Hyperliquid Governance & Validators: How the Network Is Run

Hyperliquid runs 21 active validators, selected purely by total stake (self-delegation plus delegated HYPE). The validator set became fully permissionless on April 21, 2025 — anyone can register as a validator with a minimum self-delegation of 10,000 HYPE locked for one year. The active set updates every epoch (~90 minutes), and the 21 validators with the largest total stake form the consensus group.

The network started with just 4 validators controlled by the Hyperliquid team, expanded to 13, then 16, and reached 21 permissionless nodes. Notable validators include Imperator, B-Harvest, Nansen (via HypurrCollective), Chorus One, and the 5 Hyper Foundation nodes. The Hyper Foundation runs a Delegation Program that directs foundation stake toward high-quality validators who might not yet have enough community stake.

HyperBFT is Hyperliquid's custom consensus mechanism, inspired by HotStuff. It achieves one-block finality in approximately 0.07 seconds and supports 200,000 orders per second. The protocol tolerates up to 1/3 of validators acting maliciously — as long as more than 2/3 of stake-weighted voting power is honest, consensus proceeds correctly.

The design uses pipelining (overlapping proposal, voting, and commitment phases) and optimistic responsiveness (blocks finalize as soon as quorum is reached, not on a fixed timer). Validator hardware requirements are modest: 4 cores, 32 GB RAM, 200 GB storage. The recommended co-location for lowest latency is Tokyo, Japan.

Governance decisions are made through stake-weighted validator votes. The Hyperliquid Improvement Proposal (HIP) system allows eligible participants to submit proposals that HYPE holders vote on proportionally to their stake. A quorum of 2/3 stake is required to pass motions.

Major governance events include the HYPE Assistance Fund burn vote (85% approval to permanently burn 37.5 million HYPE worth ~$912M), the USDH stablecoin issuer vote (competitive selection between Paxos, Ethena, Frax, Sky, Agora, and the winning Native Markets), and the controversial HIP-5 proposal (creating a secondary fund for ecosystem token buybacks, which split the community).

In March 2025, a trader manipulated the JELLY meme token market, forcing HLP to absorb a $13 million unrealized loss. Validators coordinated off-chain, delisted JELLY within two minutes, and force-settled positions at a price far below the manipulated oracle price. While this prevented catastrophic losses for HLP depositors, the speed and opacity of the decision exposed concerns about centralization.

The response was swift: within days, Hyperliquid implemented fully on-chain validator voting for asset delistings. On March 29, a live test was conducted using MYRO — validators cast on-chain votes, and if a quorum is reached, delisting executes automatically through HyperCore with no off-chain coordination required. This was a meaningful step toward transparent governance, though critics noted the underlying power concentration remained.

The honest assessment: Hyperliquid is more centralized than Ethereum (800,000+ validators) or even Cosmos chains (60+ validators on dYdX). With 21 validators, a coordinated attack on roughly 8 nodes could halt the chain. The bridge securing billions in USDC relies on a small multisig of hot validators. The node software remains closed-source (distributed as opaque Docker containers), meaning validators run code they cannot audit.

However, the trajectory is toward decentralization. The permissionless validator set, the delegation program reducing foundation stake dominance, on-chain governance for delistings, and the commitment to open-source the node code represent real progress. The team argues that launching with centralization and decentralizing progressively is more pragmatic than premature decentralization that sacrifices performance. The community is watching the execution closely.