Hyperliquid HLP

We reject Hyperliquid HLP because of both client eligibility and a market mechanism that has twice caused losses. Hyperliquid’s Terms define persons residing, located, incorporated, or registered in the United States as Restricted Persons barred from its interface. HLP is also not passive protocol revenue. It runs market-making strategies, supplies USDC in Earn, and acts as the backstop liquidator when ordinary order-book liquidation fails. That last role caused roughly $4M of actual loss in March 2025 after a trader forced liquidation of a $271M ETH long. Later that month, the JELLY manipulation transferred a toxic short to HLP and ended only after validators voted to delist the market and impose a settlement price. A current SEC-filed third-party prospectus reports approximately $13.5M of HLP losses from the JELLY activity. The response added margin tiers and isolated the liquidator strategy, but it also proved that validators can alter a market outcome under pressure. A four-day deposit lock also means the client cannot exit when the risk first appears.

Review triggers: events that reopen the verdict
• Hyperliquid publishes terms permitting this registry’s United States client population to deposit in HLP
• HLP completes 24 consecutive months without a realized market-mechanic loss exceeding 1% of vault equity
• Validator node software becomes open-source and emergency market-settlement authority is bounded by a published rule with an independent appeal path
• The four-day post-deposit withdrawal lock is removed or a verifiable emergency exit is added for new backstop-liquidation exposure
• Any further HLP loss caused by a position transferred through backstop liquidation opens an immediate off-cycle review

Confirmed 2026-09-25: 37 days quiet, TVL $183M (-1% in 30 days), no open item. Holds to 2027-09-26 while the watch stays quiet.

The research file

Mechanism and return source

HLP is a protocol-owned strategy vault whose depositors share the PnL from multiple market-making strategies, backstop liquidations, USDC supplied through Earn, and a portion of exchange fees. When a trader falls below maintenance margin, Hyperliquid first sends liquidation orders to the public book. If the account falls below two-thirds of maintenance margin and the book cannot close it successfully, the position moves to HLP’s liquidator component. The vault then owns the position and its mark-to-market risk. This design sends liquidation profits to community LPs in normal conditions. It also assigns them the rare but severe loss when position size, collateral, oracle marks, or market liquidity defeats the normal closeout path.

Categorical US exclusion

The current Hyperliquid interface Terms, provided by Hyperliquid Corp., define Restricted Persons to include anyone residing in, located in, incorporated in, or with a registered office in the United States, as well as Ontario and sanctioned jurisdictions. The chain may be reachable through other software, but recommending an alternate interface or direct call does not make a prohibited client eligible. Current SEC filings for proposed HYPE investment products separately repeat the same terms-based US restriction and explicitly identify VPN circumvention as a potential regulatory and enforcement risk. For this US-advisor mandate, that requires a standing zero-allocation decision before considering the vault’s economics.

Realized losses and validator intervention

On 2025-03-12, a trader opened a roughly $271M ETH long with about $6M of collateral, withdrew margin, and forced the remaining position into liquidation. HLP lost roughly $4M even though Hyperliquid said the system operated as designed. Hyperliquid then reduced max leverage and added a margin requirement for transfers. On 2025-03-26, coordinated JELLY positions moved a very large short into HLP before the external spot price was pushed upward. Validators voted to delist JELLY and settle positions at a validator-selected price instead of the prevailing market. A 2026 SEC-filed prospectus reports about $13.5M of HLP losses from that activity. These losses came from the market design, not stolen keys. That makes them more relevant to assessing HLP, not less.

Control and remediation

The JELLY response included real changes. The liquidator vault was capped at a small share of total HLP collateral, automatic deleveraging was introduced when losses breach a threshold, and open-interest limits and margin tiers became more sensitive to asset capitalization and position size. Yet the event revealed another point of control. The validator set can coordinate quickly to delist a market and choose a settlement outcome. That power protected platform solvency while overriding normal price formation. This registry’s separate Hyperliquid Bridge memo also found a 27-validator custom-consensus system with closed-source node software and material foundation-affiliated stake. HLP depositors depend on that same system for every trade, liquidation, and emergency response.

Exit and comparison

HLP deposits are locked for four days after the most recent contribution. During that period, the depositor cannot withdraw even if a large account is approaching liquidation or validators are debating an intervention. After the lock, redemption remains a claim on vault equity after open-position PnL, not a fixed one-USDC claim. Compared with Jupiter JLP, HLP has a simpler USDC-denominated interface to a broader strategy set but a materially worse record of actual severe losses. Both categorically exclude US users. Compared with holding USDC or Treasury exposure directly, HLP adds leveraged trader counterparty risk, backstop liquidation, validator discretion, oracle marks, and a four-day inability to react. No client-portfolio need requires accepting those added risks through an expressly prohibited venue.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• Hyperliquid — Terms of Use · primary · accessed 2026-08-19
  Supports: Hyperliquid Corp. interface role, United States Restricted Person definition, alternate-interface distinction
• Hyperliquid documentation — protocol vaults · primary · accessed 2026-08-19
  Supports: HLP strategy scope, four-day deposit lock, community ownership claim
• Hyperliquid documentation — liquidations · primary · accessed 2026-08-19
  Supports: two-thirds maintenance-margin trigger, HLP backstop position transfer, mark-price mechanics
• Hyperliquid documentation — fees · primary · accessed 2026-08-19
  Supports: community fee destinations, separate vault volume treatment
• Bitwise Hyperliquid ETF — SEC-filed prospectus · secondary · accessed 2026-08-19
  Supports: approximately $13.5M JELLY HLP loss, validator-selected settlement, US interface restriction
• DefiLlama — Hyperliquid HLP protocol data · secondary · accessed 2026-08-19
  Supports: Hyperliquid L1 perimeter, current HLP TVL, strategy description

Inherited controls

The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The layer with the most administrative power sets the position’s effective control; that describes control, not quality or suitability.