stHYPE (Valantis)

Rejected venues wait the longest for re-review; a rejection has to earn another look before the scheduled date.

REJECTED. stHYPE is a rebasing liquid staking token for HYPE issued by Valantis Panama Inc. (via its StakedHype product line, acquired 2026-01-17), not by Kinetiq — a distinct, competing issuer this review confirms directly rather than assumes. Valantis’s own terms disclose the operator ”is not registered, qualified, licensed, supervised, or regulated by any governmental authority or financial regulator,” under Panama law with mandatory arbitration. The protocol carries real, disclosed admin risk: a 4-of-6 multisig can pause transfers, minting, burning, and rebasing for up to 14 days, and contracts sit behind a ProxyAdmin with only a 48-hour upgrade timelock. There is no active bug bounty program and the protocol’s own risk documentation states there is no insolvency backstop for user losses — a materially weaker safety net than its direct competitor Kinetiq’s kHYPE, which markets an active $1M bug bounty. Separately, Hyperliquid itself has not yet implemented live validator slashing (only jailing for downtime), and this review could not verify this session whether Hyperliquid’s validator set has meaningfully decentralized since a widely-reported March 2025 episode of team-controlled intervention on the exchange — a systemic risk stHYPE inherits regardless of Valantis’s own controls.

Kill criteria: the events that revoke this verdict
• An active, meaningfully-sized bug bounty program and a defined insolvency-backstop policy are published
• Hyperliquid implements live validator slashing for provable misconduct, not only downtime jailing
• Hyperliquid’s validator-set decentralization since the March 2025 intervention episode is independently verified
• The maximum withdrawal window for non-standard-backed positions is disclosed as a specific figure

The research file

Mechanism and issuer correction

Users stake HYPE (via WHYPE) and receive stHYPE, which accrues rewards directly in balance through rebasing, or wstHYPE, a non-rebasing wrapper whose value per token grows instead. The issuer is Valantis Panama Inc., operating the StakedHype product it acquired on 2026-01-17 — confirmed directly from DefiLlama’s parent-protocol field, correcting an initial assumption that Kinetiq issues this token. Kinetiq issues a separate, competing token, kHYPE, and is not the subject of this memo. Yield comes from native HYPE validator staking rewards, plus flows from non-standard modules (HIP-3 permissioned markets and USDe quote-asset accounts) that the protocol’s own risk documentation states introduce additional slashing surface beyond standard validator penalties.

Legal structure

Valantis Panama Inc. operates under Panama law, with disputes resolved through mandatory conciliation followed by arbitration before three arbitrators. The Terms of Service state plainly that the operator ”is not registered, qualified, licensed, supervised, or regulated by any governmental authority or financial regulator,” and that it provides no financial, investment, securities, fiduciary, custodial, or brokerage services. This is a standard unregulated-offshore-entity posture for the sector, but it means the ”not a security” self-characterization carries no independent regulatory backing.

Disclosed admin and control risk

Valantis’s own Roles and Controls Registry discloses a 4-of-6 signer multisig (rotated 2026-04-07) holding pause authority that can halt transfers, minting, burning, and rebasing for up to 14 days by default, with contracts sitting behind a ProxyAdmin carrying only a 48-hour upgrade timelock. A 2026-04-10 update removed a prior admin capability to blacklist or freeze individual addresses from transferring — a genuine de-risking change worth crediting — but the pause and short-timelock upgrade authority remain. Incident response is manual rather than automated: off-chain alerts require an operator to manually confirm any pause action, and operator identities are explicitly withheld from public documentation.

No bug bounty, no backstop, and no live slashing

Valantis’s own risk page confirms there is currently no active public bug bounty program and no guaranteed insolvency backstop for user losses — a real gap against Kinetiq’s competing kHYPE, which markets an active $1M bug bounty described as the largest on Hyperliquid. Separately, Hyperliquid’s own staking documentation confirms validator slashing for provable malicious acts like double-signing is not yet implemented on the network — only jailing for poor uptime exists today — meaning stHYPE’s advertised yield is not currently underwritten by any protocol-enforced penalty on validator misconduct, a meaningfully different and weaker risk profile than peer liquid staking tokens on chains with live slashing.

Redemption, track record, and comparison

Exit runs through the native Hyperliquid unstaking queue (7 days, capped at 5 pending withdrawals per address), an instant-unstake path via a protocol liquidity buffer, or fee-based instant withdrawal through secondary-market liquidity; non-standard-backed positions may extend beyond the standard queue up to an undisclosed maximum window. stHYPE has accumulated six product-specific audits from five different firms since February 2025, a real and ongoing security investment, though no findings-severity summary was extractable from the published index. This review could not verify this session whether concerns about Hyperliquid’s validator-set centralization, raised publicly around a March 2025 episode involving the exchange’s own team intervening on a contested position, have been resolved — a systemic dependency stHYPE inherits from the underlying chain regardless of Valantis’s own contract controls.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• Valantis documentation — StakedHype roles and controls registry · primary · accessed 2026-08-19
  Supports: 4-of-6 multisig pause authority, 48-hour upgrade timelock, removed address-blacklist capability
• Valantis documentation — StakedHype transparency and risks · primary · accessed 2026-08-19
  Supports: non-standard module slashing surface, no insolvency backstop disclosure
• Valantis — terms of service · primary · accessed 2026-08-19
  Supports: Valantis Panama Inc entity, unregulated posture disclaimer, Panama governing law and arbitration
• Hyperliquid documentation — HyperCore staking · primary · accessed 2026-08-19
  Supports: no live slashing implemented, jailing versus slashing distinction, 7-day unstaking queue
• DefiLlama — stHYPE protocol data · secondary · accessed 2026-08-19
  Supports: issuer parent-protocol confirmation, current TVL
• Kinetiq — kHYPE product and bug bounty comparison · secondary · accessed 2026-08-19
  Supports: competing kHYPE product, active $1M bug bounty comparison point

Inherited controls

The verdict above grades the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The least safe layer sets the position’s grade, and the position table names which one that is.