Hyperlane

Hyperlane is a set of smart contracts and offchain agents that lets one blockchain send messages and tokens to another. Its selling point is that no permission is needed: a new layer 1, rollup or app-chain team can deploy Hyperlane itself and be connected the same day. It works across EVM chains, Solana-style SVM chains and Cosmos chains. The project was called Abacus until it rebranded in the fall of 2022, according to its FAQ.

Three names appear behind it. Abacus Works, which the FAQ calls "the name of a legal identity working on Hyperlane", builds the software and runs relayers and validators on many chains. The Hyperlane Foundation describes itself as a non-profit that funds development and community work. The hyperlane.xyz website is published by the Developer's Eminence Foundation, a Cayman Islands foundation company, under terms last updated on 15 October 2025 and governed by Cayman law. None of these bodies publishes an address or names its directors on the pages we checked.

When the HYPER token was announced in April 2025, the Foundation said Hyperlane had expanded to more than 140 blockchains, carried about 9 million messages and moved over $6 billion through Warp Routes. Those are company figures for that date, citing Dune dashboards.

Every connected chain has a Mailbox contract. An app calls dispatch on the origin chain's Mailbox, which records the message in a Merkle tree. A relayer, an offchain agent, picks the message up, gathers whatever proof the recipient requires and calls process on the destination Mailbox. That Mailbox asks the recipient's Interchain Security Module, or ISM, to verify the message before passing it on.

The ISM is where security lives, and it is chosen by the app, not by the protocol. If an app sets nothing, the Mailbox's default ISM applies, which is a Multisig ISM: a set of validators sign each message, and a threshold of signatures is needed. Apps can instead deploy their own multisig with validators they pick, combine several ISMs (for example, requiring both a Hyperlane multisig and Wormhole's guardians), add rate limits, or add a pausable ISM to halt a route during an incident.

Warp Routes are Hyperlane's token bridges. A deployer chooses whether tokens are locked on one chain and minted as synthetic copies on another, or locked and released as existing collateral on both sides. Each Warp Route has its own contracts and can have its own ISM and owner, so the documentation warns that users should understand a route's trust assumptions before using it. Hyperlane's own interface for these routes is Nexus, at nexus.hyperlane.xyz.

Hyperlane publishes the default validator set for each mainnet chain. Our count of that list on 25 October 2026 found 65 chains:

• 23 chains need 2 of 2 signatures. On 22 of them the two signers are Abacus Works and Mitosis, and on Gnosis they are Abacus Works and Zee Prime. Monad, Plasma, Katana, Robinhood Chain and Stable are among them.
• 12 chains need 2 of 3, 9 need 3 of 4 (Solana among them), 13 need 3 of 5 (Arbitrum, Base and Optimism among them) and 6 need 4 of 6.
• Ethereum is the strictest, at 6 of 9, with DSRV, Staked, Luganodes and others alongside Abacus Works.
• Abacus Works is a validator in every one of the 65 sets.

Under a 2-of-2 default, two operators signing a false message is enough to mint unbacked tokens on the destination. One operator going offline is enough to stop delivery. An app that keeps the default inherits exactly that. The rating page shows how Hyperlane compares with other crypto bridges on this trust model. Hyperlane's answer is economic security: validators selected into the default ISM are backed by staked HYPER and can be slashed, with slashing proceeds going to victims, according to the Foundation's token announcement. The documentation says details of how stake is allocated across chains "will follow".

HYPER exists on Ethereum, Arbitrum One, Base, OP Mainnet and BNB Chain. Its documented uses are staking for the default ISM's economic security and rewards. Expansion Rewards are paid quarterly over four years to apps in proportion to their message volume, and by default 85% of an app's share passes through to its users. An Expansion Drop at launch rewarded early users based on a snapshot taken on 28 February 2025.

Staking runs through a HYPER vault on Symbiotic, a restaking platform, though the documentation says this vault delegates only to Hyperlane and does not restake elsewhere. Staking returns stHYPER, a liquid receipt token on Ethereum and BNB Chain. Rewards are distributed per epoch of about one month. Leaving is slow: after you start an unstake, the withdrawal becomes available after roughly one full epoch, about 30 to 60 days, and you then have to finalize it manually. Slashing risk applies while staked (the risks restaking adds).

A Hyperlane message costs two things: the origin chain's transaction fee, and an interchain fee paid to the relayer on the origin chain to cover gas on the destination. On EVM and Solana-style chains both are paid in the native gas token. Cosmos chains can price the interchain fee in other tokens.

Warp Routes can add an application fee in the bridged token, set by whoever deployed the route. Hyperlane does not publish a single fee schedule, so the quote in Nexus or the app you use is the place to check the total. Relayers set their own fee structures, and the protocol does not pay them token incentives.

Hyperlane's audits page lists reviews by FYEO (protocol v1, August 2022), Hacken (v2, April 2023), Trail of Bits (v3, September 2023), Oak Security (CosmWasm, February 2024) and Sherlock (Sealevel, March 2025), plus several ChainLight reports from 2025 and a ChainSecurity draft on a USDT route. Its Immunefi program pays up to $2.5 million for critical smart contract bugs. We found no exploit of Hyperlane's core contracts in the DefiLlama hacks database as of October 2026.

The main risks are structural:

• Route-by-route security: two Warp Routes for the same token can be secured very differently, and a front end does not usually show which ISM a route uses.
• Small default committees: as counted above, many chains rely on two signatures by default.
• Owner keys: Mailboxes and Warp Routes have owners who can change the ISM. Hyperlane's guides recommend timelocks, but whether a given route uses one has to be checked on-chain.
• Wind-downs: Abacus Works' deprecated-chains page lists 87 chain entries where it is ending relayer and validator operations, including Berachain, Blast, Arbitrum Nova and Aurora, with last supported dates between March and November 2026. After that date, messages on those chains are no longer delivered automatically unless someone else runs a relayer.

Most people use Hyperlane through Nexus or through a chain's own bridge page. Connect a wallet, pick the origin and destination chains and the token, approve and send. The Hyperlane Explorer at explorer.hyperlane.xyz shows any message by address or transaction hash, with error details if delivery failed. The relayer retries automatically after problems such as missing gas payment or destination fee spikes.

If you hold a synthetic token minted by a Warp Route on a chain that is losing support, bridge it back before the last supported date. After that, delivery depends on a third party running a relayer. Hyperlane's community help runs through GitHub Discussions and its official X account. The Foundation's site links to claim.hyperlane.foundation for HYPER claims; treat claim links from anywhere else as phishing.

Key dates from Hyperlane's documentation, audit list and Foundation posts:

• August 2022: first protocol audit (FYEO), published under the Abacus name.
• Fall 2022: Abacus rebrands to Hyperlane.
• 10 January 2023: Immunefi bug bounty goes live.
• September 2023: Trail of Bits reviews protocol v3.
• 28 February 2025: snapshot for the HYPER Expansion Drop.
• 3 April 2025: the Hyperlane Foundation introduces HYPER.
• March to November 2026: Abacus Works winds down agent operations on 87 listed chains.