# stHYPE > Not investment advice. Ratings describe on-chain configuration only and may contain errors. Snapshot 2026-10-24, methodology v0.2. Source: Celebtir, CC BY 4.0. ## Summary - Chain: hyper_evm - Category: liquid-staking - Stage: Stage 0 - TVL: unavailable: DefiLlama has no listing for this protocol - Website: https://app.valantis.xyz/ - Every core program has a verified build ## Value Asset groups unavailable: DefiLlama has no listing for this protocol. No tokens are listed for this protocol in the registry. ## Activity - 24h volume: unavailable: DefiLlama has no listing for this protocol - 24h fees: unavailable: DefiLlama has no listing for this protocol ## Risk summary - High: Core program code can be replaced by the unrecognized controller 0xc5DEd4F7F53919c714059a17d31371aE847E23D2. - High: An approved upgrade takes effect immediately. Withdrawal completion within that period is not established by these configuration facts. ## Risk analysis - Upgrade control: **High**. unrecognized controller 0xc5…23D2 (Celebtir does not yet support this controller type). To improve: Celebtir support for this controller type, or a multisig of 3+ voters at a 50%+ threshold → MEDIUM. - Evidence: [0xfFaa4a3D97fE9107Cef8a3F48c069F577Ff76cC1](https://hyperevmscan.io/address/0xfFaa4a3D97fE9107Cef8a3F48c069F577Ff76cC1) `eip1967.admin` at slot 49425943 - Evidence: [0xE7B0f26E8E20E109441F0AD1C885fffBB27125dc](https://hyperevmscan.io/address/0xE7B0f26E8E20E109441F0AD1C885fffBB27125dc) `owner()` at slot 49425943 - Evidence: [0xc5DEd4F7F53919c714059a17d31371aE847E23D2](https://hyperevmscan.io/address/0xc5DEd4F7F53919c714059a17d31371aE847E23D2) `code (not a known controller)` at slot 49425943 - Upgrade delay: **High**. no delay can be read for an unrecognized controller. To improve: a time lock of 24 h+ → MEDIUM; 5 days+ → LOW. - Evidence: [0xfFaa4a3D97fE9107Cef8a3F48c069F577Ff76cC1](https://hyperevmscan.io/address/0xfFaa4a3D97fE9107Cef8a3F48c069F577Ff76cC1) `eip1967.admin` at slot 49425943 - Evidence: [0xE7B0f26E8E20E109441F0AD1C885fffBB27125dc](https://hyperevmscan.io/address/0xE7B0f26E8E20E109441F0AD1C885fffBB27125dc) `owner()` at slot 49425943 - Evidence: [0xc5DEd4F7F53919c714059a17d31371aE847E23D2](https://hyperevmscan.io/address/0xc5DEd4F7F53919c714059a17d31371aE847E23D2) `code (not a known controller)` at slot 49425943 - Admin powers: **Low**. the registry lists no admin accounts; the evidence is the core programs' upgrade reads. To improve: none: LOW is the lowest risk level. - Evidence: [0xfFaa4a3D97fE9107Cef8a3F48c069F577Ff76cC1](https://hyperevmscan.io/address/0xfFaa4a3D97fE9107Cef8a3F48c069F577Ff76cC1) `eip1967.admin` at slot 49425943 - Evidence: [0xE7B0f26E8E20E109441F0AD1C885fffBB27125dc](https://hyperevmscan.io/address/0xE7B0f26E8E20E109441F0AD1C885fffBB27125dc) `owner()` at slot 49425943 - Evidence: [0xc5DEd4F7F53919c714059a17d31371aE847E23D2](https://hyperevmscan.io/address/0xc5DEd4F7F53919c714059a17d31371aE847E23D2) `code (not a known controller)` at slot 49425943 - Code transparency: **Low**. verified build of https://repo.sourcify.dev/999/0xe71cAF5c1fe56d8897c7B604295D23968049E057 at sourcify:exact_match. To improve: none: LOW is the lowest risk level. - Evidence: [0xe71cAF5c1fe56d8897c7B604295D23968049E057](https://hyperevmscan.io/address/0xe71cAF5c1fe56d8897c7B604295D23968049E057) `sourcify verified source` at slot 49425943 - Oracle dependency: **Not applicable**. the registry lists no price feeds; the evidence is the core programs' upgrade reads. To improve: not applicable: nothing to improve. - Evidence: [0xfFaa4a3D97fE9107Cef8a3F48c069F577Ff76cC1](https://hyperevmscan.io/address/0xfFaa4a3D97fE9107Cef8a3F48c069F577Ff76cC1) `eip1967.admin` at slot 49425943 - Evidence: [0xE7B0f26E8E20E109441F0AD1C885fffBB27125dc](https://hyperevmscan.io/address/0xE7B0f26E8E20E109441F0AD1C885fffBB27125dc) `owner()` at slot 49425943 - Evidence: [0xc5DEd4F7F53919c714059a17d31371aE847E23D2](https://hyperevmscan.io/address/0xc5DEd4F7F53919c714059a17d31371aE847E23D2) `code (not a known controller)` at slot 49425943 - Dependencies: **Low**. calls no other programs with user funds (declared in the registry, not traced from transactions). To improve: none: LOW is the lowest risk level. - Evidence: [0xfFaa4a3D97fE9107Cef8a3F48c069F577Ff76cC1](https://hyperevmscan.io/address/0xfFaa4a3D97fE9107Cef8a3F48c069F577Ff76cC1) `registry dependencies` at slot 49425943 ## Stage Stage 0. Stages describe who can change the protocol and how fast. They don't measure code security. - [x] Stage 0: core programs identified in the registry (1 core programs) - [x] Stage 0: public source for every core program (all core programs have public source) - [x] Stage 0: upgrade control readable for every core program (upgrade control read for all core programs) - [ ] Stage 1: upgrade control rated Low or Medium (HIGH: unrecognized controller 0xc5…23D2 (Celebtir does not yet support this controller type)) - [ ] Stage 1: upgrade delay of the Stage 1 minimum, unless upgrades need an emergency multisig (0xfFaa4a3D97fE9107Cef8a3F48c069F577Ff76cC1: effective time lock 0 s; needs 5 days+ or an emergency multisig of 8+ voters at 75%+) - [x] Stage 1: admin powers rated Low or Medium (LOW: the registry lists no admin accounts; the evidence is the core programs' upgrade reads) - [x] Stage 1: no multisig has a single-key config authority (no single-key config authority) - [x] Stage 1: verified builds for all core programs (all core programs verified) - [x] Stage 1: every factor could be read (Unknown caps the Stage at 0) (no Unknown factors) - [ ] Stage 2: core programs immutable, or upgradeable only through on-chain governance with a long delay (upgradeable without 30 days+ governance delay: 0xfFaa4a3D97fE9107Cef8a3F48c069F577Ff76cC1) - [x] Stage 2: no key can move or freeze user funds (no admin key can move or freeze funds) ## Control graph - stHYPE token → stHYPE: core program - Unrecognized → stHYPE token: can upgrade · no delay ## Permissions - Unrecognized [0xc5DEd4F7F53919c714059a17d31371aE847E23D2](https://hyperevmscan.io/address/0xc5DEd4F7F53919c714059a17d31371aE847E23D2) - Upgrade the code: stHYPE token, no delay ## Programs - stHYPE token [0xfFaa4a3D97fE9107Cef8a3F48c069F577Ff76cC1](https://hyperevmscan.io/address/0xfFaa4a3D97fE9107Cef8a3F48c069F577Ff76cC1): core, loader not read, controller Unrecognized, verified build of https://repo.sourcify.dev/999/0xe71cAF5c1fe56d8897c7B604295D23968049E057, last upgrade not read ## Upgrades & governance - Upgrades: 0 so far (history still filling) - Last upgrade: none - Average interval: not enough upgrades ## Updates - 2026-10-24 (info): sthype added to coverage (detected within 3 days) ## Dependencies and sources The sampled transactions called no other programs with user funds. - Registry source for program stHYPE token (0xfFaa4a3D97fE9107Cef8a3F48c069F577Ff76cC1): https://github.com/DefiLlama/DefiLlama-Adapters/blob/main/projects/staked-hype/index.js - Registry entry last reviewed: 2026-10-21 by celebtir-loop-draft Web page: /protocols/sthype/