Put it inside so it won’t pollute the global namespace. It also ensures a faster resolve of the function name because of JavaScript’s scope chains.
Put it outside if it’s a reusable component so you could easily move it in a separate file and call from different contexts.
Since you already use JQuery, it’s worth mentioning, that in your case you may want to define hexvalidate as a JQuery plugin outside and then invoke it inside.