Hyperliquid / HyperEVM Wallet Drained? How to Trace HYPE & On-Chain Assets

HyperEVM vs HyperCore

HyperEVM is Hyperliquid's EVM layer (chain ID 999) — on-chain transfers use the same address format as Ethereum and appear on HyperEVMScan. HyperCore perps and internal HL ledger trades are separate and not indexed by standard EVM explorers yet.

What to document

• Your 0x wallet address on HyperEVM (not your HL login email).
• Outbound transaction hashes from the drain window on hyperevmscan.io.
• Whether assets bridged in from Ethereum or another chain before the drain.
• Token types: native HYPE, ERC-20 equivalents, or NFTs on HyperEVM.

Trace with Tracefunds

• $5 single_tx — decode one suspicious HyperEVM transaction hash.
• $20 incident — full outbound fund-flow graph, labeled destinations, verification checklist.
• Select HyperEVM on tracefunds.app/analyze?chain=hyperevm — same EVM pipeline as Ethereum.

Honest limits

Funds that never touch HyperEVM on-chain (pure HyperCore ledger moves) cannot be traced with EVM tools alone. Bridge hops may continue on Ethereum or another network — document bridge contract txs separately.