In the high-stakes world of crypto trading, liquidity can be both a weapon and a weakness. A recent trade on Hyperliquid’s HLP vault wiped out $4 million—not due to a bug or an exploit, but through a calculated move that exploited market mechanics. A trader turned $10 million USDC into a $271 million Ethereum long position, walked away with $1.8 million in profit, and left HLP to absorb the loss. It is considered as the biggest single day loss since its launch in May 2023. Crypto analyst Three Sigma is questioning whether protocols relying on liquidations are playing into the hands of savvy traders.
One trader VS. Hyperliquid’s HLP vault.
$4M gone. No bug. No exploit. Just a brutal game of liquidity mechanics.
In simple terms, HLP is Hyperliquid’s liquidity pool, where users can deposit funds to passively earn from market-making and liquidations. It generally profits when traders lose, but automated strategies can sometimes be exploited. This happened when a trader withdrew collateral, forcing HLP to take over a bad trade, leading to a $4 million loss.
Trading at massive size comes with a challenge—how to exit a position without crashing the market. Instead of selling ETH directly into the order books, the trader played the system. They withdrew their collateral, reducing their margin and triggering a forced liquidation. This move offloaded their entire position onto Hyperliquid’s HLP vault, which took on the $286 million ETH long.
Knowing that HLP’s forced selling would drive ETH prices lower, the trader had a hedge ready. By shorting ETH on another exchange—potentially Binance—they ensured profits from the price drop while HLP absorbed the risk. It was a calculated move, not an accident.
Analyst View: Was This an Exploit?
Hyperliquid maintains that this wasn’t a traditional exploit. Unlike GLP, which is forced to take the other side of trades, Hyperliquid’s model allows for market makers to step in. In this case, while HLP suffered a $4 million loss, it wasn’t system-breaking—the vault remains profitable overall. The loss was simply execution slippage, meaning the liquidator couldn’t perfectly match entry and exit prices.
Analyst further points out that this isn’t the first time HLP has been targeted. In 2023, an attacker manipulated SNX prices on centralized exchanges, exploiting the vault for $37,000. Since then, Hyperliquid has adjusted its pricing models to prevent similar incidents.
Regarding commentary and questions on the 0xf3f4 user's ETH long:
To be clear: There was no protocol exploit or hack.
This user had unrealized PNL, withdrew, which lowered their margin, and was liquidated. They ended with ~$1.8M in PNL. HLP lost ~$4M over the past 24h. HLP's…
Following the loss, Hyperliquid quickly implemented risk adjustments, including lowering max leverage to 40x for Bitcoin and 25x for Ethereum, and increasing margin requirements for large positions. More adjustments to HLP’s risk models are likely on the way.
The incident briefly caused a 12% drop in Hyperliquid’s HYPE token, though it later recovered. Despite the loss, HLP remains profitable, having generated $60 million for investors since launch.
function subscribed_popupmodal(template_id) {
var templateId = ‘6’;
getAllSubscriberCategoryList([templateId]);
var subcribemodal = window.parent.document.getElementById(‘subscribe-modal-design’);
if (subcribemodal) {
var modalContent = `
Never Miss a Beat in the Crypto World!
Stay informed and gain the edge you need to navigate the crypto world. Select your subscription now
if (storeCheckedId.length === 0) {
var unsubcribedPopUpmodal =
`
You’ve Unsubscribed Successfully
We’re sorry to see you go! Your subscription has been canceled. If you change your mind, you can re-subscribe anytime. Thank you for being part of our community!
Thank you for subscribing to our crypto and blockchain newsletter! You’ll now receive the latest news, insights, and updates straight to your inbox. Welcome to our community!
`;
let selectedSubscriptionsArray = selectedSubscriptionsString.split(‘,’);
let subscribedCategories = selectedSubscriptionsArray.map(subscription => subscription.split(‘_’)[0]);
let subscribedCategoriesString = subscribedCategories.join(‘, ‘);
subscribedmodal.innerHTML = subscribedPopupModal;
if (document.getElementById(‘selectidname’)) {
document.getElementById(‘selectidname’).textContent = subscribedCategoriesString;
}
function closeModal(template_id) {
var modalId = template_id;
var modal = document.querySelector(‘#’ + modalId); // Using querySelector to find the modal
// Function to get cookies
function getCookie(name) {
let value = “; ” + document.cookie;
let parts = value.split(“; ” + name + “=”);
if (parts.length == 2) return parts.pop().split(“;”).shift();
}
// Get user token from cookies
const userToken = getCookie(‘user_token’);
if (subscribewithoutData === ‘true’ && userToken) {
// Call the modal function with the category ID
subscribed_popupmodal(subscribe_clicked_cat_id);
// Remove the flag and category ID from localStorage
localStorage.removeItem(‘subscribe_without_Login’);
localStorage.removeItem(‘subscribe_clicked_id’);
}
});
var listItems = document.querySelectorAll(‘.subscription-options li’);
if (listItems.length === 0) return;
var anyActive = false;
listItems.forEach(function(item) {
var checkbox = item.querySelector(‘input[type=”checkbox”]’);
if (checkbox) {
if (checkbox.checked) {
item.classList.add(‘active’);
anyActive = true; // Set anyActive to true
} else {
item.classList.remove(‘active’); // Remove ‘active’ class if checkbox is unchecked
}
}
});
}
function updateButtonText(anyActive) {
var subscribeButtonSpan = document.querySelector(‘.subscribe-submit .changeBtnText’);
if (subscribeButtonSpan) {
if (anyActive) {
subscribeButtonSpan.textContent=”Subscribe Now”;
} else {
subscribeButtonSpan.textContent=”Unsubscribe”;
}
}
}
function updateSubscriptionButton() {
var listItems = document.querySelectorAll(‘.subscription-options li’);
if (listItems.length === 0) return;
var anyActive = false;
listItems.forEach(function(item) {
var checkbox = item.querySelector(‘input[type=”checkbox”]’);
if (checkbox) {
if (checkbox.checked) {
item.classList.add(‘active’);
anyActive = true; // Set anyActive to true
} else {
item.classList.remove(‘active’); // Remove ‘active’ class if checkbox is unchecked
}
}
});
// Update the button text based on whether any list item has the ‘active’ class
updateButtonText(anyActive);
}
document.addEventListener(‘click’, function(event) {
var clickedItem = event.target.closest(‘.subscription-options li’);
if (clickedItem) {
var checkbox = clickedItem.querySelector(‘input[type=”checkbox”]’);
if (checkbox) {
checkbox.checked = !checkbox.checked;
updateSubscriptionButton();
}
}
});