Hyperliquid Earns $2.5M in Daily Fees as $20M Alleged

Laundering Case Raises Concerns

Hyperliquid generated approximately $2.5 million in fees over 24 hours, while blockchain investigator ZachXBT reported tracing more than $20 million in suspected illicit funds through FreedomXMR, a service operating on Hyperliquid Core.

Hyperliquid is facing renewed scrutiny over the use of its permissionless infrastructure after blockchain investigator ZachXBT linked more than $20 million in suspected illicit cryptocurrency inflows to FreedomXMR (FXMR), a service associated with Monero swaps.

The allegations emerged as Hyperliquid recorded a significant lead in daily fees over competing perpetual-futures trading platforms. The developments highlight two contrasting aspects of the crypto market: strong trading activity and the ongoing challenge of preventing illicit actors from using open blockchain infrastructure.

Importantly, the reported activity concerns a service operating on Hyperliquid Core. It does not establish that Hyperliquid itself operated the service or directly participated in laundering funds.

Key Highlights

• Hyperliquid fees: Approximately $2.5 million over 24 hours on October 20, according to AMBCrypto.

• Suspected illicit inflows: More than $20 million traced by ZachXBT to sources linked to cybercrime.

• Reported proportion: More than 87% of FreedomXMR’s incoming volume was reportedly associated with illicit activity.

• Investigation scope: Historical inflows exceeding $10,000 each.

• Potential sources: Ransomware, exploits, malware and social-engineering scams.

• Infrastructure concern: The case raises questions about oversight of services using permissionless blockchain infrastructure.

Hyperliquid Leads Perpetual Trading Platforms in Daily Fees

Hyperliquid generated approximately $2.5 million in fees over the 24-hour period ending October 20, according to figures cited by AMBCrypto.

Lighter ranked second with approximately $198,000, followed by Aster at $123,000 and Jupiter Perps at $102,000. Other platforms in the comparison included GMX, Nado and Extended.

The gap was substantial. Hyperliquid's reported fees were roughly three times the combined total of the other nine platforms listed in the comparison.

The figures illustrate Hyperliquid's position in the on-chain perpetual-futures market, where traders use derivatives to speculate on asset prices without necessarily owning the underlying tokens.

However, fee revenue is not the same as net profit. Operating costs, incentives, protocol distributions and other financial factors must be considered when assessing a platform's overall performance.

ZachXBT Flags More Than $20 Million in Suspected Illicit Funds

Blockchain investigator ZachXBT identified FreedomXMR, also known as FXMR, as a service that appeared on Hyperliquid Core in August 2026.

According to his investigation, a review of historical incoming transactions exceeding $10,000 identified more than $20 million linked to suspected criminal sources. The transactions reportedly involved funds associated with ransomware, cryptocurrency exploits, malware and social-engineering attacks.

The incidents named in reporting included attacks involving DCENT Wallet, Fetch.ai and Axelar, alongside an exploit involving online gambling platform Gamdom and an unnamed ransomware payment.

ZachXBT also stated that more than 87% of FreedomXMR's incoming volume was tied to illicit activity. This figure reflects his reported analysis and should not be interpreted as a judicial finding or a final determination by law enforcement.

The distinction matters because tracing funds to addresses associated with known incidents can provide evidence of potential connections, but it does not independently establish the criminal liability of every person or entity involved.

How FreedomXMR Was Reportedly Connected to Monero

FreedomXMR is associated with Monero (XMR), a cryptocurrency designed to enhance transaction privacy.

According to the investigation, addresses linked to the service's administrators obtained Monero liquidity through KuCoin. ZachXBT reportedly identified more than 3,000 deposits to the exchange associated with the addresses under review.

The reported transaction pattern raises questions about how services convert assets and move value between different cryptocurrency networks and platforms.

Privacy-focused cryptocurrencies can serve legitimate users who value financial confidentiality. At the same time, their features may complicate investigations into the origin and destination of funds when they are used in suspected criminal activity.

The allegations against FreedomXMR concern the specific transaction flows identified by the investigator—not every Monero user, privacy-focused cryptocurrency or service operating on Hyperliquid.

Why Hyperliquid's Permissionless Design Is Under Scrutiny

Hyperliquid Core supports permissionless applications and token infrastructure. This openness can encourage developers to build new services without requiring traditional approval processes for every activity.

However, permissionless access also creates challenges when a service is allegedly used to handle funds linked to hacks or scams.

The FreedomXMR case raises questions about what monitoring, reporting and response mechanisms are appropriate when suspicious activity occurs through applications built on an open blockchain ecosystem.

ZachXBT reportedly shared the on-chain data with the Hyperliquid team. At the time of AMBCrypto's report, a public response from Hyperliquid had not been reported.

The case does not automatically establish that Hyperliquid violated a law or failed a specific legal obligation. Those conclusions would require more information about the entities involved, the applicable rules and any subsequent findings by regulators or law enforcement.

Regulatory Pressure on On-Chain Derivatives Continues

The allegations arrive as crypto derivatives platforms seek greater regulatory clarity and explore access to traditional financial markets.

Hyperliquid Policy Center has also advocated for U.S. regulatory permission for perpetual contracts linked to computing capacity, including resources used in artificial intelligence and data centres.

These contracts could allow businesses exposed to changing computing costs to hedge price fluctuations. But expanding the range of on-chain financial products may also increase scrutiny of market integrity, risk controls and compliance responsibilities.

For platforms seeking wider institutional adoption, maintaining a balance between permissionless innovation and safeguards against illicit activity is likely to remain a central challenge.

What Does This Mean for Hyperliquid?

The reported fee figures demonstrate strong trading activity, but the laundering allegations introduce a separate operational and reputational concern.

If additional investigations substantiate the reported transaction links, the case could intensify discussions about monitoring suspicious flows and responding to services that use permissionless infrastructure.

The ultimate impact will depend on the platform's response, the quality of the underlying evidence and any regulatory or law-enforcement action.

For traders and investors, neither high fee revenue nor allegations involving a third-party service should be treated as a complete measure of a protocol's safety or long-term prospects.

Frequently Asked Questions

Did Hyperliquid itself launder $20 million?

The report does not establish that. ZachXBT linked more than $20 million in suspected illicit funds to FreedomXMR, a service operating on Hyperliquid Core. That is different from proving that Hyperliquid itself laundered the funds.

What is FreedomXMR (FXMR)?

FreedomXMR is a service associated with Monero swaps that reportedly appeared on Hyperliquid Core in August 2026. ZachXBT's investigation raised allegations about the origins of funds entering the service.

How much did Hyperliquid earn in fees?

AMBCrypto reported approximately $2.5 million in fees over 24 hours on October 20, 2026. This is a reported fee figure, not a measure of net profit.

What does the 87% figure mean?

ZachXBT reportedly attributed more than 87% of FreedomXMR's incoming transaction volume to suspected illicit activity. The figure reflects the investigator's analysis and is not, by itself, a final legal finding.

Could this affect Hyperliquid's reputation?

Potentially. Allegations involving services built on a platform's infrastructure can lead to questions about safeguards and oversight. The actual impact will depend on further evidence, the platform's response and any subsequent regulatory developments.

Final Take

Hyperliquid's reported $2.5 million in daily fees underscores its activity in the on-chain derivatives market. At the same time, ZachXBT's allegations involving FreedomXMR highlight the challenges of identifying and responding to potentially illicit activity across permissionless blockchain infrastructure.

The central issue is not simply whether a platform generates substantial fees. It is how an ecosystem can preserve open access while responding responsibly to credible evidence of criminal activity.

The allegations remain distinct from a finding of wrongdoing by Hyperliquid itself, and further responses or investigative findings may clarify the situation.

This article is for educational and informational purposes only. It is not investment advice or a recommendation to buy or sell any cryptocurrency.