Hypernative

Hypernative is a proactive onchain security platform that gives enterprises, DeFi protocols, and financial institutions real-time visibility and automated defenses across more than 70 blockchain networks, including Solana. Founded in 2022, the company has grown to protect over $100 billion in digital assets for 350+ customers and claims to have saved more than $3 billion in funds that would otherwise have been lost to exploits, hacks, and fraud.

How It Works

Hypernative's platform operates across the full transaction lifecycle rather than relying on any single defensive layer.

Before a transaction executes, the platform runs address screening, risk scoring, and policy-based access controls. At execution time, transaction simulation validates that the expected outcome matches the intent, catching attacks that exploit authorized code paths — the category behind several high-profile 2026 exploits. Post-execution, continuous 24/7 monitoring watches smart contracts, wallets, governance actions, liquidity pools, bridges, and oracle feeds, running anomaly detection against a library of 300+ risk types built from historical attack patterns.

When a threat is detected, Hypernative can trigger automated responses: pausing contracts, blocking transactions, alerting security teams, or routing to incident response. The aim is to shrink the window between detection and action to seconds, which is the window that determines whether funds move before a team can respond.

The company reports a 99.8% hack detection rate with a false positive rate below 0.001%, a combination that matters operationally — high false-positive rates cause alert fatigue and are often disabled by security teams.

Core Products

Onchain Monitoring and Automated Response is the flagship product. It ingests on-chain events, mempool signals, oracle data, and off-chain feeds simultaneously, running ML models trained on thousands of documented incidents to flag anomalies in real time. Teams configure automated playbooks: a detected unauthorized mint, for example, can trigger an automatic contract pause without waiting for human review.

Transaction Guard adds a pre-execution layer. It simulates transaction outcomes before they are signed, verifies intent against expected behavior, and enforces configurable policy rules. The product targets the category of attacks that pass all signature and governance checks yet produce harmful outcomes.

Fraud Prevention is aimed at centralized exchanges and financial institutions that need real-time screening of deposits, withdrawals, and counterparty wallets against known-bad addresses, sanctioned entities, and risk exposure chains.

Screening and Intelligence provides address reputation data and exposure analysis for compliance workflows — used by teams that need to document risk assessments for regulatory purposes.

Wallet Protection embeds transaction security and dApp screening directly into wallet interfaces, warning end users before they interact with malicious contracts or phishing sites.

Solana Ecosystem Fit

Hypernative extended coverage to Solana as part of a broader push to support non-EVM chains. The Solana integration carries a specific architectural reality: Solana's private mempool routes transactions through validators without public pre-execution visibility, unlike Ethereum's public mempool. That eliminates the possibility of intercepting and blocking a transaction before it lands, making real-time detection and rapid automated response the primary defensive mechanism available on the network.

The company demonstrated this in a partnership with Tessera, a pre-IPO tokenization platform built on Solana. Hypernative monitors Tessera's minting infrastructure — detecting unauthorized token creation that could result from private key compromise — and its Meteora-based liquidity pools for anomalous trading behavior. The setup sends real-time alerts across configured notification channels and triggers response actions within the latency window Solana's finality speed permits.

Solana's growing presence in tokenized real-world assets and institutional DeFi makes this integration strategically significant. Protocols and institutions deploying capital or issuing assets on Solana face the same threat surface as EVM chains but with fewer interception points, which increases the value of continuous monitoring.

Traction and Customers

Hypernative's customer list spans both traditional finance and native crypto: Fidelity, DTCC, Invesco, Coinbase, Kraken, OKX, Circle, and Morpho are among the names displayed on the company's website. The platform has been adopted by major Layer 1 ecosystems including Ethereum, Aptos, and ZKsync as chain-level security infrastructure, in addition to individual protocol deployments.

In 2024, Hypernative detected more than $2.2 billion in losses from hacks, exploits, phishing, and fraud across monitored protocols — a 22% increase year-over-year, reflecting both the growth of the threat environment and the expanding scope of what the platform watches.

Funding and Team

Hypernative has raised a total of $65 million across three rounds:

• January 2023: $9 million seed round
• September 2024: $16 million Series A
• June 2025: $40 million Series B, co-led by Ten Eleven Ventures and Ballistic Ventures, with participation from StepStone Group, boldstart ventures, and IBI Tech Fund

The Series B is being used to expand fraud prevention capabilities, deepen wallet-level transaction protection, improve ML model quality through better training data, and grow the team providing expert-led risk analysis. CEO Gal Sagie, a co-founder, has described eliminating security as a blocker to institutional Web3 adoption as the company's core objective.

Audits and Trust Model

Hypernative's security model is infrastructure-level rather than protocol-level — the platform is the auditing and monitoring layer, not itself a smart contract to be audited. The company's detection track record serves as the primary public evidence of reliability. Customers running high-value deployments on the platform include regulated financial institutions with their own internal risk frameworks, suggesting the platform has cleared institutional due diligence at major counterparties.

The specifics of how the ML models work are not publicly disclosed, consistent with standard practice for security tools that would lose effectiveness if attackers could map detection logic precisely.

Summary

Hypernative offers a mature, well-funded security infrastructure platform with genuine Solana coverage. Its five-product suite covers the spectrum from pre-transaction screening to post-incident response, serving enterprise customers across both crypto-native and traditional finance. The Solana integration is live and in production use, addressing the specific constraints of Solana's architecture. With $65 million raised and 350+ customers protecting $100B+ in assets, Hypernative is among the more substantial security infrastructure providers operating in the multi-chain ecosystem.