How Does Bluefin Work?

Derivatives|Risk B-|8 mechanisms|6 interactions

A trading platform on Sui where you can bet on crypto prices with up to 50x leverage. It handles $84M in deposits and has raised $37.5M from investors like Polychain and Brevan Howard. Its C+ grade reflects the danger of its off-chain order matching going down during a crash while liquidations keep running.

TVL

$20M

Sector

Derivatives

Risk Grade

B-

Value Grade

C+

Core Mechanisms

DEX/Orderbook/Hybrid-Matching

Novel

Off-chain order matching with on-chain settlement on Sui (<390ms execution)

Bluefin uses a hybrid model where orders are matched off-chain for speed, then settled on-chain for finality. This provides CEX-like UX but introduces matcher centralization risk. All orders are client-signed, maintaining non-custodial properties.

Derivatives/Perpetual-Futures

Perpetual futures with up to 50x leverage across BTC, ETH, SUI and other markets

Standard perpetual futures offering with variable leverage (1-50x). Funding rates align perp prices with spot. High leverage amplifies liquidation risk and oracle dependency.

DEX/AMM/Concentrated-Liquidity

CLMM for spot markets providing concentrated liquidity alongside the orderbook

Spot markets use concentrated liquidity pools (CLMM) complementing the orderbook for perpetual futures. Dual liquidity model serves different trader types.

Lending/Collateral/Over-Collateralized

Integrated lending/borrowing for margin trading and yield generation

Bluefin integrates lending/borrowing to enable margin trading. Borrowed assets can be used for perpetual positions, layering credit risk on top of derivatives risk.

Derivatives/Insurance-Fund

Insurance fund backstopping liquidation shortfalls with ADL as fallback

Insurance fund covers losses when liquidation proceeds are insufficient to cover position losses. When the fund is depleted, auto-deleveraging (ADL) socializes losses to profitable traders.

Oracle/External

Oracle price feeds for mark price and liquidation calculations

Mark price used for liquidation calculations depends on external oracle feeds. On Sui, the oracle sources may have thinner liquidity than comparable Ethereum-based oracles, increasing manipulation risk.

Governance/Token

BLUE token with planned DAO governance transition by 2026

BLUE token launched with 1B max supply. Full DAO governance planned for 2026. Currently team-controlled with multisig for protocol upgrades. Backed by Polychain, Brevan Howard, SIG, and Wintermute.

Cross-Chain/Bridge

Cross-chain asset access via LayerZero integration

LayerZero integration enables cross-chain asset transfers to fund Bluefin positions. Introduces bridge dependency and potential for cross-chain oracle discrepancies.

How the Pieces Interact

Off-chain matcherOn-chain liquidation engineCritical

During high-volatility events, the off-chain matcher can become congested while on-chain liquidations continue executing. Traders cannot close positions but can be liquidated, creating an asymmetric risk where users are locked into losing trades.

Oracle price feedsHigh leverage (up to 50x)High

50x leveraged positions are liquidated by even 2% adverse price movements. On thin Sui spot markets, oracle prices are easier to manipulate, meaning an attacker can trigger mass liquidations with relatively small capital to move spot prices.

Insurance fundAuto-deleveraging (ADL)High

Insurance fund depletion triggers ADL, forcibly closing profitable positions. This socializes losses to winning traders, destroying trust in the platform and incentivizing immediate withdrawal of funds after any significant market event.

LayerZero bridgeCross-chain margin positionsHigh

Cross-chain deposits via LayerZero create bridge dependency for margin funding. A LayerZero exploit or downtime could prevent traders from adding margin to positions being liquidated, creating avoidable losses.

Perpetual funding ratesOpen interest concentrationMedium

Concentrated open interest on one side (long-heavy or short-heavy) creates extreme funding rate imbalances. On a smaller exchange like Bluefin, this can make one side of the trade prohibitively expensive, driving volume to competitors.

What Could Go Wrong

  1. Hybrid off-chain matcher / on-chain settlement creates single point of failure — matcher downtime during crashes prevents traders from closing positions while liquidations continue
  2. Oracle manipulation risk on thin Sui spot markets could trigger mass liquidations and drain the insurance fund
  3. 50x maximum leverage amplifies all risk vectors — even small oracle deviations or matcher delays create outsized trader losses

Off-Chain Matcher Failure During Market Crash

Moderate

Trigger: Bluefin's off-chain order matching engine fails or becomes overloaded during a major market crash, preventing traders from closing positions while on-chain liquidations continue executing

  1. 1.Major market crash (BTC/ETH >15% in hours) floods the matcher with cancel and close orders Off-chain matcher becomes overloaded; order processing latency spikes from <390ms to seconds or minutes
  2. 2.Traders cannot close losing perpetual positions due to matcher congestion Positions accumulate unrealized losses while traders are unable to exit; effective forced holding during a crash
  3. 3.On-chain liquidation engine continues executing, liquidating positions at stale off-chain prices Liquidations execute at prices worse than current market, creating outsized losses for affected traders
  4. 4.Insurance fund depletes covering the gap between liquidation prices and mark prices Socialized losses begin affecting profitable traders; ADL (auto-deleveraging) triggers on winning positions

Risk Profile at a Glance

Mechanism Novelty3/15
Interaction Severity8/20
Oracle Surface5/10
Documentation Gaps2/10
Track Record3/15
Scale Exposure3/10
Regulatory Risk3/10
Vitality Risk7/10
B-

Overall: B- (34/100)

Lower score = safer

More on Bluefin

Related Derivatives Explainers