How Does Bluefin Work?
A trading platform on Sui where you can bet on crypto prices with up to 50x leverage. It handles $84M in deposits and has raised $37.5M from investors like Polychain and Brevan Howard. Its C+ grade reflects the danger of its off-chain order matching going down during a crash while liquidations keep running.
TVL
$20M
Sector
Derivatives
Risk Grade
B-
Value Grade
C+
Core Mechanisms
DEX/Orderbook/Hybrid-Matching
NovelOff-chain order matching with on-chain settlement on Sui (<390ms execution)
Bluefin uses a hybrid model where orders are matched off-chain for speed, then settled on-chain for finality. This provides CEX-like UX but introduces matcher centralization risk. All orders are client-signed, maintaining non-custodial properties.
Derivatives/Perpetual-Futures
Perpetual futures with up to 50x leverage across BTC, ETH, SUI and other markets
Standard perpetual futures offering with variable leverage (1-50x). Funding rates align perp prices with spot. High leverage amplifies liquidation risk and oracle dependency.
DEX/AMM/Concentrated-Liquidity
CLMM for spot markets providing concentrated liquidity alongside the orderbook
Spot markets use concentrated liquidity pools (CLMM) complementing the orderbook for perpetual futures. Dual liquidity model serves different trader types.
Lending/Collateral/Over-Collateralized
Integrated lending/borrowing for margin trading and yield generation
Bluefin integrates lending/borrowing to enable margin trading. Borrowed assets can be used for perpetual positions, layering credit risk on top of derivatives risk.
Derivatives/Insurance-Fund
Insurance fund backstopping liquidation shortfalls with ADL as fallback
Insurance fund covers losses when liquidation proceeds are insufficient to cover position losses. When the fund is depleted, auto-deleveraging (ADL) socializes losses to profitable traders.
Oracle/External
Oracle price feeds for mark price and liquidation calculations
Mark price used for liquidation calculations depends on external oracle feeds. On Sui, the oracle sources may have thinner liquidity than comparable Ethereum-based oracles, increasing manipulation risk.
Governance/Token
BLUE token with planned DAO governance transition by 2026
BLUE token launched with 1B max supply. Full DAO governance planned for 2026. Currently team-controlled with multisig for protocol upgrades. Backed by Polychain, Brevan Howard, SIG, and Wintermute.
Cross-Chain/Bridge
Cross-chain asset access via LayerZero integration
LayerZero integration enables cross-chain asset transfers to fund Bluefin positions. Introduces bridge dependency and potential for cross-chain oracle discrepancies.
How the Pieces Interact
During high-volatility events, the off-chain matcher can become congested while on-chain liquidations continue executing. Traders cannot close positions but can be liquidated, creating an asymmetric risk where users are locked into losing trades.
50x leveraged positions are liquidated by even 2% adverse price movements. On thin Sui spot markets, oracle prices are easier to manipulate, meaning an attacker can trigger mass liquidations with relatively small capital to move spot prices.
Insurance fund depletion triggers ADL, forcibly closing profitable positions. This socializes losses to winning traders, destroying trust in the platform and incentivizing immediate withdrawal of funds after any significant market event.
Cross-chain deposits via LayerZero create bridge dependency for margin funding. A LayerZero exploit or downtime could prevent traders from adding margin to positions being liquidated, creating avoidable losses.
Concentrated open interest on one side (long-heavy or short-heavy) creates extreme funding rate imbalances. On a smaller exchange like Bluefin, this can make one side of the trade prohibitively expensive, driving volume to competitors.
What Could Go Wrong
- Hybrid off-chain matcher / on-chain settlement creates single point of failure — matcher downtime during crashes prevents traders from closing positions while liquidations continue
- Oracle manipulation risk on thin Sui spot markets could trigger mass liquidations and drain the insurance fund
- 50x maximum leverage amplifies all risk vectors — even small oracle deviations or matcher delays create outsized trader losses
Off-Chain Matcher Failure During Market Crash
ModerateTrigger: Bluefin's off-chain order matching engine fails or becomes overloaded during a major market crash, preventing traders from closing positions while on-chain liquidations continue executing
- 1.Major market crash (BTC/ETH >15% in hours) floods the matcher with cancel and close orders — Off-chain matcher becomes overloaded; order processing latency spikes from <390ms to seconds or minutes
- 2.Traders cannot close losing perpetual positions due to matcher congestion — Positions accumulate unrealized losses while traders are unable to exit; effective forced holding during a crash
- 3.On-chain liquidation engine continues executing, liquidating positions at stale off-chain prices — Liquidations execute at prices worse than current market, creating outsized losses for affected traders
- 4.Insurance fund depletes covering the gap between liquidation prices and mark prices — Socialized losses begin affecting profitable traders; ADL (auto-deleveraging) triggers on winning positions
Risk Profile at a Glance
Overall: B- (34/100)
Lower score = safer