Medium risk

valantis.xyz HyperEVM

Risk Index

35/ 100

Scanned 2 hours ago · 10 of 47 contracts checked · https://www.valantis.xyz/

This dApp appears to be a decentralized finance platform involving liquidity pools, staking, and token swapping.

The report is marked Medium risk primarily because several contracts, including the one labeled 0x442b…2732 and others, have unverified code, which raises uncertainty about their exact behavior. Additionally, the contract 0x442b…2732 contains owner-controlled functions such as pause, which can affect contract operations. Several checks could not be performed, including honeypot simulation and buy/sell tax analysis, due to the chain not being supported by the scanning tool. Ownership details are incomplete for some contracts lacking an owner() function, and role-based access controls were not fully analyzed. The scope of the report covers only the site's own contracts, excluding third-party tokens, bridges, and widgets.

AIAI explanation, may be wrong

Red flags 2

Sorted by weight

Contract code is not verified

The source code of unnamed contract (0x442b…2732), unnamed contract (0xbf74…b526), unnamed contract (0x95e8…88f3) and 1 more is not published on the explorer: nobody can check what the contract does.
+25
Owner-controlled functions in the code

The code has functions that let the owner change the rules: pausing (unnamed contract (0x442b…2732)). They are not harmful by themselves, but dangerous in the hands of a single wallet.
- Unnamed contract0x442b…2732
+10

Checklist

Code verifiedNo
Owner is a multisig or timelockOne wallet holds the keys to 1 of 10 contracts: unnamed contract (0x442b…2732). 3 are held by a multisig or timelock.No
Withdrawals not controlled by one walletUnknown
Deployer is not a fresh walletYes
Deployer has no abandoned projectsUnknown
Contracts older than 7 daysYes
Not a honeypotUnknown

Contracts 10 of 47

The contracts the site uses most

Name	Role	Chain	Address	Verified	Owner	Age
Unnamed contract This contract likely has administrative control features such as pausing operations, but its exact purpose is unclear due to lack of verification and details. AI	—	HyperEVM	0x442b…2732	No	Wallet	13mo
STEXAMM STEXAMM appears to be a vault or liquidity pool contract managing deposits, withdrawals, and fee proposals, with functions for swapping and fee management. AI	Vault	HyperEVM	0x3969…834d	Yes	Multisig	18mo
Unnamed contract This contract likely has pausing capabilities and is associated with a vault, but its exact functionality is unknown due to lack of verification. AI	—	HyperEVM	0xbf74…b526	No	Multisig	14mo
Unnamed contract This contract's purpose is unclear; it lacks an owner function and is referenced as a lens address in the site code. AI	—	HyperEVM	0x95e8…88f3	No	No owner()	15mo
Unnamed contract Similar to the previous lens contract, this contract's purpose is unclear and it lacks an owner function. AI	—	HyperEVM	0xD571…E492	No	No owner()	13mo
Overseer via proxy The Overseer contract is a proxy for a staking module with roles for minting, burning, pausing, and managing fees, indicating it manages staking and token supply. AI	Staking	HyperEVM	0xB96f…eeAE	Yes	Multisig	19mo
PendleMarketV3 PendleMarketV3 is a pool contract handling token swaps, minting, burning, and reward distribution, likely facilitating market operations for a specific asset. AI	Pool	HyperEVM	0x4330…2759	Yes	No owner()	13mo
SovereignPool SovereignPool manages liquidity deposits, swaps, fee claims, and oracle settings, acting as a liquidity pool with fee and oracle management. AI	Pool	HyperEVM	0x5365…3B7D	Yes	No owner()	18mo
SovereignPool Another instance of SovereignPool with similar liquidity pool and fee management functions. AI	Pool	HyperEVM	0x88B2…Dd60	Yes	No owner()	14mo
SovereignPool A third instance of SovereignPool, serving the same liquidity pool and fee management role. AI	Pool	HyperEVM	0xB91b…a9fC	Yes	No owner()	13mo

The site references 37 more contracts that no other team is known to own. Aegis checks the 10 the site relies on most; the rest were not checked and do not count in the Risk Index.

Other teams' contracts this site uses 10

Tokens and services built by other teams. Not checked and not part of the Risk Index

Contract	Chain	Address	Why it belongs to another team
stHYPE token	HyperEVM	0xfFaa…6cC1	A token deployed by 0x20E9…328c, a busy wallet (256 transactions) with no link to the wallets behind this site's own contracts
kHYPE token	HyperEVM	0xfD73…296D	Also used by 4 other sites (app.hyperbeat.org, app.hyperlend.finance, app.kittenswap.finance), and its deployer has no link to this site's own contracts
EVM token	HyperEVM	0x6E0F…7b71	A token deployed by 0x9Bc2…34B8, a busy wallet (1,803 transactions) with no link to the wallets behind this site's own contracts
KEI token	HyperEVM	0xB5fE…620C	A token deployed by 0x0001…C326, a busy wallet (1,086 transactions) with no link to the wallets behind this site's own contracts
CATBAL token	HyperEVM	0x1173…fd49	A token deployed by 0x48A4…a821, a busy wallet (559 transactions) with no link to the wallets behind this site's own contracts
VEGAS token	HyperEVM	0xB091…46a6	A token deployed by 0xd5D0…22c6, a busy wallet (302 transactions) with no link to the wallets behind this site's own contracts
hbUSDT token	HyperEVM	0x5e10…61eb	A token deployed by 0x0144…4F0F, a busy wallet (237 transactions) with no link to the wallets behind this site's own contracts
feUSD token	HyperEVM	0x02c6…6c70	A token deployed by 0x782c…AfEF, a busy wallet (512 transactions) with no link to the wallets behind this site's own contracts
USDHL token	HyperEVM	0xb50A…2BD5	Also used by 3 other sites (app.hyperlend.finance, app.kittenswap.finance, kinetiq.xyz), and its deployer has no link to this site's own contracts
wstHYPE token	HyperEVM	0x94e8…CF38	Also used by 4 other sites (app.hyperlend.finance, app.hypervault.finance, app.kittenswap.finance), and its deployer has no link to this site's own contracts

Not checked

These never count as passed

Honeypot simulation

GoPlus does not cover this chain: no buy / sell simulation ran · 6 contracts
Buy / sell tax

GoPlus does not cover this chain: no buy / sell simulation ran · 6 contracts
Who owns the contract

No owner() function; other access control (roles, a governor) is not checked yet · 6 contracts

What Aegis knows about this team

0x388E…8B58 Deployer on HyperEVM

Wallet age
18mo

First funded by
0x2036…4A38

Contracts created before
50+

Deployed here
Unnamed contract, STEXAMM, Unnamed contract, Unnamed contract, Unnamed contract, SovereignPool, SovereignPool, SovereignPool

Its contracts in Aegis data
58
0x20E9…328c Deployer on HyperEVM

Wallet age
19mo

First funded by
HyperCore (Hyperliquid L1)

Contracts created before
7

Deployed here
Overseer

Its contracts in Aegis data
8
0x98FA…a52b Deployer on HyperEVM

Wallet age
13mo

First funded by
0xD3A1…43b9

Contracts created before
46

Deployed here
PendleMarketV3

Its contracts in Aegis data
48

Also behind
app.hyperlend.finance (Medium risk)

Links on the site

This report describes on-chain facts and risk signals found by automated checks. Not financial advice: do your own research before you sign anything.

Report a mistake in this report

Contract code is not verified

Owner-controlled functions in the code

Honeypot simulation

Buy / sell tax

Who owns the contract