Papertrade has begun tightening its trading limits after two wallets were accused of manipulating the Hyperliquid price reference used by the newly launched synthetic perpetuals protocol while holding much larger leveraged positions on Papertrade itself.
The allegations emerged shortly after Papertrade began trading on HyperEVM on October 10. On-chain observer boblob said two wallets were using trades of roughly $20 million on Hyperliquid to move Ether’s best bid and offer by around 10 to 20 basis points while simultaneously holding Papertrade long positions with notional exposure reaching into nine figures.
Trader Rune subsequently highlighted the activity and pointed to Papertrade’s own documentation, which had already identified manipulation of Hyperliquid’s best bid and offer, or BBO, as a protocol-level risk.
The allegation initially remained unverified. Papertrade has now acknowledged that a manipulation attempt occurred, although the team disputes the idea that the episode exposed an unforeseen flaw in the protocol’s underlying design.
Papertrade said the attempt targeted BTC and ETH pricing through Hyperliquid’s BBO and argued that the immediate vulnerability resulted from unusually loose position limits during the protocol’s launch phase. The team said those parameters were deliberately relaxed while the platform was dealing with heavy launch congestion and are now being tightened both on-chain and through approved transaction relayers.
Why Moving Hyperliquid by 10 Basis Points Could Matter So Much
The core issue is the difference between the amount of capital required to influence Papertrade’s reference price and the amount of exposure a trader can hold against that price.
Papertrade does not maintain a conventional order book where buyers and sellers directly match against one another. Instead, users trade synthetic BTC and ETH positions against the protocol’s liquidity pool.
The entry and exit price for those positions is derived from the midpoint between the best bid and best offer on Hyperliquid.
That creates a potentially powerful relationship between the two venues. If a trader can spend roughly $20 million moving the visible ETH quote on Hyperliquid by 0.1% to 0.2% while holding hundreds of millions of dollars of notional Papertrade exposure, a relatively small movement in the reference market can theoretically produce a much larger profit on the synthetic position.
The allegation does not mean Hyperliquid itself was compromised.
Hyperliquid’s native mark-price system uses multiple inputs designed to reduce manipulation risk, including its oracle price, local order-book information and prices from external perpetual-futures venues. Papertrade made a separate design choice to reference Hyperliquid’s BBO midpoint for its own synthetic contracts.
That distinction matters because the alleged strategy targeted Papertrade’s dependence on an external market quote rather than a failure of Hyperliquid’s liquidation or margin system.
Papertrade Says the Manipulation Scenario Was Already Known
Papertrade’s response is unusually direct.
The team said manipulation attempts of this kind were considered during the six months spent designing the mechanism and argued that the incident occurred because position limits were kept particularly loose during the initial launch.
According to Papertrade, imposing stricter limits during the heaviest period of launch congestion would have worsened an already slow queuing experience.
The protocol also argues that its queue provides a degree of natural protection. Because traders cannot know exactly when an opening or closing transaction will be confirmed, manipulating an external reference price becomes riskier than it would be if execution were guaranteed at a predictable moment.
Papertrade’s stated objective is therefore not to make manipulation physically impossible. The goal is to calibrate position sizes and other parameters so that manipulating Hyperliquid becomes economically unattractive.
That is effectively a market-structure problem rather than a conventional smart-contract security problem.
The Launch Was Built for Extremely Large Exposure
The size of the positions involved needs to be viewed against Papertrade’s unusually aggressive launch configuration.
The protocol opened after more than 11,000 addresses deposited roughly $138 million and markets quickly accumulated enormous synthetic trading activity. Papertrade advertises leverage of up to 1,000x and launched with position and open-interest parameters designed to accommodate substantial trading demand.
That type of leverage makes exposure controls particularly important.
A trader does not need hundreds of millions of dollars of capital to create hundreds of millions of dollars of notional exposure. When leverage is extremely high, small changes in the reference price become economically significant very quickly.
This is why other derivatives venues routinely alter maximum leverage and position brackets as liquidity changes. MEXC, for example, recently cut maximum leverage and changed funding parameters on one of its perpetual markets as part of a risk-control adjustment.
Binance has similarly tightened funding controls across perpetual contracts when market conditions required different limits.
Papertrade’s problem is more unusual because its risk parameters interact directly with liquidity on another venue.
External Price References Create an Economic Security Problem
This incident highlights a category of risk that can be harder to solve than a coding vulnerability.
If a smart contract contains a bug, developers can often identify the faulty logic and patch it.
A market-price reference cannot simply be patched in the same way. Every tradable market can theoretically be moved if enough capital is deployed.
The security question becomes whether moving the reference market costs more than the profit available from exploiting the position somewhere else.
That is why position limits matter so much.
Imagine a trader can move the reference price by 0.15% at a temporary market-impact cost of several hundred thousand dollars. If the trader can simultaneously hold a $300 million synthetic position elsewhere, the gross value of a 0.15% favorable move is $450,000 before fees, impact and other costs.
Increase the permitted synthetic exposure and the economics become more attractive. Reduce the maximum exposure and the same manipulation attempt may stop making sense.
This is the logic behind Papertrade’s response that manipulation is always theoretically possible but should be configured to have negative expected value.
Hyperliquid’s Depth Is Both the Feature and the Dependency
Using Hyperliquid as an external reference is understandable.
Its order book has become deep enough to support extraordinarily large derivatives positions. Dave Finances recently tracked nearly $1 billion of Hyperliquid short exposure associated with Abraxas Capital, illustrating how much institutional-scale positioning the venue can now accommodate.
That liquidity makes Hyperliquid attractive as a source of real-time market pricing.
But liquidity is not the same thing as an immutable oracle.
The best bid and best offer represent actual executable orders sitting at the top of an order book. By definition, they can change when someone submits, removes or executes sufficiently large orders.
A protocol referencing that information therefore inherits part of the market structure of the venue producing it.
This is an increasingly important issue as DeFi products become more composable. New platforms can use established venues as liquidity or pricing infrastructure instead of building every component themselves. That can accelerate product development, but it can also create dependencies that traders learn to arbitrage.
The wider move toward new forms of on-chain execution and liquidity aggregation means these dependencies are likely to become more common rather than less.
The Key Question Is Whether the Traders Actually Extracted More Than Manipulation Cost
The most important unanswered question is profitability.
The wallets’ alleged trading pattern is suggestive, and Papertrade has now acknowledged a manipulation attempt. But that is not the same thing as demonstrating a successful exploit with a verified loss amount.
To establish that, researchers would need to reconstruct the wallets’ Hyperliquid execution costs, Papertrade entry and exit prices, fees, realized profits, losses and any positions that remained open during the price movements.
The economics could look very different depending on how much capital was actually required to move the BBO and whether the Papertrade positions could be exited at the manipulated reference level.
Papertrade’s own defense rests heavily on that uncertainty. If execution timing is unpredictable and manipulating Hyperliquid exposes the attacker to large adverse moves, then the strategy can become dangerous even when the nominal Papertrade position appears enormous.
Papertrade Is Running a Live Stress Test of Its Risk Model
The incident is significant because it happened almost immediately after launch.
That does not automatically mean Papertrade’s model is broken. New derivatives markets frequently require parameter adjustments once theoretical assumptions meet real traders with real capital.
In fact, sophisticated traders actively searching for weak points can reveal risk faster than months of simulations.
But Papertrade’s 1,000x leverage and dependence on an external BBO leave little room for loose controls.
The protocol’s response essentially concedes that launch-stage parameters made the attempted strategy possible while arguing that the underlying mechanism can remain viable once position limits are properly calibrated.
That claim is now testable.
If the same wallets, or new ones, can continue moving Hyperliquid by a few basis points and reliably extract larger profits from Papertrade, tighter limits will have failed to solve the economic vulnerability.
If the activity disappears because the maximum Papertrade exposure is no longer large enough to justify the cost and risk of moving Hyperliquid, the episode may prove to be an early-stage parameter problem rather than a fundamental design failure.
For a protocol built around enormous leverage, that distinction will determine whether its pricing model can survive traders doing exactly what leveraged markets incentivize them to do: search relentlessly for the cheapest possible way to move risk in their favor.
Johan Shamshad is a financial markets writer at Dave Finances covering cryptocurrencies, trading platforms, brokers, fintech, financial regulation, and developments across global markets. He previously worked at Gulf News, adding newsroom experience to his coverage of fast-moving financial and digital-asset markets.
His work focuses on identifying market-moving events, company developments, regulatory changes, product launches, and shifts in trading and financial infrastructure.
Johan contributes news and analysis designed to help readers understand not only what happened, but why a development matters and how it may affect the wider financial landscape. You can reach out to him via his social media accounts:
Linkedin: https://www.linkedin.com/in/johan-shamshad-742851262/
X: https://x.com/Yasmine_FX
Investing: https://www.investing.com/members/contributors/279781574