★ Low-threshold multisig vs TVL
Hyperliquid's assessment for RD-F-028 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
At $4.73B TVL, bridge initially operated with 3-of-4 hot validators (all Hyperliquid Labs). Expanded to ~21+ validators by April 2025 but Hyper Foundation holds >50% of staked HYPE through its 5 validators. Proxy admin upgrade threshold undisclosed. Below peer norm for bridge-class at this TVL scale.
Sources #
- URLHYPERLIQUID Critical Infrastructure Risk Assessment February 2026mefai Feb 2026 risk assessmentretrieved 2026-04-28
- Bridge in Arbitrum is still a 3/4 multisig - validator analysisSantisa X post Jan 2025retrieved 2026-04-28
Methodology #
Determine whether the multisig threshold is abnormally low relative to TVL peer cohort (e.g., 2-of-3 for a protocol with >$100M TVL where peer norm is 5-of-8).
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol hyperliquid factor RD-F-028 score yellow collected_at 2026-04-28 13:58:49