Hyperliquid / HyperEVM: who orders transactions?

Who controls it

Transaction ordering

Permissioned validator set: 21 validators as of March 2026 (16 at launch)

Escape hatch

None independent of the validator set. The same validators operate the native bridge, so bridge security and chain security rest on one assumption.

Upgrade authority

Centralised governance. The core code is not open source.

Halts and outages

Finality is fast by design, and a small permissioned validator set is the price of that speed.

Ketju assessment

Ketju does not approve Hyperliquid / HyperEVM: the same 21 permissioned validators run the chain and its native bridge, so bridge risk and chain risk are one risk. A client gets no diversification between the two. The core code is closed source. Hyperliquid is impressive engineering and the fastest-growing venue in Ketju’s survey. If enough validators were compromised or coerced, assets bridged in would be at risk with no separate recourse. Since April 2026, Ketju treats the bridge as the security model for any wrapped asset. This verdict also leaves kinetiq-khype (~$0.78B) and hyperlend (~$0.43B) unapproved.

Review triggers

• None: Ketju does not approve this chain.

Each trigger names a fact anyone can observe. If one occurs, Ketju will review the assessment again. None is a forecast.

Questions before use

1. Does the client’s thesis require censorship resistance, or primarily low-cost settlement?
2. Can the client withdraw without help from the party that normally orders transactions?
3. Who can upgrade bridges or contracts, and what delay applies?
4. Does the asset introduce an issuer weaker than the chain grade?
5. What evidence will show a halt, censorship event, or governance change?