Data & Insights: HYPE Highs and DeFi Exploits

Hyper Highs

• Hyperliquid’s native token, HYPE, reached a new all-time high of ~$64 on Sunday, having increased by over 50% in the last two weeks alone.
  • HYPE’s fully diluted valuation (FDV) now stands at over $61 billion, making it the 5th largest crypto token by FDV and one of the best performing tokens in 2026.
  • The platform’s aggregated open interest (OI) reached $9.6 billion last week, a four-month high near a ceiling that has capped it since the October 10th liquidation event.
  • HIP-3 OI has also remained near record highs as it now accounts for ~27% of the platform’s total OI.
• The recent repricing of HYPE was catalyzed by reports that the SEC is leaning toward allowing third-party tokenized stocks without issuer consent.
  • The rumored policy maps directly onto HIP-3's design, a permissionless market-deployment primitive where a builder deploys its own perpetual market without core-protocol approval
  • This strengthens the reframing of what Hyperliquid is, as it competes less on the perps it lists and more as neutral infrastructure that other venues build on, evolving into a settlement and liquidity layer than an outright destination exchange.
  • The cost for a competitor to launch on Hyperliquid rather than against it is therefore lower, which further supports value accrual to HYPE.
• Aside from the obvious bull case, one should not be blindsided to a point where the elephant in the room is not acknowledged. 
  • Over a quarter of the entire Hyperliquid OI, and the bulk of the OI growth, has depended on one counterparty's continued participation: trade.xyz.
  • A regulatory reversal, or a failure in trade.xyz’s own risk management or processing would propagate to roughly a quarter of platform-wide positioning and affect the primary driver of Hyperliquid’s leading narrative.

TCG Frenzy Continues

• Aggregated weekly revenue across tokenized Pokémon TCG marketplaces reached record highs of ~$7.4 million in the first week of May, up ~337% YoY.
  • Courtyard led the record week with a ~46% share, followed by Collector Crypt at 27% and Phygitals at 26%.
  • The milestone reflects the strongest cultural backdrop Pokémon has had in history, with 2026 being the franchise's 30th anniversary and Google Trends showing searches for "Pokémon cards" near all-time highs worldwide, and "Japanese Pokémon card" queries also at record levels.
  • A “Pokémon Day” presentation in February kicked off a year of worldwide 30th-anniversary releases, to be capped off by an all-foil "30th Celebration" set scheduled for a global same-day launch in September 2026.
  • The macro demand backdrop for the hobby is as strong as it has been in the modern era, and the record on-chain marketplace revenue is a direct reflection of that.
• It is worth noting that tokenized marketplaces tend to lag the physical reality of the phenomenon rather than tracking it tick-for-tick.
  • It is plausible that the 30th-anniversary event in a few months' time signals a demand top for Pokémon cards as it attracts new collectors and widespread media attention.
  • With this, crypto capital rotates into the tokenized wrapper of that demand on a delay, chasing both card appreciation and token incentives.
  • That structure makes the record revenues of on-chain marketplaces a second-derivative signal.
  • It will be worth watching whether on-chain TCG marketplace revenue re-accelerates ahead of the upcoming releases of Pokémon’s “30-year celebration” sets.

Total Value Lost

• Total value locked across DeFi categories has continued to decline roughly 14% since mid-April, falling from approximately $172 billion to $148 billion. The inflection point coincides with the KelpDAO bridge exploit on April 18, which has since cast a longer shadow over broader DeFi sentiment than the incident alone might suggest.
  • On April 18, attackers linked to North Korea's Lazarus Group exploited KelpDAO's LayerZero bridge, stealing approximately $292 million (116,500 rsETH) through a compromise of off-chain infrastructure rather than a smart contract vulnerability.
  • The attack manipulated internal RPC nodes and overwhelmed external validators to feed false data into a single-point-of-failure verification setup, tricking the destination chain into releasing funds against a phantom burn on the source chain.
• Lending, the largest DeFi category, has seen the steepest drawdown, declining from approximately $53 billion to $40 billion over the period. Liquid restaking protocols have also seen notable declines.
  • The persistence of the outflows, now over five weeks, points less to a technical re-rating of specific protocols and more to a broader withdrawal of marginal capital. Users who exited following the exploit have largely not returned, consistent with a pattern where high-profile infrastructure failures reduce risk appetite across the sector rather than staying contained to the affected protocol.
• The KelpDAO attack is a useful data point on the evolving threat surface in DeFi. As smart contract security has improved, off-chain infrastructure has become a more exploitable layer, a risk that existing monitoring frameworks are still catching up to.

HYPE-D Up Flows

• Spot HYPE ETFs have accumulated over $80 million in net inflows across just nine trading days, a pace that compares favorably to most altcoin ETF launches to date. 
  • The two products currently on the market, 21Shares' THYP and Bitwise's BHYP, have seen flows accelerate through the period, with May 20th producing the largest single-day inflow of roughly $25 million.
• The ETF demand reflects growing institutional interest in Hyperliquid, specifically, rather than altcoin exposure broadly. Hyperliquid has positioned itself as a leading onchain perpetuals venue, and its potential role in tokenized equity trading has become a meaningful part of its investment narrative.
• Hyperliquid's infrastructure is increasingly cited among discussions around trading tokenized stocks onchain, given its deep liquidity and derivatives-native architecture.
  • The SEC delayed its anticipated innovation exemption for tokenized assets on May 22nd, just days after the ETFs showed strong inflows. The exemption, which would have functioned as a regulatory sandbox for onchain equities, was pulled back after concerns emerged over third-party tokens, specifically digital representations of shares created without the issuing company's knowledge or consent.
  • The delay introduces uncertainty for platforms positioning around tokenized equity use cases, though the SEC's ongoing engagement with market participants suggests the framework remains a question of timing rather than direction.
• Absent from the current ETF issuer lineup are larger asset managers such as BlackRock and Fidelity. Their entry, should it occur, would likely serve as the more significant signal for institutional validation of both the HYPE ETF category and Hyperliquid's broader use case thesis.

Exploit Season

• April 2026 recorded 10 crypto exploits, the second-worst month on record, trailing only May 2021's 16 incidents. The month accounted for approximately $600 million in losses, bringing the cumulative total stolen from crypto protocols to over $6.5 billion. The frequency and scale of attacks in April are contributing to a sentiment environment that was already under pressure.
  • The exploit activity feeds into a negative dynamic for DeFi participation more broadly. As users exit protocols following high-profile incidents, onchain liquidity thins, yields compress, and the risk-adjusted case for participation weakens further. That feedback loop is difficult to reverse in the near term without a sustained period of security stability.
• AI-assisted exploits have drawn attention as a potential emerging threat vector, though the evidence for this being a primary driver remains limited. The majority of incidents continue to trace back to social engineering, compromised private keys, and operational security failures rather than novel attack methods.
  • The more durable concern for participants at every level remains basic opsec: key management, wallet hygiene, and protocol-level due diligence. The attack surface for most exploits has not changed as dramatically as many believe.
• April's figures are partly distorted by the KelpDAO bridge exploit, which alone accounted for a significant portion of the month's total losses and represented a more sophisticated infrastructure-level attack than the typical incident in this dataset. Stripping that out, the underlying exploit count is still elevated relative to most months in the trailing twelve.
• The trajectory warrants monitoring as two of the five highest exploit months on record have now occurred within the past year.