stHYPE (Valantis)

The research assessment is adverse. stHYPE is a rebasing liquid staking token for HYPE issued by Valantis Panama Inc. through its StakedHype product line, acquired 2026-01-17. Kinetiq does not issue it. Kinetiq is a separate competitor, a point this review confirmed directly instead of assuming. Valantis’s own terms disclose that the operator “is not registered, qualified, licensed, supervised, or regulated by any governmental authority or financial regulator.” Panama law governs, with mandatory arbitration. The protocol also carries real, disclosed admin risk. A 4-of-6 multisig can pause transfers, minting, burning, and rebasing for up to 14 days, while the contracts use a ProxyAdmin with only a 48-hour upgrade timelock. The protocol has no active bug bounty program, and its own risk documentation says there is no insolvency backstop for user losses. That protection is much weaker than the one offered by direct competitor Kinetiq’s kHYPE, which markets an active $1M bug bounty. Separately, Hyperliquid has not implemented live validator slashing and only jails validators for downtime. This review also could not verify during this session whether Hyperliquid’s validator set has become much less centralized since the widely reported March 2025 episode in which the exchange team intervened. stHYPE bears that system-wide risk regardless of Valantis’s own controls.

Review triggers: events that reopen the verdict
• An active, meaningfully-sized bug bounty program and a defined insolvency-backstop policy are published
• Hyperliquid implements live validator slashing for provable misconduct, not only downtime jailing
• Hyperliquid’s validator-set decentralization since the March 2025 intervention episode is independently verified
• The maximum withdrawal window for non-standard-backed positions is disclosed as a specific figure

Watched nightly: a warning on its venues or files, or a cited document that changes, reopens the memo. The first confirmation is due 2026-11-19.

The research file

Mechanism and issuer correction

Users stake HYPE through WHYPE and receive stHYPE, which adds rewards directly to the holder’s balance through rebasing. They can instead receive wstHYPE, a non-rebasing wrapper whose value per token rises. The issuer is Valantis Panama Inc., which operates the StakedHype product it acquired on 2026-01-17. DefiLlama’s parent-protocol field confirms the issuer, correcting an initial assumption that Kinetiq issues the token. Kinetiq issues kHYPE, a separate competing token, and is not the subject of this memo. Yield comes from native HYPE validator staking rewards and from non-standard modules, including HIP-3 permissioned markets and USDe quote-asset accounts. The protocol’s own risk documentation says these modules add more ways to incur slashing beyond standard validator penalties.

Legal structure

Valantis Panama Inc. operates under Panama law. Disputes require mandatory conciliation, followed by arbitration before three arbitrators. The Terms of Service state plainly that the operator “is not registered, qualified, licensed, supervised, or regulated by any governmental authority or financial regulator.” They also say it provides no financial, investment, securities, fiduciary, custodial, or brokerage services. This unregulated offshore structure is common in the sector, but it means no independent regulator supports the operator’s claim that the token is “not a security.”

Disclosed admin and control risk

Valantis’s own Roles and Controls Registry discloses a 4-of-6 signer multisig, rotated 2026-04-07, with power to pause transfers, minting, burning, and rebasing for up to 14 days by default. The contracts use a ProxyAdmin with only a 48-hour upgrade timelock. An update on 2026-04-10 removed an earlier admin power to blacklist individual addresses or freeze their transfers. That change reduced risk, but the pause power and short upgrade timelock remain. Incident response depends on people, not automation. Off-chain alerts require an operator to confirm any pause action manually, and public documentation expressly withholds the operators’ identities.

No bug bounty, no backstop, and no live slashing

Valantis’s own risk page confirms that it has no active public bug bounty program and no guaranteed insolvency backstop for user losses. This is a real gap compared with Kinetiq’s competing kHYPE, which markets an active $1M bug bounty as the largest on Hyperliquid. Separately, Hyperliquid’s own staking documentation confirms that the network has not yet implemented validator slashing for provable malicious acts such as double-signing. Today, it only jails validators for poor uptime. stHYPE’s advertised yield therefore has no protocol-enforced penalty behind it for validator misconduct. That gives it a weaker risk profile than peer liquid staking tokens on chains with live slashing.

Redemption, track record, and comparison

Users can exit through the native Hyperliquid unstaking queue, which takes 7 days and allows no more than 5 pending withdrawals per address. They can also use an instant-unstake path through a protocol liquidity buffer or pay for an instant withdrawal through secondary-market liquidity. Positions backed by non-standard assets may take longer than the standard queue, up to a maximum window that has not been disclosed. Since February 2025, stHYPE has obtained six product-specific audits from five different firms, showing real and continued spending on security, though the published index did not provide an extractable summary of finding severity. During this session, the review could not verify whether Hyperliquid has resolved concerns about validator-set centralization raised publicly after a March 2025 episode in which the exchange’s own team intervened on a contested position. stHYPE inherits this system-wide dependence on the underlying chain regardless of Valantis’s contract controls.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• Valantis documentation — StakedHype roles and controls registry · primary · accessed 2026-08-19
  Supports: 4-of-6 multisig pause authority, 48-hour upgrade timelock, removed address-blacklist capability
• Valantis documentation — StakedHype transparency and risks · primary · accessed 2026-08-19
  Supports: non-standard module slashing surface, no insolvency backstop disclosure
• Valantis — terms of service · primary · accessed 2026-08-19
  Supports: Valantis Panama Inc entity, unregulated posture disclaimer, Panama governing law and arbitration
• Hyperliquid documentation — HyperCore staking · primary · accessed 2026-08-19
  Supports: no live slashing implemented, jailing versus slashing distinction, 7-day unstaking queue
• DefiLlama — stHYPE protocol data · secondary · accessed 2026-08-19
  Supports: issuer parent-protocol confirmation, current TVL
• Kinetiq — kHYPE product and bug bounty comparison · secondary · accessed 2026-08-19
  Supports: competing kHYPE product, active $1M bug bounty comparison point

Inherited controls

The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The layer with the most administrative power sets the position’s effective control; that describes control, not quality or suitability.