TradeXYZ GitBook Incident: Docs Restored, but Link Warning Remains
TradeXYZ GitBook Incident: Users Told Not to Click Links in Docs
Trade[XYZ], a team that deploys markets on Hyperliquid, has warned users about unauthorized activity affecting its docs.
In an official post on X, the project said the pages were restored, but it still asked people not to click anything linked inside them.
This TradeXYZ GitBook Incident is still under review, so the advice may change.
What the Team Announced
According to the post, the project identified unauthorized activity affecting its GitBook documentation earlier that morning. GitBook is the platform that hosts the project’s official docs site.
It said the documentation was fully restored to its previous state as of 9:15 AM ET. Even so, it advised users not to click any links within the documentation while the investigation remains ongoing.
It added that it is actively reviewing the incident and will provide further updates as appropriate.
The post was published on 2 November 2026, based on the post’s timestamp. It is short, and it does not describe how the activity happened or which pages were touched.
Timeline of the TradeXYZ GitBook Incident
The table below sums up the key points from the official statement:
Item | What the team said |
What happened | Unauthorized activity affecting the GitBook documentation |
When it was found | Earlier that morning |
Current state | Fully restored to its previous state as of 9:15 AM ET |
Advice to users | Do not click any links within the documentation. |
Investigation | Ongoing, with further updates as appropriate |
Notice what the table does not include. It gave no number of affected pages, no list of changed items and no cause.
It also made no statement about trading, user funds or its interface, so readers should not assume anything about them.
What Trade[XYZ] Does and Why the Docs Matter
The About page explains that the project deploys new financial tools on Hyperliquid, with a mission to let people trade anything, anytime. The docs cover two products:
Perpetuals: markets deployed through HIP-3, including stocks, equity indices, commodities, currencies and pre-IPO markets
Events: fully collateralized event contracts deployed through HIP-4, with fixed settlement rules and no leverage or liquidations
The site also explains that the project offers a non-custodial interface for these and other Hyperliquid markets.
According to the page on its relationship to Hyperliquid, that interface does not replace HyperCore, Hyperliquid’s onchain trading engine, and it is not the only way to reach the markets.
Because the docs also hold market rules, risk notes and legal disclaimers, many traders read them before trading.
The site’s index lists sections on Mechanics, Markets, Risk & Margining, Corporate Actions, Events and Legal Disclaimers, so it works as a reference library for the whole product line.
The pages also say users should review the legal and disclaimer sections and any market specifications before using the products.
That is why a problem with these pages can matter, even when the trading system itself is separate.
Why Clicks Inside Docs Matter and What Users Should Do
Documentation pages often contain many links to apps, tools and partner sites. In general, if a link on a trusted page is changed, it can send readers to a fake site that tries to steal wallet access.
The statement does not say that this happened here. It simply asks users to avoid links as a precaution.
Until the team posts more details, these habits can reduce risk:
Do not click links inside the docs until the team says it is safe
Type the official website address yourself or use a bookmark you saved earlier
Never connect a wallet to a site you reached through an unverified link
Read every wallet approval request before you sign it
Never share a seed phrase or private key with anyone
Anyone who clicked a link in the docs earlier that morning may also want to review their wallet approvals. It is a sensible step if they are unsure, even though the statement reports no user loss.
Conclusion
The core message from the team is simple: the docs are restored, but links should be avoided for now.
The TradeXYZ GitBook Incident is a reminder that even trusted pages can be targeted and that users should verify addresses before acting.
Readers should follow the project’s official X account for the next update.
Disclaimer
This article is for educational and informational purposes only and is not financial or investment advice. Crypto assets are high risk, their prices can be very volatile, and you can lose some or all of your money. Always do your own research and consider speaking with a licensed financial advisor before making investment decisions.
