TLDR
Hyperliquids HLP took about a $4.9 million loss after a coordinated POPCAT market manipulation that created a large fake buy wall, then pulled it to trigger cascade liquidations, leaving HLP with bad debt per a market report.
- The attacker split roughly $3 million USDC across 19 wallets, built $2030 million POPCAT longs, then yanked a ~$20 million buy wall at $0.21, triggering liquidations per an exchange coverage.
- HLP, the community vault that backstops liquidations, absorbed the deficit and closed positions, realizing about a $4.9$5.0 million hit per a DeFi outlet.
- This was market manipulation, not a protocol exploit; Hyperliquid briefly paused HLP operations to unwind risk and restore normal function per the platform update.
Deep Dive
1. Manipulation Playbook
The loss was caused by a deliberate fake demand then flush sequence centered on POPCAT.
- An attacker withdrew around $3 million USDC, dispersed it to 19 wallets, and opened $2030 million in leveraged longs, then placed a ~$20 million buy wall at $0.21 to lure liquidity per a news report.
- When the buy wall vanished, POPCAT fell rapidly, causing cascading liquidations across those accounts and others that chased the wall per an exchange coverage.
Perps on thin-liquidity meme assets are highly susceptible to spoofing and slippage. Large staged orders can manufacture momentum and then collapse it.
2. Why HLP Ate The Loss
HLP is designed to absorb liquidation shortfalls when collateral is insufficient; that mechanism made its vault the final stop.
- As positions liquidated, remaining exposure and bad debt were socialized to HLP, which then manually closed the positions, realizing roughly $4.9$5.0 million in losses per a DeFi outlet and a market report.
- The attackers own $3 million was wiped, suggesting the motive was structural stress rather than direct profit per a news analysis.
HLP depositors bear tail risk from liquidation deficits. Yield is not free; it comes with event-driven drawdown risk, especially on low-depth markets.
3. Operational Response And Scope
The incident did not involve a code or custody breach; it was a market event.
- Hyperliquid briefly paused deposits and withdrawals to manage the unwind, including an emergency bridge lock that was later lifted, with no downtime and funds safe per the platform update.
- Multiple outlets confirmed this was market manipulation, not a protocol exploit per a market summary.
Controls focused on position wind-down and bridge safeguards worked, but the core exposure stemmed from market structure (leverage on thin assets) rather than software failure.
Conclusion
The HLP loss was driven by a manufactured POPCAT rally and abrupt order withdrawal that forced liquidations, leaving HLP to absorb the deficit. The event underscores the trade-off in decentralized perps: offering leverage on thin-liquidity tokens creates exploitable setups. If you participate in HLP-style vaults, monitor asset depth, leverage limits, and concentration to gauge tail risk during manipulation-prone windows.
CoinsKid.Com