Is Hyperliquid safe? What can go wrong
Short answer: Hyperliquid is self-custodial, but it isn't risk-free. Withdrawals need sign-off from its own validators (Bridge2.sol), it paused deposits and withdrawals during the POPCAT attack on 12 Nov 2025 (The Block), and 4 manipulation or oracle events since the JELLY squeeze in March 2025 (The Block) ended in losses for its HLP vault, auto-deleveraged traders or a validator-forced settlement. Perpd scores it 72/100 (Some known risks).
Hyperliquid risk at a glance
| Question | What we found |
|---|---|
| Who holds your funds? | You do. Hyperliquid is "non-custodial" (Hyperliquid) and runs its own L1, not an Ethereum rollup (Hyperliquid Docs). |
| Who approves withdrawals? | 2/3 of validator power (Bridge2.sol), from the top 27 validators by stake (Hyperliquid Docs). |
| Who covers bad liquidations? | HLP, a community-owned vault (Hyperliquid Docs), then auto-deleveraging (Hyperliquid Docs). |
| Who's barred? | US persons, Ontario and sanctioned regions (Datawallet). |
| Base fees | 0.045% taker, 0.015% maker as of 14 Nov 2026 (Hyperliquid Docs). Fees change. |
| Perpd score | 72/100 (Some known risks) |
Who holds your money on Hyperliquid?
You trade from your own wallet and nobody else holds your keys, but moving USDC out depends on Hyperliquid's validators. The Arbitrum bridge contract sets the rules (Bridge2.sol): - 2/3 of validator power must sign each withdrawal and any validator-set change. - Signed withdrawals wait out a dispute period, when approved "lockers" can vote to freeze the bridge. The freeze takes effect once enough of them vote. - Reopening a frozen bridge takes a quorum of validators' cold-wallet signatures.
That Zellic-audited bridge now holds under 10% of HyperCore's USDC. Most USDC is minted natively, and the docs point to Circle's CCTP for Arbitrum transfers (Hyperliquid Docs), a rollout Circle began on 16 Sep 2025 (The Block). Either way, the chain must process your withdrawal, and we found no forced exit that works without the validators.
Has Hyperliquid ever paused withdrawals?
Yes. On 12 Nov 2025, from about 11:22 a.m. ET, deposits and withdrawals were paused for "maintenance" during the POPCAT attack, and The Block didn't report for how long (The Block).
On 29 Jul 2025, an API outage of over 30 minutes left some traders unable to close positions, though the chain kept running. Hyperliquid promised automatic refunds (The Block).
What incidents has Hyperliquid had since 2025?
| Date | Market | What happened | Outcome |
|---|---|---|---|
| 26 Mar 2025 | JELLY | A short liquidated into HLP was squeezed to a $13.5M unrealized loss. Validators delisted JELLY and settled it at $0.0095, against a $0.50 oracle price (CoinDesk). | The Hyper Foundation promised to make users whole, except flagged addresses (The Block). |
| 29 Jul 2025 | All | API outage (above). | Automatic refunds promised. |
| 12 Nov 2025 | POPCAT | An on-chain analyst alleged a $3M, 19-wallet scheme: a roughly $30M long behind a $20M buy wall that was then pulled (The Block). | HLP lost $4.9M; deposits and withdrawals paused. |
| Early Apr 2026 | FARTCOIN | About 145M FARTCOIN held across multiple wallets unwound in thin liquidity. The owner lost about $3M, per PeckShield and Lookonchain data cited by Cointelegraph (Cointelegraph). | ADL passed about $849K of gains to opposing shorts. PeckShield put HLP's loss at about $1.5M over 24 hours; Hyperliquid hadn't confirmed that figure. |
| 27 Jul 2026 (23:00 UTC, 28 Jul in Seoul) | xyz:SKHYNIX | A NextTrade pre-market print 29.96% below the prior close fed the oracle. Galaxy Research says the mark price fell 18.7% (Galaxy Research); Nexus Mutual says the oracle fell 15.6%. About 960 long accounts were liquidated: $57.4M of positions by Nexus Mutual's count (Nexus Mutual), or $57M to $80M by analysts' estimates cited by Galaxy. | ADL closed about 100 shorts, realizing about $10.8M of profit, according to Nexus Mutual. Trade.xyz pledged to cover eligible losses (Cointelegraph). |
SK Hynix is a HIP-3 market: Trade.xyz runs it with its own price feed (Cointelegraph), but Hyperliquid's liquidation and ADL backstop closed the positions (Nexus Mutual), so Perpd counts it. Payouts were still pending on 31 Jul (Galaxy Research), and we couldn't confirm the final amount. More: Where to trade stock perps onchain.
What is HLP, and who takes the losses?
HLP is a community-owned vault that makes markets, runs liquidations, supplies USDC in Earn and takes a share of fees. Anyone can deposit and share its PnL, with a 4-day lock-up (Hyperliquid Docs). If a trader's equity falls below 2/3 of maintenance margin before the order book can close them, HLP's liquidator vault takes the position and its margin (Hyperliquid Docs).
So losses land on the liquidated trader first, then on HLP depositors when an inherited position keeps falling (POPCAT cost $4.9M), then on profitable traders through ADL if an account still goes negative. The Hyper Foundation pays only when it chooses to, as after JELLY.
How does auto-deleveraging work on Hyperliquid?
ADL kicks in when an account or an isolated position goes negative. Hyperliquid ranks traders on the other side by (mark price / entry price) × (notional position / account value), and closes the top of that queue at the previous mark price (Hyperliquid Docs).
So a big winner in a small market can be closed at a moment you didn't choose, as shorts were in FARTCOIN and SK Hynix. Our ADL explainer compares other DEXs.
Do HYPE unlocks matter?
About 23.8% of HYPE's 1B supply goes to core contributors. After a 1-year cliff, distributions began with about 1.75M HYPE on 29 Nov 2025 and happen, "if any", on the 6th of the month. The team says "the vesting is not linear" and hasn't published the full schedule (The Block).
So trackers and reality can split. Before 6 Nov 2026, a team member said on Discord that 180,000 HYPE would go out, against about 9.92M on trackers' schedules (Cryptoticker). We haven't confirmed that on-chain, the rest can still move later, and the next possible date is 6 Dec 2026.
That matters most to HYPE holders, not to how your USDC is held.
Who can't use Hyperliquid?
Datawallet's 2 Oct 2026 summary of the Terms of Use, updated 15 Jun 2026, lists these restrictions (Datawallet): - US: barred, including US citizens abroad (Section 1.5). - Canada: Ontario is named; the rest of Canada isn't listed as barred. - Sanctioned regions: such as Cuba, Iran, North Korea, Syria, Crimea, Donetsk and Luhansk. - UK: supported. EU and India: not addressed.
Hyperliquid Corp runs the interface, and there's no KYC. We couldn't read the script-loaded terms page ourselves, so treat this as a summary. It's information, not legal advice; see Which perp DEXs block the US, UK, India and Canada?.
What should you check before you deposit?
- Your country. Read the current terms and check whether perps are legal where you live.
- Your exit route. Know which USDC you hold and where it withdraws to, and test with a small withdrawal first.
- The market. Hyperliquid perp, or HIP-3 market with its own price feed? Check open interest and depth: every market incident above hit a thin memecoin or a stock perp at its home market's open.
- Your liquidation price. A backstop liquidation takes your margin, and ADL can close a big winner in a small market.
- HLP terms, if you deposit. You share its losses, and withdrawals wait 4 days after your latest deposit.
How does Perpd score Hyperliquid?
Perpd scores Hyperliquid 72/100 (Some known risks):
| Factor (weight) | Score (out of 10) | What drives it |
|---|---|---|
| Exit risk (20%) | 4 | Validator-signed withdrawals, no Ethereum escape hatch; the Nov 2025 pause is now outside our 12-month window |
| Security record (15%) | 9 | Zellic-audited bridge, no smart-contract exploit found |
| Liquidation & ADL (15%) | 6 | HLP backstop; FARTCOIN and SK Hynix in 2026, POPCAT in Nov 2025 |
| Execution check (15%) | not scored yet | From public order-book snapshots |
| Volume quality (10%) | 10 | $226.25B 30-day volume, $7.712B open interest (DefiLlama); no wash-trading flags |
| Access & legal (10%) | 10 | Clear restricted list, named operator, no regulator action found |
| Token, unlocks & team (10%) | 8 | Insiders under 30%, but no public schedule |
| Cost (5%) | 6 | 0.045% base taker fee |
Method: How Perpd scores perp DEXs. All 10 DEXs: Perp DEX risk scorecard: 10 DEXs ranked by risk. Weighing a switch? See Best Hyperliquid alternatives, ranked by risk.
Sources
- Bridge2.sol, Hyperliquid on GitHub, checked 14 Nov 2026
- Hyperliquid pauses deposits and withdrawals amid POPCAT trading scheme speculation, The Block, 12 Nov 2025
- Hyperliquid delists JELLYJELLY memecoin amid whale manipulation fiasco, The Block, 26 Mar 2025
- Hyperliquid app, site description, checked 14 Nov 2026
- Bridge, Hyperliquid Docs, checked 14 Nov 2026
- Running a validator, Hyperliquid Docs, checked 14 Nov 2026
- Protocol vaults, Hyperliquid Docs, checked 14 Nov 2026
- Auto-deleveraging, Hyperliquid Docs, checked 14 Nov 2026
- Hyperliquid supported and restricted countries, Datawallet, updated 2 Oct 2026
- Fees, Hyperliquid Docs, checked 14 Nov 2026
- Circle launches USDC natively on Hyperliquid, The Block, 16 Sep 2025
- Hyperliquid plans automated refunds for affected users following API outage, The Block, 30 Jul 2025
- Hyperliquid delists JELLYJELLY after vault squeezed in $13M tussle, CoinDesk, 26 Mar 2025
- Trader loses $3M as leveraged FARTCOIN position unwinds on Hyperliquid, Cointelegraph, 9 Apr 2026
- Hyperliquid, TradeXYZ and oracle liquidations, Galaxy Research, 31 Jul 2026
- Trade.xyz to cover SK Hynix perp liquidation losses tied to price anomaly, Cointelegraph, 29 Jul 2026
- Liquidations, Hyperliquid Docs, checked 14 Nov 2026
- Hyperliquid Labs set for next HYPE token payout as 1.2 million tokens unstake, The Block, 29 Dec 2025
- Hyperliquid team unlock: 180,000 HYPE, Cryptoticker, 5 Nov 2026
- Hyperliquid Perps, DefiLlama, checked 14 Nov 2026 (figures undated on the page)
- xyz:SKHYNIX flash crash on Hyperliquid: incident report, Nexus Mutual, 3 Aug 2026
FAQ
Is Hyperliquid custodial?
No. You trade from your own wallet and keep your keys. But your funds sit on Hyperliquid's own chain, and a withdrawal needs signatures from 2/3 of validator power. We found no forced exit to Ethereum if the validators stop.
Has Hyperliquid ever frozen withdrawals?
Yes. Deposits and withdrawals were paused 'for maintenance' on 12 Nov 2025 during the POPCAT attack, and The Block did not report for how long. A 29 Jul 2025 API outage also left some traders unable to close positions for over 30 minutes.
Who pays when the HLP vault loses money?
HLP depositors. HLP is a community-owned vault that takes over failed liquidations, so it absorbed a $4.9M loss in the POPCAT attack. If an account still goes negative, ADL closes profitable traders on the other side.
Can US residents use Hyperliquid?
No. Hyperliquid's terms bar US residents and US citizens, residents of Ontario in Canada, and sanctioned regions. Check the current terms and your local rules before you trade.
What is Hyperliquid's risk score?
Perpd scores Hyperliquid 72/100 (Some known risks). Exit risk and liquidation fairness pull it down; volume quality and access score well.
Related
- Where to trade stock perps onchainWhich onchain venues list stock perps in Nov 2026, how each prices them after hours and at weekends, max leverage, and the SK Hynix flash crash.
- What is auto-deleveraging (ADL)? Real cases from 2025-26How auto-deleveraging works, where backstop vaults like HLP, JLP and GM fit in, and verified ADL cases on perp DEXs from 2025-26.
- Which perp DEXs block the US, UK, India and Canada?Restricted countries, KYC and legal entity for 10 perp DEXs, taken from each terms page, plus India's FIU-IND and crypto tax rules. Nov 2026.
- Best Hyperliquid alternatives, ranked by risk9 Hyperliquid alternatives ranked by risk score, from Jupiter Perps to Aster: what each is, why traders pick it and its main red flag.
Scores are never for sale. This page has no affiliate links and no paid placements. Not financial advice: perps are leveraged and you can lose more than you deposit.