Jupiter Perpetual Exchange

Our research view of Jupiter Perpetual Exchange is favorable with conditions. It is an oracle-priced, LP-to-trader perpetuals venue whose JLP token represents the pool standing opposite leveraged traders while also holding SOL, ETH, BTC, USDC, USDT, and JupUSD inventory. Jupiter’s current Terms identify Block Raccoon S.A. as the interface provider and state that Jupiter does not interact with wallets located in, established in, or resident of the United States. The Terms also prohibit VPN circumvention. That alone makes both direct perpetual trading and a JLP allocation ineligible for this registry’s US-advisor client base. The refusal does not mean the pool lacks engineering controls. Jupiter publishes three dedicated perpetual-program audits and unusually useful on-chain account documentation. It is a legal-access decision, reinforced by the economic fact that JLP is not passive cash yield. It is a multi-asset market-making and liquidation-risk position. Pool weight limits can constrain withdrawals, and a protocol administrator can change its action permissions.

Review triggers: events that reopen the verdict
• Jupiter publishes terms permitting this registry’s United States client population to use both Perpetuals and JLP
• Administrator identities and the authority controlling every custody permission flag are publicly mapped to a named multisig and threshold
• A proposed-size JLP removal succeeds during a documented period when at least one custody is at its 20% target-weight boundary
• Any confirmed exploit, oracle failure, or realized pool loss exceeding 5% of JLP AUM opens an immediate off-cycle review

Confirmed 2026-09-25: 37 days quiet, TVL $828M (+8% in 30 days), no open item. Holds to 2027-09-26 while the watch stays quiet.

The research file

Mechanism and return source

Jupiter Perpetual Exchange routes leveraged traders against one JLP pool instead of a peer-to-peer order book. The pool holds six documented custody assets: SOL, ETH, BTC, USDC, USDT, and JupUSD. Its AUM is the marked value of those assets less the amount reserved to pay profitable traders. JLP holders therefore earn trading, borrowing, swap, and liquidity fees while bearing the inverse of total trader PnL and the directional inventory mix. Jupiter’s pool-account specification sets the protocol share at 2,500 basis points, or 25% of collected pool fees. The pool reinvests the remaining realized fees and uses them to calculate a weekly annualized APR. This is a derivatives-market-making exposure, not a stablecoin deposit or a contractual interest claim. Its return can reverse when traders profit or inventory falls.

The categorical eligibility bar

The current Jupiter Terms of Use say Block Raccoon S.A. deployed the open-source Protocol and describe the web product as a non-custodial interface. The locality clause is still categorical. Jupiter does not interact with wallets located in, established in, or resident of the United States, China, Singapore, or sanctioned jurisdictions. Users may not use a VPN or similar method to evade the restriction. The same document reserves the right to conduct discretionary KYC/AML checks and block access to the interface or protocol. A permissionless Solana program does not justify an advisor recommending that a US client violate the operator’s express terms. No favorable technical fact can support approval while that clause remains in force.

Control, oracle, and audit record

Jupiter’s custody-account documentation clearly shows the relevant controls. Each asset has oracle parameters, pricing configuration, target weight, position limits, and a permissions set. The protocol administrator can change global flags to enable or disable trading actions during upgrades or black-swan events. That gives the protocol a useful emergency control, but it also means JLP is not immutable. Jupiter publishes three program-specific assessments from Sec3, OtterSec, and Offside Labs. The Offside engagement covered the Solana program and keeper and initially reported one critical, one high, six medium, two low, and six informational findings. Those audits show meaningful security investment. They are still point-in-time code reviews and do not resolve either administrator authority or client eligibility.

Incident record and economic stress

The review found no Jupiter Perpetuals fund-loss exploit in the protocol materials, published audit index, or DefiLlama record through this cutoff. The lack of a known exploit does not mean there is no realized loss risk. Pool accounting explicitly subtracts amounts owed to profitable traders, and each custody tracks globally locked assets, long guaranteed USD, and global short PnL. A large directional trader win, oracle discontinuity, or correlated decline in the pool’s volatile inventory can reduce JLP value without any smart-contract bug. The administrator’s black-swan permission flags also show that stress may require discretionary halts rather than uninterrupted autonomous operation.

Exit and comparison

Investors can add liquidity to or remove it from the single JLP pool for a fee, but exit is not unconditional. The pool has a maximum AUM ceiling and a token-weight buffer, currently documented as plus or minus 20% around each target weight. It rejects a deposit or withdrawal if the transaction would move an asset beyond the permitted range. Stressed redemption therefore depends on the inventory composition that other LPs and traders leave behind. Compared with holding the underlying assets directly, JLP adds trader-counterparty PnL, oracle, keeper, administrator, and pool-composition risks. Compared with HLP, another derivatives LP reviewed in this batch, Jupiter provides better public account-level documentation and a broader audit index, but both are categorically unavailable to US clients. The investable alternative is therefore no derivatives-LP allocation, not a different prohibited venue.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• Jupiter — Terms of Use · primary · accessed 2026-08-19
  Supports: Block Raccoon S.A. interface role, categorical United States locality exclusion, VPN prohibition, KYC and access-blocking discretion
• Jupiter Developers — Perpetuals pool account · primary · accessed 2026-08-19
  Supports: single JLP pool, AUM calculation, 20% token-weight buffer, 25% protocol fee share
• Jupiter Developers — Perpetuals custody account · primary · accessed 2026-08-19
  Supports: six custody assets, oracle parameters, administrator permissions, pool PnL accounting
• Jupiter Developers — audit index · primary · accessed 2026-08-19
  Supports: Sec3, OtterSec, and Offside perpetual-program audits
• Offside Labs — Jupiter Perpetuals smart-contract security assessment · primary · accessed 2026-08-19
  Supports: program and keeper scope, initial finding severities
• DefiLlama — Jupiter Perpetual Exchange protocol data · secondary · accessed 2026-08-19
  Supports: Solana chain perimeter, current TVL, LP-to-trader category description

Inherited controls

The research above describes the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The layer with the most administrative power sets the position’s effective control; that describes control, not quality or suitability.