Auditor re-engaged after last exploit

Evidence summary #

No public evidence that Hyperliquid engaged Zellic, Cyfrin, or any other firm for a post-JELLY re-audit of HyperCore matching/clearing logic. The JELLY exploit surface is the closed-source L1 binary — not auditable by third parties. Zellic's existing audits cover Bridge2 only. No new audit engagement disclosed post-JELLY. Yellow by absence of evidence; structural L1 closure makes third-party re-audit impossible.

Sources #

Methodology #

Determine whether a reputable auditor performed a re-audit or incident review after the most recent exploit.

See the full factor methodology and distribution across all protocols →