
A coordinated strike against decentralized derivatives platform Hyperliquid resulted in nearly $5 million in losses from its Hyperliquidity Provider (HLP) vault.
Key Takeaways:
An attacker burned $3 million to manipulate Hyperliquid’s POPCAT market. The move caused nearly $5 million in losses to the platform’s Hyperliquidity Provider vault. The exploit involved splitting funds across 19 wallets and opening $26 million in leveraged longs, followed by a fake $20 million buy wall that triggered cascading liquidations.The loss came after an unknown trader deliberately sacrificed $3 million to manipulate the POPCAT market and trigger a cascade of liquidations.
Blockchain analytics firm Lookonchain reported on Thursday that the sequence began when the attacker withdrew 3 million USDC from the OKX exchange, distributing it across 19 new wallets.
The trader then deployed the funds on Hyperliquid to open more than $26 million in leveraged long positions tied to HYPE, the protocol’s POPCAT-denominated perpetual contract.
The attacker proceeded to construct a $20 million buy wall near the $0.21 mark, creating an illusion of strong demand that briefly drove the market higher.
When the wall suddenly disappeared, price support evaporated, liquidity dried up, and dozens of overleveraged positions were automatically liquidated.
Hyperliquid’s vault was left absorbing the fallout, recording a $4.9 million deficit, one of the largest single-event losses in its history.
Ironically, the manipulator’s own $3 million stake was entirely erased. Analysts say this points to a motive of structural disruption rather than financial gain, marking the event as a deliberate stress test on Hyperliquid’s liquidity architecture.
Unlike conventional market exploits designed for profit, this maneuver appeared to be aimed at exposing systemic weaknesses in automated liquidity provider vaults.
Community reactions ranged from disbelief to dark humor. One observer called it the “costliest research ever,” while another likened it to “performance art with real money.”
Others described the episode as “peak degen warfare,” underscoring the risks of operating perpetual markets without strong liquidity buffers. “Perp markets are open season for anyone willing to light money on fire,” one user wrote on X.
In response to the turmoil, community member Conor noted that Hyperliquid temporarily paused withdrawals, citing the platform’s “vote emergency lock” function, a safeguard mechanism to prevent further manipulation.
Withdrawals resumed roughly an hour later, though the team did not officially connect the pause to the POPCAT-related event.
As reported, Hyperliquid Strategies has filed with the US Securities and Exchange Commission (SEC) to raise up to $1 billion, with plans to use the proceeds to expand its crypto holdings and acquire additional HYPE tokens.
The move marks a major step in the firm’s push to strengthen its presence in the decentralized derivatives market.
Chardan Capital Markets is advising on the offering, which includes up to 160 million shares of common stock.
The company will emerge from the merger between Sonnet BioTherapeutics and Rorschach I LLC, a SPAC deal that will form the new Hyperliquid Strategies entity.
Upon completion, David Schamis will serve as CEO and Bob Diamond, former Barclays chief, will take the role of chairman.
News of the filing drove HYPE token prices up 8% to $37.73, even as the wider crypto market declined slightly.
Once the merger closes, Hyperliquid Strategies is expected to hold 12.6 million HYPE tokens worth about $470 million, alongside $305 million in cash set aside for further acquisitions, making it the largest corporate holder of HYPE.
The post Attacker Burns $3M to Drain $5M From Hyperliquid Vault in Coordinated Attack appeared first on Cryptonews.