HypurrFi alerted users against interacting with its website and lending platform while it investigates a potential domain hijacking.
"Do NOT USE THE HYPURR .FI domain, it is compromised," HypurrFi founder androolloyd posted to X on Friday.
The team noted there is no current risk to user funds and that its social media channels remain in its control.
"Do not interact with the app until further notice from the team," HypurrFi said.
HypurrFi is a DeFi lending and borrowing protocol built on HyperEVM, Hyperliquid’s EVM-compatible high-performance blockchain for perps trading.
The platform has about $30 million in total value locked, according to DefiLlama.
Domain hijackings are a relatively common issue in the crypto sector, and particularly pernicious because they can exploit even the most well-audited smart contracts and secure onchain protocols.
Attackers will often take over a project’s frontend website to deploy wallet drainers or inject other malicious code prompts. Last month, for instance, attackers compromised the BONKfun domain.
Disclaimer: The Block is an independent media outlet that delivers news, research, and data. As of November 2023, Foresight Ventures is a majority investor of The Block. Foresight Ventures invests in other companies in the crypto space. Crypto exchange Bitget is an anchor LP for Foresight Ventures. The Block continues to operate independently to deliver objective, impactful, and timely information about the crypto industry. Here are our current financial disclosures.
© 2026 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.