TLDR
Hyperliquids bad debt was caused by a coordinated manipulation of the POPCAT market that forced its HLP vault to absorb losses after cascading liquidations, not a code exploit or hack reported by CoinDesk.
- An attacker used about $3 million in USDC across 19 wallets to build a $2030 million POPCAT long, then pulled a $20 million buy wall at $0.21 to trigger a crash covered by Yahoo Finance.
- When prices collapsed, collateral was exhausted and Hyperliquids HLP liquidity vault ate roughly $4.9 million in bad debt explained by The Defiant.
- Media called it the platforms third similar manipulation episode in 2025, highlighting thin?liquidity perp risks on memecoins noted by CCN.
Deep Dive
1. Attack Mechanics
The attacker withdrew ~$3 million from OKX, split funds into 19 wallets, opened a leveraged POPCAT long, and erected a ~$20 million buy wall around $0.21 to simulate demand. Once other traders engaged, the wall was pulled, the price plunged, and liquidations cascaded CoinDesks report. Yahoo detailed the same playbook and timing, including the buy wall and its removal Yahoo Finance summary.
Watch for manufactured buy walls and synced wallets on thin markets. These can flip rapidly and turn into forced liquidations.
2. Why Bad Debt Appeared
Hyperliquids HLP vault is designed to absorb liquidation shortfalls when user collateral is insufficient. After the POPCAT crash, the vault inherited positions and closed them at losses, resulting in about $4.9 million of bad debt. The team briefly paused deposits/withdrawals to stabilize and manually manage exposure; no smart contracts were compromised The Defiant coverage. Independent analysis framed the weakness as market?structure, not codethin liquidity plus leverage overwhelmed the vault CoinJournal analysis.
On perp DEXs, bad debt can arise from liquidation engine deficits when leveraged positions unwind faster than collateral and market depth can cover.
3. Context And Recurrence
Coverage noted this is the third similar manipulation episode for Hyperliquid in 2025, underscoring vulnerability when offering high?leverage perps on low?cap, thin?depth assets CCN recap. Analysts also flagged price manipulation as a rising attack vector across DeFi this year, especially in meme markets without circuit breakers AMBCrypto context.
Repeated manipulation attempts are more likely on tokens with shallow books and social?driven flows; tighter risk controls and venue depth matter for resilience.
Conclusion
Hyperliquids bad debt came from a deliberate POPCAT price manipulation that engineered a liquidation cascade, leaving the HLP vault with losses. The episode highlights the structural risk of leveraged perps on thin?liquidity memecoins: spoofed demand can vanish, collateral can be exhausted, and socialized vaults absorb deficits. For users, the key is venue depth, risk controls, and caution with high?leverage products on low?cap assets.
CoinsKid.Com