Trade.xyz has restored its GitBook documentation after identifying unauthorized activity on Nov. 2, while warning users to avoid links within the pages as its investigation continues.
Summary
- Trade.xyz said its GitBook documentation was restored to its previous state by 9:15 a.m. ET.
- Users were advised to avoid documentation links despite the restoration while the investigation remained ongoing.
- The notice did not disclose a loss figure or identify how the unauthorized access occurred.
- The incident follows Trade.xyz’s agreement with ICE to develop a separate, regulated U.S. perpetual futures market.
Trade.xyz said in its Nov. 2 announcement that unauthorized activity had affected its GitBook documentation earlier that morning. The team restored the previous version of the material, but its accompanying safety notice continued to cover links within the documentation.
“As a precaution, we advise users not to click on any links within the documentation while our investigation remains ongoing,” the company wrote.
The team said it was actively reviewing the incident and would provide further updates as appropriate. Its announcement identified the documentation as the affected service without describing an intrusion into Hyperliquid’s underlying trading infrastructure.
Trade.xyz restores documentation while investigating access
The restoration time of 9:15 a.m. ET establishes when the company said the previous documentation was back in place. The post did not give an exact starting time for the unauthorized activity or establish how long the affected material had been accessible.
Its warning applied to any links within the documentation, without identifying particular pages, destination addresses, or altered instructions. The company did not publish a list of malicious links in the supplied notice.
The statement did not identify a compromised administrator account, stolen credentials, or a vulnerability in GitBook. It described unauthorized activity affecting its own documentation, without attributing the incident to a failure across GitBook’s platform.
No user loss amount, affected wallet count, or attacker address appeared in the announcement. The team’s stated next step was to continue reviewing the incident and release further information.
Recent DeFi website attacks involved wallet-draining pages
The warning follows a separate series of website incidents on Oct. 31, when Blockaid identified Flap, Kintsu and 10 other projects in alerts concerning compromised frontends.
As crypto.news previously reported, the 12 affected DeFi sites included pages that Blockaid said were actively serving the Step Drainer toolkit. Its expanded list named StonkFun, Pickle Finance, Echelon, Origami Finance and FluxBeam, alongside five other projects.
Flap confirmed that a DNS hijack had redirected visitors from its official domain to an unauthorized website. The team asked users not to visit the site, connect wallets, or sign transactions until further notice.
StonkFun subsequently said it had restored its website after taking it offline and moving its infrastructure. At the time of its update, the project said it was unaware of affected users.
Blockaid’s alerts did not establish an aggregate loss figure or confirmed victim count. Trade.xyz’s announcement did not name Step Drainer or connect its GitBook incident to those attacks.
ICE agreement proposes a separate U.S. trading business
Four days before the documentation notice, Trade.xyz announced an agreement with ICE, the owner of the New York Stock Exchange, to bring Hyperliquid-based perpetual futures into a regulated U.S. market.
Trade.xyz said its existing markets had processed more than $650 billion in cumulative volume in just over a year. The platform operates perpetual markets referencing traditional financial assets on Hyperliquid.
In its Oct. 29 announcement, ICE said the proposed business would require regulatory approvals, including permission to support leveraged trading. Planned markets would cover crypto, equities, commodities, foreign exchange and other assets.
ICE would exclusively operate the regulated markets and make a strategic investment in Trade.xyz. The planned retail business would have a dedicated market and clearing structure, operating separately from ICE’s institutional futures franchise.
For U.S. customers, the proposed access route would run through participating futures commission merchants after identity and anti-money laundering checks. The agreement itself did not open Trade.xyz’s existing offshore markets to American traders.
Trade.xyz recently expanded its stock-index contracts
The platform’s latest product launches include NIFTY 50 perpetual futures, introduced on Oct. 27 with leverage of up to 20 times and trading throughout the week, including weekends and public holidays.
Trade.xyz said the contract references the Indian benchmark’s native rupee index level without applying foreign-exchange conversion to its pricing. Profits and losses are settled in USDC.
The contract provides exposure to movements in the index without giving traders ownership of its constituent companies. Unlike dated index futures, it has no scheduled expiration, although traders must maintain the margin required to keep their positions open.
