A Hyperliquid user account was taken over without authorization, resulting in the transfer of about 738,600 USDC and the unstaking of 10,287 HYPE. Some of the stolen funds flowed to an address suspected of being linked to Bitget. The HYPE remained in the staking balance at the time of review and had not entered the withdrawal queue. If the attacker submits a cWithdraw request, the assets could move after a seven-day waiting period. Two similar recent incidents reportedly resulted in more than 1.1 million U in additional losses because users lacked an emergency mechanism to pause withdrawals. Proposed safeguards include an opt-in Guardian or Recovery mechanism that temporarily suspends withdrawals, transfers and authorization changes, with resumption subject to a time lock, evidence review and on-chain records.