What caused Hyperliquid vault losses?

TLDR

Hyperliquids vault losses were caused by a coordinated manipulation of the POPCAT market that triggered cascading liquidations, leaving the HLP vault with about $4.9$5.0 million in bad debt per a media report.

1. The attacker burned $3 million to force liquidations; HLP absorbed the deficit per a market update.
2. Tactics included splitting funds across 19 wallets, $26$30 million in longs, and a $20 million buy wall at $0.21%%CKPROTECTED6%% per a media summary.
3. This was not a code exploit. It exposed thin?liquidity and leverage risks in automated LP vaults per an analysis.

Deep Dive

1. Orchestrated Manipulation

A single actor withdrew $3 million USDC from OKX, split it across 19 wallets, and opened $26$30 million in leveraged POPCAT longs before building a synthetic $20 million buy wall near $0.21%%CKPROTECTED9%%. When the wall was pulled, price collapsed and positions were liquidated per a detailed recap and a news brief.

• The attackers own $3 million stake was wiped, indicating intent to inflict structural losses rather than profit per a report.
• POPCATs rapid drop forced liquidations across the venue, amplifying impact per a media update.

2. Why HLP Took the Loss

Hyperliquids Hyperliquidity Provider vault acts as a backstop for liquidation deficits. When collateral is exhausted during cascades, HLP socializes the remaining bad debt across LPs, which is how the ~$4.9$5.0 million hit materialized per a market report.

• Media described HLP as the safety net that absorbed losses after collateral was gone per a recap.
• The event highlighted the vaults exposure to tail?risk events when leverage meets thin liquidity per an analysis.

3. Design Risk, Not a Hack

Reports say no smart contracts or core infrastructure were exploited. The losses stemmed from market structure dynamics (leverage, spoofing, thin depth) and the vaults role in absorbing deficits per an overview.

• Coverage framed this as peak degen warfare rather than a protocol exploit per a report.
• A brief precautionary pause of certain bridges was noted around the incident, then resumed, reinforcing the non?hack narrative per a media summary.

Conclusion

Hyperliquids vault losses were driven by a deliberate POPCAT market manipulation that engineered a squeeze then collapse, exhausting collateral and pushing bad debt into the HLP vault. The episode underscores that automated LP vaults can face tail risk when leverage meets thin liquidity, making risk controls and depth as critical as yield.