HypernativeLabs

An attempted exploit on @ParallelMoney’s vaults was stopped automatically today. Hypernative detected the pattern and paused the relevant contracts within seconds. No funds lost. This comes after a brutal stretch for onchain security. April alone saw major incidents at Drift and KelpDAO, part of a wider surge in successful exploits. Attackers are coming prepared. The difference, increasingly, is whether the protocols are too. Credit to the Parallel team for having the monitoring and automated response in place before it was needed. That’s the work that doesn’t make headlines until it does.

A co-founder of OpenZeppelin recently said publicly that he now considers DeFi not safe at all, a striking position from one of the most established names in Web3 code. In our latest webinar, Hypernative Product Manager Elad Feldman picked up the thread: AI now generates enormous volumes of code, and the traditional model of auditing every line for exploitability does not scale to that volume. The conclusion is to shift focus from proving the code is flawless to ensuring the operational system around it behaves the way it should. Watch the full session for what that shift looks like in practice: buff.ly/lqqkvfR

.@lifiprotocol is the universal liquidity layer, orchestrating swaps across 60+ chains for more than 1,000 integration partners. With that scale comes a token sprawl problem: hundreds of thousands of tokens flowing through the platform, and new ones added continuously. Every one of them needs a security assessment before it reaches an end user. LI.FI has selected Hypernative's Token Screening to evaluate every token in its database with a clear approve-or-deny recommendation, giving LI.FI's integrators actionable risk intelligence alongside standard token metadata. Read the full announcement: buff.ly/yQt7YVr

What if you could see the attack before it executes? At a @ColliderVC panel in Tel Aviv, Adi Zepkowitz, VP of EMEA Sales at Hypernative, laid out how pre-execution transaction simulation shifts the dynamic in smart contract exploits. When every transaction is forced through a simulation layer before it lands onchain, defenders have time to analyze intent, not just observe damage. The attacker loses the speed advantage that makes most exploits viable. Mistakes become detectable. It is not a complete solution, but it changes where the leverage sits in a well-designed security architecture. Pre-transaction security is just one of the tools leading teams use to stay ahead of threats. We break down the whole toolkit in our The Ultimate Guide to Web3 Security, along with a playbook for how to use them: from real-time monitoring, automated response, and operational controls to compliance, risk, and treasury safeguards. Download your free copy here: buff.ly/g35iTVN

Latin America's onchain activity is accelerating fast. Security needs to move at the same speed. See you in Rio.

Huione launched in 2021. It was laundering billions by August of that year. A blockchain analytics firm publicly exposed the operation in July 2024. Enforcement didn't arrive until May 2025. By then, the infrastructure had migrated. Across the entire four-year window, no funds were prevented from leaving victim accounts. Omri David, Senior Product Manager for Fraud Prevention at Hypernative, used the timeline during our recent onchain fraud prevention webinar to illustrate the structural limit of investigation-first tooling. Faster investigation produces more reports. It does not produce fewer victims. Watch the full session on demand: buff.ly/JGS3583

Compliance tools flag addresses after someone reports them. By then, the operation has already moved. Gal Sagie on why fraud detection needs to happen before funds settle. The Future of Crypto Compliance with @HenriArslanian. Exchanges, wallets, payment providers and their users face off against the industrial fraud complex every single day. In The Ultimate Guide to Web3 Security, we break down the controls that user-facing platforms need across the full transaction lifecycle: from pre-signing transaction clarity to real-time counterparty screening and automated response. Download your free copy here: buff.ly/g35iTVN

Tokenization is no longer a pilot. Banks and asset managers are already issuing and servicing tokenized bonds, treasuries, money market funds, and private shares, and most of their existing risk controls were not built for what happens after a transaction is signed. In May, a compromised signer minted unbacked tokens against zero collateral on a tokenized asset issuer's own minting contract. Every signature was valid. Both of its stablecoins broke their peg. On July 23, Adi Zepkowitz (VP EMEA), Guillermo Muñoz (Director, Security Engineering), and Yaniv Fogel (Head of Professional Services) walk through what actually closes that gap, from the pre-signature check through monitoring and incident response. Worth your time if you're anywhere near RWA issuance or custody. buff.ly/r0wi3ZQ

When Telegram shut down Huione's channels in May 2025, scam transaction volume didn't drop. It migrated within days to a related platform called Tudou Guarantee, with the same controlling parties. Alex Rabke, VP Americas at Hypernative, used the Huione case to make a structural point during our recent webinar on the onchain fraud prevention blueprint. The platform was a $27B criminal enterprise, larger than Silk Road, but the takedown only affected the venue. The infrastructure built to support thousands of fraud vendors, money laundering services, and scam-site-as-a-service kits kept operating. This is just one part of a deep dive into fraud prevention put out recently by our security team. Watch the full session on demand: buff.ly/7vc8mvn

Most postmortems describe an attack as a single moment. In our recent webinar, Hypernative Product Manager Elad Feldman argued that the biggest 2026 attacks are better understood across three layers: 1️⃣ The staging signals that appear days or weeks before execution 2️⃣ The response that should trigger while the attack is underway 3️⃣ The policy check at the moment of execution. The April losses happened where all three were missing. No one watched the early signals, no one had a response configured, and nothing evaluated the transaction itself beyond whether it was authorized. Watch the session for how each layer maps to a real attack: buff.ly/lqqkvfR

On a blockchain, there's no undo button. Shawn Lim, Hypernative's VP of APAC, sits down with @mpost_io to discuss what that means for institutions moving onchain, and why security has to happen before a transaction executes, not after.

Welcome to Taler Finance | The curated vault era is here, but infrastructure still lags behind traditional asset management. Taler closes that gap. We build and scale tailored vault infrastructure for institutions and ecosystems. A thread 🧵

Why compromise one target when you can compromise the infrastructure thousands of targets share? @GalSagie on the attacker economics driving today's biggest losses. The Future of Crypto Compliance with @HenriArslanian. Whether you are building crypto infra or depend on it to manage or move funds, the right security posture can go a long way. We break this down in The Ultimate Guide to Web3 Security. Years of frontline experience from 300+ crypto-native and institutional projects distilled into an actionable security playbook. The wins. The close calls. The patterns. Download your free copy here: buff.ly/g35iTVN

Can you exit a position on a compromised DeFi protocol before the damage reaches you? At a @ColliderVC panel in Tel Aviv, Tomer Menuchin, who leads growth and strategy at @kpk_io, described how the firm exited a Resolv position in the same block as the exploit. kpk monitors every onchain position with automations covering each collateral allocation across Morpho, Euler, and Gearbox. When the Hypernative alert fired, the exit was automatic. "I don't think I've ever seen something like that," Tomer said. "I was stunned." Every quarter, kpk's company-wide meeting opens with a single KPI: never lose funds. That is not a slogan. It is an operational standard. Automated response is just one of the tools leading teams use to stay ahead of threats. We break down the whole security toolkit in our The Ultimate Guide to Web3 Security, along with a playbook for how to use them: from real-time monitoring, pre-transaction security, and operational controls to compliance, risk, and treasury safeguards. Download your free copy here: buff.ly/g35iTVN

Regulatory clarity moves faster when security teams are in the room. We're joining The Digital Chamber to work directly with policymakers and industry peers shaping the rules for onchain finance.

The smart contracts are getting better. The ops around them aren't. @gbvpzffd2r, CTO of Hypernative, said it plainly on The Cap Room: the industry has matured on the code side with better audits, more experienced developers, more secure contract design. The gap now is in operations. AWS configurations, admin access controls, key management, jump servers: the Web 2 hygiene that enterprise security teams treat as table stakes. Hypernative came to Web3 from Web2, and that background shaped what the company built. A classic CSO walking into a DeFi team today would find a lot that looks foreign. That gap is where attackers are operating now. Learn more at buff.ly/Yb0hQ0u

Proud to see our client @Predictstreet on the pitch at the World Cup. Behind the signage is @ADIChain_, the first institutional Layer 2 for stablecoins and real-world assets in the MENA region, now running Hypernative's real-time monitoring and automated response across its ecosystem. Institutional adoption starts with security that operates at the speed of the threat. Glad to be the layer that makes it possible. buff.ly/V1SVmo7

This is what security at protocol scale looks like: coverage that expands automatically as new vaults launch, and a response path that does not depend on someone being awake, online, and fast enough. Great work by the Accountable team building the wiring from detection to action!

MiCA. DORA. Evolving regulator expectations across major markets. They're all converging on the same baseline: continuous monitoring, real-time risk controls, demonstrable audit trails. Institutions building this into their infrastructure now won't have to rebuild from scratch when the bar rises. Our take, in the @ZodiaCustody ecosystem series → buff.ly/6Rb0LeM

Fast finality matters. But for trading, how transactions are ordered, shared, and protected before execution matters just as much. Sei Giga is taking on that full stack. Worth reading.

April 2026 was one of the worst months in Web3 security on record. In our recent webinar, Hypernative Product Manager Elad Feldman set the table: over $645M lost across more than 60 incidents, and not from fringe projects but from established names with long operating histories. Two of the largest, both over $200M, carried North Korean attributes, pointing to well-resourced operations running over months. Elad's point for asset managers and institutions in the audience: every logo on the slide was a DeFi-native project, but the price volatility those attacks set off pushed the real cost well past the headline figure, onto everyone with exposure. Watch the full session: buff.ly/lqqkvfR