Hyperliquid is built on a foundation of onchain transparency. A recent article made several claims that are factually incorrect:
+ Solvency: Every dollar is accounted for; the author failed to count native HyperEVM USDC.
+ Integrity: Testnet functions are exactly that - testnet only for testing. They cannot be executed on mainnet.
+ Transparency: Hyperliquid is more transparent and decentralized than all other major venues for perps trading. The entire state is independently maintained by a permissionless validator set and verified through BFT proof-of-stake consensus by each node. Every order, trade, and liquidation is available in real time during execution. Anyone can run a node and index the chain’s state and transitions. No major perps platform comes close to this guarantee for users.
See our response to the writer’s individual points below.
Claim: The system is undercollateralized by $362M
False: The Hyperliquid blockchain state is fully and verifiably solvent. The author excluded the HyperEVM USDC (a publicly announced and much anticipated integration), which exists in parallel to the Arbitrum bridge. Every USDC in circulation on HyperCore is accounted for transparently, by summing up the balances of https://t.co/Fk2lhZvpXD and https://t.co/pGBPcsJUTl. At the time of writing, this amounts to 3.989B + 362M = 4.351B USDC on HyperCore. USDC on the HyperEVM can be computed by subtracting 362M from the 421M on the HyperEVM USDC contract (https://t.co/ohiJm3WzN8), totaling another 59M USDC on HyperEVM.
The sum of the Arbitrum bridge and native USDC balances can be compared against the sum of user balances on HyperCore. As highlighted in the introduction, this exercise of verifying complete system solvency against user balances is uniquely possible on Hyperliquid compared to competitors.
The current Arbitrum bridge was an important stepping stone in bootstrapping the Hyperliquid network and will be deprecated as the migration to native USDC is complete, bringing Hyperliquid to parity with other major L1s.
Claim: There is retroactive volume manipulation via TestnetSetYesterdayUserVlm
False: This is a testnet-only function to allow for comprehensive testing. The author states that “the function’s presence is the problem…capability alone violates the trust model.” Testnet-only features that enable more rigorous testing of edge cases do not undermine the chain’s integrity. The fee schedule on Hyperliquid interacts in a complex way with inputs: user volume, aligned quote token status, maker vs taker, HIP-3, etc. It’s important to test these interactions on testnet, and therefore the testnet chain has a set of admin testing functions that do not exist on mainnet. The related TestnetAddMainnetUser action is to mark a testnet user as having corresponding mainnet state, to avoid DDOS and other attacks that are “free” on testnet. None of these functions are callable on the mainnet state.
While the execution source is not available, anyone can verify every trade onchain by running a node, and sum up the values to confirm that volume numbers are reflected accurately in onchain state. Similar to onchain solvency verification against the sum of all user account values, this is possible on Hyperliquid but not on most competitive platforms.
Given that this code path is entirely unreachable on mainnet, future development work will entirely compile out this testnet-only logic on mainnet nodes to avoid any possible misunderstanding or misinterpretation.
Claim: Some users have special privileges such as fee exemptions or retroactive volume manipulation used to influence the airdrop
False: Like system solvency, user balances, and individual trades, the fees paid by any address is available onchain. Each trade along with its fees paid or rebates received are transparently indexed by nodes, API servers, and third party analytics providers. There are no such mechanisms to distort fees, and no such mechanisms could have influenced the HYPE airdrop. Furthermore, the genesis distribution of HYPE is fully available onchain, and users can verify the historical behavior of every such address.
Claim: “CoreWriter” godmode can mint tokens, move user funds without signatures, crash random validators and basically do whatever it wants
False: The CoreWriter spec is fully documented here https://t.co/TTMWI5pDBB and replicable in the open source HyperEVM execution. CoreWriter is a way for smart contracts on HyperEVM to send HyperCore actions as part of HyperEVM block execution. It supports various actions that are normally sent by EOAs such as staking and placing orders, but has no such features to “mint tokens, move user funds without signatures, crash random validators and basically do whatever it wants.” This is a fundamental misunderstanding of how HyperCore interacts with the HyperEVM.
Claim: Chain can freeze via governance, and no undo function exists
Misinterpreted: The chain freezes during network upgrades. There is no undo function because the validators adopt a new binary at that height. This is analogous to how other networks perform hard forks at future heights determined by social consensus.
Suspicious activity on POPCAT in Nov 2025 did not cause the L1 to freeze, nor were any user funds frozen. The L1 was entirely operational, and any observer can see the blocks that were produced during this time. The Arbitrum bridge was automatically locked after the incident due to abnormal variation in account balances. As explained above, the Arbitrum bridge is not as secure as natively minted USDC, and therefore requires several conservative automated locking mechanisms as safeguards. The Arbitrum bridge’s locking mechanism is audited and open sourced, and the bridge is being deprecated with the transition to native USDC.
Claim: A single private key can set any oracle price instantly: no timelock, no limits
Misinterpreted: The author is likely mistaking the HIP-3 oracle updater logic with the validator-operated perps. HIP-3 oracle updates are indeed set by a single address, but this is up to the deployer to configure. The updater address need not be an EOA. For example, current HIP-3 deployers use a combination of MPC and CoreWriter architecture.
For validator-operated perps, multiple validators can submit oracle price updates. The final prices are a robust weighted median across major centralized exchanges. There is no timelock and no limits explicitly because these limits make the system less, not more, safe. The events of 10/10 show the danger to solvency if ADL is not accurately triggered in a timely manner during high volatility. Hyperliquid was one of the only venues without performance degradation or a network outage during this time. If Mango Markets or a similar protocol with oracle rate limits were active during 10/10, they would have likely accrued bad debt. Further decentralization will involve other validators actively running independent and open-sourced oracle update binaries.
Claim: 8 undisclosed addresses control all transaction submission
False: Some transactions are already sent directly from the validators. Some such as orders are not, in order to minimize MEV, but a future upgrade will incorporate this logic for all transactions in a mechanism that is both MEV- and censorship-resistant. The careful consideration of MEV is in response to trader and researcher feedback based on predatory behavior observed on other chains. There is almost unanimous agreement that toxic transaction ordering degrades the end user experience. Ultimately, the validator set is permissionless, and there is no guarantee that validators in the mainnet set are always fully aligned with the ecosystem. A major milestone in decentralization will be solving this problem, including a multiple-proposer block building setup.
Claim: There is a liquidation cartel with unfair advantages
Misinterpreted: Only HLP may backstop liquidate users, and HLP subvaults are the only addresses in this set. However, depositing into HLP is permissionless, so HLP is a community-owned liquidity vault supporting the protocol. The fact that HLP has privileges is no different from other protocol liquidity vaults.
Relatedly, all liquidations are first attempted against the order book, which handles the vast majority of liquidated positions without backstop liquidation. This allows users to keep any remaining collateral, and allows all other users to compete in providing the best price to the liquidation flow, benefitting the liquidated user.
Claim: There is a hidden lending protocol with $1M+ supplied and no documentation
False: Portfolio margin, borrow lend, and the HLP supplied value were all publicly announced and are currently in pre-alpha rollout. The current documentation can be found at https://t.co/vvE8EhpIhX and has been progressively fleshed out over the past several weeks.
Claim: ModifyNonCirculatingSupply allows changes to token supply
False: The full supply of HIP-1 tokens on HyperCore is fixed at deployment. The non-circulating supply is a purely informational number that can optionally mark addresses as “non-circulating” for display purposes. Whether an address is marked as “non-circulating” does not affect execution. This is an example of onchain information that might make more sense offchain, but is not a vulnerability.
Thank you to the author for spending the time to verify the execution of Hyperliquid. The fact that this investigation could be done at all proves the transparency and decentralization that Hyperliquid has already achieved. Concretely, Hyperliquid is the only major perps venue where the entire state and every input diff is transparently available to anyone running a node.
A similar analysis on any of the other top perp DEXs is impossible. For example, Lighter uses a single centralized sequencer whose execution logic and ZK circuits are unavailable. Aster uses centralized matching and even offers dark pool trading, which is only possible with a single centralized sequencer without verifiable execution. Other protocols with some open source contracts do not have a verifiable sequencer.
On Binance, Lighter, Aster, or similar exchanges, it is impossible for anyone other than the sequencer to see a full snapshot of onchain state including order books, positions, and other user information. The centralized sequencer can also upgrade its software without any constraints. On Hyperliquid, the entire state is onchain, which means there are 24 validators executing the same state machine under BFT consensus rules. There is plenty left to do on the journey towards greater decentralization, but it’s important to highlight just how far Hyperliquid and its ecosystem have come compared to competitors.
Decentralization is progressive, and Hyperliquid will ultimately be fully open sourced. Hyperliquid is the most transparent of all major venues, even though this leaks advantages to competitors (all of whom are closed source), who can copy Hyperliquid’s innovations more easily. We think this is the correct tradeoff to balance value accrual to the community, speed of innovation, and upholding the values of defi.
The HyperEVM execution is open source, and Sprites, an independent community member, maintains a full archival node that powers many important integrations. HyperCore will follow the same path as soon as it reaches feature completion.
Those who can, do
Those who can't, fud
Before writing a paper maybe learn the definition of what you are studying? ADL does not "transfer pnl to HLP." It treats HLP entirely symmetrically with users. **ADL has nothing to do with HLP or backstop liquidations**
ADL did not "destroy $653 million of pnl" either. If you don't understand what you're talking about, you are not qualified to spread lies masked by fancy ML terms to sound smart. It's a shame that these are the "academics" that the industry looks up to.
During the recent market volatility, the Hyperliquid blockchain had zero downtime or latency issues despite record traffic and volumes. HyperBFT consensus and execution handled the spike in throughput gracefully.
This was an important stress test proving that Hyperliquid's decentralized and fully onchain financial system can be robust and scalable. The system's risk and margining implementation functioned as designed, ensuring platform solvency throughout the extreme volatility.
Regarding commentary and questions on the 0xf3f4 user's ETH long:
To be clear: There was no protocol exploit or hack.
This user had unrealized PNL, withdrew, which lowered their margin, and was liquidated. They ended with ~$1.8M in PNL. HLP lost ~$4M over the past 24h. HLP's all-time PNL remains at ~$60M. As a reminder, HLP is not a risk-free strategy.
Max leverage will be updated for BTC and ETH to 40x and 25x respectively to increase maintenance margin requirements for larger positions. This will provide a better buffer for backstop liquidations of larger positions.
Hyperliquid started 2024 as a barely-known perp dex and ended the year as one of the largest decentralized financial hubs, processing billions in volume per day with a thriving ecosystem of builders, traders, and community members.
Thank you to everyone who came together for a record-breaking 2024. All of this was achieved without taking any external funding and giving all trading fees to the community. Part of what makes Hyperliquid special is how the community is its strongest advocate and the largest beneficiary of its success. It's humbling to see Hyperliquid's vision resonate with so many of you.
Hyperliquid was built with a strong belief in returning to the core ethos of crypto - changing entrenched and predatory centralized practices to be fair and permissionless. In 2025, even more builders and users will join the flourishing ecosystem on a mission to house all finance.
Looking back on 2024, some milestones and metrics are highlighted below.
Notable product and tech releases included:
+ Native spot token standards: HIP-1 and HIP-2
+ HyperBFT consensus
+ Testnet EVM
+ Builder codes
+ HYPE genesis event
+ Staking
Teams built exclusively on Hyperliquid. Some highlights include:
+ HypurrFun, an app where you can launch and trade memecoins, snipe new launches, access whale chats, and form your own cabal to compete against others
+ pvp. trade, a Telegram bot where you can trade and share alpha with your clan and against others
+ HypurrScan, an explorer that makes it easier to investigate popular features of the blockchain, such as token auctions, token holders, TWAPs, and more
+ Many projects chose to launch natively, such as VAPOR and FARM. Cults formed around memecoins like CATBAL and PIP
Projects integrated Hyperliquid:
+ Bridges: deBridge, Synapse, HyBridge
+ Analytics: DEX Screener, Velo, ASXN, PURR Burn / HYPE Burn, Coinalyze, HyperDash, HyperScanner, Hypervisor
+ Trading terminals: Insilico, Sandwich, Tealstreet, ChainPro, Newsly
+ Trading software: CCXT, Hummingbot, Katoshi
+ Trading apps and aggregators: Okto, RageTrade, Vooi
+ Copytrading: STFX, Copin
+ Notifications: Notifi, Push
+ Portfolio trackers and journals: Octav, Tradestream
+ And many more. Note: This only includes mainnet deployments. This does not include the many projects already building on the testnet HyperEVM
Grassroots initiatives took off:
+ HypurrCo, a community-led collective that organized events and spread awareness about the ecosystem
+ HyperActive, an investor syndicate supporting early stage projects building on Hyperliquid
+ Hyperliquid KR, a passionate community of Korean users
+ And many more community-led regional groups
Quantitatively, a lot changed since 2023:
+ $1B 24h ATH volume to $15B (15x)
+ $178M open interest to $4.3B (24x)
+ $56M TVL to $2.1B (37x)
+ 31k users to 300k (9x)
+ 100 perps to 158 perps and 128 native spot assets
+ 24h revenue from trading fees and spot auctions exceeded $3.5M
Thank you to all the teams who played a part in Hyperliquid’s growth.
The genesis event for HYPE will occur at 07:30 UTC on November 29.
Hyperliquid has grown to include the largest decentralised exchange by volume, open interest, and active users. Liquidity rivals the top centralised exchanges. The user experience bridges the seamless trading on CEXs with the self-custodial ideals of a fully onchain DEX. Hyperliquid represents the ethos of crypto and decentralised finance, with the technical innovations needed to bring all finance onchain without sacrifices.
While Hyperliquid has come a long way, there is much further to go. Over the past year, the scope of Hyperliquid has expanded from a DEX to a full financial system.
1. At its base, Hyperliquid is a performant, modern L1. Powered by HyperBFT, a highly optimised proof of stake consensus algorithm, disparate nodes can achieve consensus at 200k transactions per second with ~0.2 second time to finality. As the native token, HYPE will be the staked asset securing HyperBFT.
2. The perpetuals and spot DEX are examples of native components built into Hyperliquid. These components are optimised high-throughput financial primitives with which users and smart contracts can interact. For example, HYPE/USDC will be traded on the native spot order book.
3. The HyperEVM will bring full programmability to native components and general-purpose onchain state alike. HYPE will be the gas token of the HyperEVM.
4. The community includes an ever-growing set of passionate and talented builders. Hyperliquid will serve as the infrastructure layer for the next generation of trustless and performant finance built by the community. Unlike other chains, Hyperliquid features onchain monetization for user applications that is built directly into the protocol. As the native asset of the protocol, HYPE will be a crucial building block for defi applications.
The HYPE genesis event marks a key milestone in the journey, unlocking core functionality at every level of the stack.
For more information, see the blog post: https://t.co/e9aznniUwp
@IamNomad@hypurr yeah, only open interest, but not volume.
e.g., currently HL has around 5k BTC open interest, it's represents ~2.5k BTC long and ~2.5k BTC short positions.