Hyperliquid comes under scrutiny after Solidus Labs flags $170M in suspect oil orders — questions of spoofing and regulatory oversight follow
Solidus Labs has flagged more than $170 million in suspicious oil-linked perpetual orders on Hyperliquid during the energy-market turbulence in March. Blockchain sleuth Lookonchain says the activity involved two accounts between March 8–10 in which very large orders were repeatedly posted and then canceled, while executions occurred on the opposite side of the order book.
Key findings
- Solidus estimates the trader’s three-day profit at roughly $119,000.
- The total value of canceled orders was about 30 times the value of opposite-side executions.
- One March 9 example: roughly $17 million in canceled sell orders alongside just $425,000 in completed purchases.
- Solidus described the pattern as having spoofing characteristics, but it did not assert intent.
Hyperliquid’s response
Hyperliquid Labs noted that all orders, cancellations and transactions are recorded on-chain and therefore available for review by market participants and regulators. The platform emphasized transparency while not disputing the on-chain activity.
How Hyperliquid markets are structured
Hyperliquid’s HIP-3 framework assigns markets to independent deployers who define contract specs, oracles, reference prices, leverage limits and settle markets when required. Each deployment maintains separate margining, order books and operator settings. The deployer-controlled settlement function can halt trading, cancel outstanding orders and settle positions at the current mark price.
Governance and penalties
A validator process can penalize deployers by slashing staked HYPE for conduct that threatens protocol correctness, availability or performance — including irregular inputs that exploit system limits. The documentation notes that technical slashing does not distinguish between malicious intent, operator error, or compromised keys.
Permissioned markets and product rollouts
Hyperliquid has previously been testing optional permissioned markets, allowing deployers to maintain lists of approved participants and appoint sub-deployers to handle access. Existing public markets could remain unchanged under the early design. In later updates, Hyperliquid/Payward outlined proposed U.S. markets using optional HIP-3* permissioning, with testnet specs and plans for regulatory approval.
Regulatory backdrop: spoofing guidance and energy perpetuals
- The CFTC’s May 2013 guidance defines spoofing as bidding or offering with the intention to cancel before execution, requiring intent beyond recklessness and excluding good-faith cancellations. Regulators evaluate market conditions, trading patterns, fill characteristics and related facts; a partially executed order does not automatically shield remaining activity from scrutiny.
- CME Group describes spoofing-like behavior as placing large orders to create a false impression of buying or selling pressure while taking the opposite side, but allows two-sided markets with unequal quantities when orders reflect genuine transactions.
- In June, the CFTC launched a consultation on energy perpetuals—contracts tied to physically delivered or storable commodities—seeking a data-driven record to assess continuous trading and the potential listing of perpetual energy contracts.
Industry push for regulated energy perpetuals
On Aug. 26 Hyperliquid Policy Center and trade[XYZ] requested regulated energy perpetuals for WTI crude, Brent and Henry Hub gas. Their proposals called for a technology-neutral framework and safeguards on leverage, funding and liquidation disclosures. They urged regulators to permit stablecoins and tokenized traditional collateral as eligible margin for cleared derivatives, to clarify how business-day rules apply to continuously running venues, and to allow on-chain execution, margining, clearing, settlement and recordkeeping where core regulatory principles are met.
Supporting data and product design
Hyperliquid’s research compared weekend crude perpetual prices to the subsequent reopening of benchmark futures and found that in nearly 75% of sampled closures, the perpetual finished closer to the Sunday reopening price than to the benchmark’s Friday close. The study reported no statistically significant deterioration in CME WTI reopening quality after the crude perpetual launched. The groups argued dated futures would remain necessary for physical settlement and month-specific exposure, while perpetuals—no expiry—use recurring funding to converge to a reference price.
Proposed U.S. market operating model
Payward’s proposed structure (announced in September and updated Oct. 26) envisions regulated markets administered by Bitnomial (an exchange and clearinghouse) with NinjaTrader Clearing holding customer accounts. Market participants would need onboarding and to appear on both entities’ allowlists. Payward said it would “hold the keys and carry the regulatory obligations,” with new contracts listed under Bitnomial Exchange rules, subject to regulatory approval.
What this means
The March pattern on Hyperliquid has renewed questions about potential spoofing in on-chain perpetual markets and how decentralized market architecture intersects with regulatory definitions and enforcement. The protocol’s deployer-based model and validator penalties give the network tools to react, but intent and legal culpability remain matters for investigators and regulators to determine. As exchanges and regulators continue debating the framework for energy perpetuals, on-chain transparency may aid forensic review but also highlights how novel market structures test traditional surveillance and enforcement models.
Solidus Labs has flagged more than $170 million in suspicious oil-linked perpetual orders on Hyperliquid during the energy-market turbulence in March. Blockchain sleuth Lookonchain says the activity involved two accounts between March 8–10 in which very large orders were repeatedly posted and then canceled, while executions occurred on the opposite side of the order book.
Key findings
- Solidus estimates the trader’s three-day profit at roughly $119,000.
- The total value of canceled orders was about 30 times the value of opposite-side executions.
- One March 9 example: roughly $17 million in canceled sell orders alongside just $425,000 in completed purchases.
- Solidus described the pattern as having spoofing characteristics, but it did not assert intent.
Hyperliquid’s response
Hyperliquid Labs noted that all orders, cancellations and transactions are recorded on-chain and therefore available for review by market participants and regulators. The platform emphasized transparency while not disputing the on-chain activity.
How Hyperliquid markets are structured
Hyperliquid’s HIP-3 framework assigns markets to independent deployers who define contract specs, oracles, reference prices, leverage limits and settle markets when required. Each deployment maintains separate margining, order books and operator settings. The deployer-controlled settlement function can halt trading, cancel outstanding orders and settle positions at the current mark price.
Governance and penalties
A validator process can penalize deployers by slashing staked HYPE for conduct that threatens protocol correctness, availability or performance — including irregular inputs that exploit system limits. The documentation notes that technical slashing does not distinguish between malicious intent, operator error, or compromised keys.
Permissioned markets and product rollouts
Hyperliquid has previously been testing optional permissioned markets, allowing deployers to maintain lists of approved participants and appoint sub-deployers to handle access. Existing public markets could remain unchanged under the early design. In later updates, Hyperliquid/Payward outlined proposed U.S. markets using optional HIP-3* permissioning, with testnet specs and plans for regulatory approval.
Regulatory backdrop: spoofing guidance and energy perpetuals
- The CFTC’s May 2013 guidance defines spoofing as bidding or offering with the intention to cancel before execution, requiring intent beyond recklessness and excluding good-faith cancellations. Regulators evaluate market conditions, trading patterns, fill characteristics and related facts; a partially executed order does not automatically shield remaining activity from scrutiny.
- CME Group describes spoofing-like behavior as placing large orders to create a false impression of buying or selling pressure while taking the opposite side, but allows two-sided markets with unequal quantities when orders reflect genuine transactions.
- In June, the CFTC launched a consultation on energy perpetuals—contracts tied to physically delivered or storable commodities—seeking a data-driven record to assess continuous trading and the potential listing of perpetual energy contracts.
Industry push for regulated energy perpetuals
On Aug. 26 Hyperliquid Policy Center and trade[XYZ] requested regulated energy perpetuals for WTI crude, Brent and Henry Hub gas. Their proposals called for a technology-neutral framework and safeguards on leverage, funding and liquidation disclosures. They urged regulators to permit stablecoins and tokenized traditional collateral as eligible margin for cleared derivatives, to clarify how business-day rules apply to continuously running venues, and to allow on-chain execution, margining, clearing, settlement and recordkeeping where core regulatory principles are met.
Supporting data and product design
Hyperliquid’s research compared weekend crude perpetual prices to the subsequent reopening of benchmark futures and found that in nearly 75% of sampled closures, the perpetual finished closer to the Sunday reopening price than to the benchmark’s Friday close. The study reported no statistically significant deterioration in CME WTI reopening quality after the crude perpetual launched. The groups argued dated futures would remain necessary for physical settlement and month-specific exposure, while perpetuals—no expiry—use recurring funding to converge to a reference price.
Proposed U.S. market operating model
Payward’s proposed structure (announced in September and updated Oct. 26) envisions regulated markets administered by Bitnomial (an exchange and clearinghouse) with NinjaTrader Clearing holding customer accounts. Market participants would need onboarding and to appear on both entities’ allowlists. Payward said it would “hold the keys and carry the regulatory obligations,” with new contracts listed under Bitnomial Exchange rules, subject to regulatory approval.
What this means
The March pattern on Hyperliquid has renewed questions about potential spoofing in on-chain perpetual markets and how decentralized market architecture intersects with regulatory definitions and enforcement. The protocol’s deployer-based model and validator penalties give the network tools to react, but intent and legal culpability remain matters for investigators and regulators to determine. As exchanges and regulators continue debating the framework for energy perpetuals, on-chain transparency may aid forensic review but also highlights how novel market structures test traditional surveillance and enforcement models.