How Does Hyperliquid Work?
A perpetual futures exchange running on its own custom blockchain, offering up to 50x leverage with a full on-chain order book. It holds $4.8B in deposits and has no outside investors. Its C- grade reflects multiple security incidents throughout 2025 — including the $13.5M JELLY exploit, a $21M private key compromise, and several vault exploits — plus centralization concerns from a small validator set.
TVL
$4.7B
Sector
Derivatives
Risk Grade
C-
Value Grade
B-
Core Mechanisms
Exchange/Orderbook-DEX
Fully on-chain central limit order book with sub-second finality
Runs a complete CLOB on a custom L1 (HyperBFT consensus) achieving 100k orders/sec and sub-second finality. No other DEX operates a full orderbook at this throughput on its own chain.
Derivatives/Perpetual-Futures
Up to 50x leverage perpetual futures with funding rate mechanism
Standard perpetual futures with 8-hour funding rates. Captures ~80% of on-chain perp market share. Mechanism itself is well-understood from CEX implementations.
Vault/Market-Making
NovelHLP vault: protocol-owned market-making and liquidation backstop
Hyperliquidity Provider (HLP) vault democratizes market making by pooling user deposits to provide liquidity and backstop liquidations. Losses are socialized across depositors.
Infrastructure/Custom-L1
HyperBFT consensus with a small, permissioned validator set
Purpose-built L1 using a modified HotStuff BFT consensus. Currently runs a limited validator set (around 16-25 nodes), raising centralization questions.
Exchange/Spot-DEX
HIP-1 spot token standard with on-chain deployment auctions
Novel token standard (HIP-1/HIP-2) where tokens are deployed via Dutch auction for ticker rights, with native on-chain liquidity provision. No equivalent exists on other platforms.
Risk-Management/Liquidation
Tiered liquidation engine with backstop liquidator vault
Liquidation engine processes positions through market orders, with HLP vault acting as backstop. The JELLY incident exposed vulnerabilities when illiquid assets are listed.
Derivatives/Prediction-Markets
HIP-4 fully collateralized outcomes trading for defined-risk products
Recent addition enabling binary outcomes trading. Uses collateralized positions rather than orderbook leverage, limiting downside to deposited collateral.
How the Pieces Interact
When an illiquid perpetual (e.g., JELLY) is manipulated, the HLP vault absorbs massive losses as backstop liquidator, socializing losses to all depositors. The March 2025 JELLY incident demonstrated this risk with ~$13.5M in losses.
A small validator set controlling the L1 can theoretically censor, reorder, or front-run orders. The team's unilateral JELLY delisting demonstrated centralized intervention capability.
50x leverage positions in volatile markets can cascade liquidations faster than the engine processes them, creating bad debt that falls to the HLP vault.
Listing perp markets for newly deployed HIP-1 tokens with thin liquidity creates manipulation vectors, as demonstrated by the JELLY incident.
No external investor governance creates unchecked protocol decision-making. Token unlock schedule (9.92M HYPE in Feb 2026 alone) concentrates sell pressure.
What Could Go Wrong
- Custom L1 with limited validator set creates centralization and censorship risk
- JELLY-style market manipulation exploits via illiquid perp listings
- Self-funded with no external oversight; HLP vault socializes losses across depositors
- Multiple security incidents in 2025 — JELLY manipulation, $21M private key exploit, Hyperdrive/HyperVault exploits — reveal persistent security vulnerabilities and reliance on centralized emergency responses
HLP Vault Illiquid Perp Drain
ElevatedTrigger: A trader opens >$50M in leveraged positions on a perpetual market with <$2M daily volume, then manipulates the spot price to force HLP backstop liquidation
- 1.Attacker accumulates large long position on illiquid perp market (e.g., a newly listed HIP-1 token) — Position size exceeds available market depth for orderly liquidation
- 2.Attacker manipulates spot price on thin HIP-1 liquidity to trigger self-liquidation — HLP vault absorbs the position as backstop liquidator at manipulated price
- 3.HLP vault attempts to unwind massive position against illiquid market — Market impact causes further losses as vault sells into thin books
- 4.HLP depositors realize socialized losses of $10M+ — Mass HLP withdrawals reduce vault capacity, degrading liquidation backstop for all markets
- 5.Reduced HLP capacity raises systemic risk across all Hyperliquid perp markets — Traders reduce leverage and volume drops as liquidation backstop confidence erodes
Risk Profile at a Glance
Overall: C- (52/100)
Lower score = safer