Can a vault steal your money? Custody on Hyperliquid, explained
Quick disclosure: I run Altcopy and my Index allocates to native vaults — full version in the map post. Now the scariest question, answered plainly.
When you deposit into a "vault," the first thing worth knowing isn't the yield. It's: can whoever runs it take your money and vanish? On Hyperliquid, for most vaults, the answer is structurally no — the single biggest difference from the exchanges most people came from.
Custodial vs non-custodial, in one breath. On a centralized exchange, you hand over your coins and get an IOU; they hold the keys. If they freeze withdrawals, get hacked, or lose your funds, you're a creditor in a bankruptcy. A Hyperliquid vault is non-custodial: your money sits in a smart contract on-chain, and who can touch it is written into the chain, not a company's terms of service.
Native vaults (HyperCore). Funds live in the vault. The leader can trade them, but cannot withdraw them to their own wallet. You request your own withdrawal and get it after a one-day wait. The leader's power is "place trades," not "move money out."
HyperEVM vaults (Veda, Upshift, Hyperbeat). These add a Merkle allowlist: the manager gets a key that only opens pre-approved doors. Even if it's stolen, the thief can't send funds to a random wallet. Upshift says it flatly — neither it nor the curator can move user funds to an outside account.
Picture a safe with a glass front and a robot arm: you watch what's inside, the manager works the arm, but the arm only reaches the shelves the chain allows. It physically can't hand the cash out the door. A CEX is handing your cash to a cashier and trusting the building.
What's left to worry about? Non-custody removes theft. It does not remove: smart-contract risk (ask if it's audited), strategy risk (they simply trade badly), withdrawal timing (queues or exit fees), and bridge/oracle risk on the EVM side. The honest headline: "they ran off with my money" is largely engineered out here. What remains is "they lost my money" — a different risk, and what the fees post and the native-vaults post help you read.
Not financial advice; I'm biased; check everything.