Papertrade Launch-Day Price Manipulation

On October 10, 2026, Papertrade, a synthetic perpetual-futures platform built on Hyperliquid's HyperEVM, was drained of approximately $1.28 million within roughly eight hours of launch when a single trader manipulated the Hyperliquid reference price that Papertrade used to settle every trade. The profit came out of the platform's shared USDC liquidity pool, which acts as the counterparty for all positions.

What happened

Papertrade has no order book and no market makers: it prices each trade at the midpoint of Hyperliquid's best bid and offer (BBO) for the underlying market and settles it against a single internal USDC pool. The platform also offered leverage of up to 1,000x. Those three design choices combined to let a well-capitalised trader move the reference price in one venue while holding outsized leveraged exposure in the other.

According to The Block's on-chain analysis, the flagged wallet (0x2025…840e) executed the manipulation between roughly 6:01 and 6:02 p.m. Eastern Time:

1. Bought about 6,060 ETH on Hyperliquid, nudging the ETH price up by roughly $3.
2. Sold about 5,210 ETH the following minute, pushing it back down by roughly $3.50.
3. Held leveraged Papertrade positions that profited from each engineered move, since Papertrade copied the manipulated BBO midpoint.

The wallet recorded about $1.28 million in net gains on Papertrade across roughly $3.18 billion in notional volume, deploying only about $52,000 in fees on the ~$231 million of ETH it traded on Hyperliquid that evening. On-chain records show it deposited about $1.2 million and withdrew about $2.48 million.

Aftermath

Papertrade acknowledged attempts to manipulate its Bitcoin and Ethereum reference prices and said it had begun tightening position and open-interest limits on-chain and through its transaction relayers. It disputed that the losses stemmed from an overlooked flaw, saying initial exposure limits had been set loosely on purpose to accommodate launch activity, and claimed the trader later returned nearly all of the earlier gains to the liquidity pool through other accounts — a claim The Block could not verify, noting the original wallet's withdrawals still exceeded its deposits. The pool, which held about $5 million, temporarily fell to roughly $2.4 million before recovering, and platform open interest collapsed from over $3.3 billion to about $400 million.

Why it matters

Papertrade is a clean illustration of the oldest failure mode in DeFi derivatives: a venue that prices against a manipulable external feed while writing the risk against a shared pool invites a trader to move the feed and bill the pool. It belongs with Mango Markets, where an attacker pumped an oracle to borrow against inflated collateral, and the Ostium OLP vault oracle attack, where mispriced feeds drained a perp vault. The novelty is that the reference venue — Hyperliquid — was not itself compromised; its order book worked exactly as designed, and that correct price was precisely what Papertrade blindly mirrored. The episode underscores two standing lessons: a BBO midpoint from a single venue is trivially movable with enough capital, and extreme leverage against a common counterparty pool turns a small price nudge into a large pool drain. Papertrade's own dispute over whether this even counts as an "exploit" echoes the Mango Markets debate over where aggressive trading ends and market manipulation begins.