Author：Whistleblower in the cryptocurrency industry

HypurrFi alerted users against interacting with its website and lending platform while it investigates a potential domain hijacking. 

"Do NOT USE THE HYPURR .FI domain, it is compromised," HypurrFi founder androolloyd posted to X on Friday. 

The team noted there is no current risk to user funds and that its social media channels remain in its control. 

"Do not interact with the app until further notice from the team," HypurrFi said. 

HypurrFi is a DeFi lending and borrowing protocol built on HyperEVM, Hyperliquid’s EVM-compatible high-performance blockchain for perps trading.

The platform has about $30 million in total value locked, according to DefiLlama.

Domain hijackings are a relatively common issue in the crypto sector, and particularly pernicious because they can exploit even the most well-audited smart contracts and secure onchain protocols.

Attackers will often take over a project’s frontend website to deploy wallet drainers or inject other malicious code prompts. Last month, for instance, attackers compromised the BONKfun domain.