 tokens stolen from address on Hyperliquid; attacker offers 90% return within 72 hours or escalates to law enforcement.
Security & Exploits ·
An on-chain message posted to a Ethereum address claims that 16.28 XMR1 tokens were stolen from another address on Hyperliquid on October 2, 2026. The party posting the message offers the current token holder a deal: return 90 percent of the amount (14.65 XMR1, or an equivalent value in USDC or ETH) to a specified recipient within 72 hours, keep the remaining 10 percent as a bounty, and the matter would be considered closed.
The message indicates that if the tokens are not returned within the 72-hour window, further action will be taken. The sender states that the address has already been reported to Hyperliquid, an entity referred to as Unit, SEAL 911, and law enforcement. The offer structure—return most of the stolen amount or face escalation—is a recovery tactic sometimes deployed in token theft scenarios, though compliance depends entirely on the current holder's willingness to engage.
It remains unclear whether the tokens were transferred through legitimate trading activity, exploited via a security vulnerability, or taken through unauthorized access. The identity of the sender behind the posting address is not disclosed, and whether Hyperliquid, the entities named, or law enforcement have independently verified the theft claim is not stated.