Researchers allege two wallets gamed PaperTrade pricing with large ether trades on Hyperliquid

What happened

A new synthetic trading venue in the Hyperliquid ecosystem spent the weekend facing public allegations of price manipulation, days after its launch. On October 11, a crypto trader amplified claims from a pseudonymous researcher that two wallets were exploiting a weakness in the pricing system of PaperTrade, a decentralized trading platform that recently launched on HyperEVM, the smart contract environment connected to the Hyperliquid blockchain. The allegation is that the wallets executed trades worth about 20 million dollars each on Hyperliquid, briefly moving ether prices by 10 to 20 basis points, while holding far larger positions on PaperTrade. A basis point is one hundredth of a percent, so the reported moves were about 0.1 to 0.2 percent. TokenPost reporting cited in the coverage put the PaperTrade positions at nine figures in notional value. The claims remain allegations. No independently verified transaction analysis has established the identities of the wallet operators or confirmed that their trades generated profits through price manipulation, and no verified loss figure or platform response accompanied the initial reports.

The alleged mechanism centers on a documented design choice. PaperTrade does not match buyers and sellers in an order book. It offers synthetic trades against its own liquidity pool, and its smart contracts read the midpoint between the best bid and best offer on Hyperliquid to set entry and exit prices. The best bid is the highest price a buyer will pay and the best offer is the lowest price a seller will accept. A trader who places an order at a new best bid or offer can move that midpoint even if the order never executes. If the protocol accepts the shifted price without an independent check, positions can be opened or closed at a quotation that does not reflect the broader market. PaperTrade's own published risk disclosures identify manipulation of the best bid and offer as an unresolved concern, alongside related worries about contract economics, exposure limits and operational safeguards. The platform offers leverage of up to 1,000 times on supported markets including bitcoin and ether, which means small reference price moves translate into large profit and loss swings on big positions.

Hyperliquid's own safeguards work differently, and the distinction matters. The exchange's official documentation describes separate oracle and mark prices designed to reduce the effect of abnormal trading. The oracle price is a weighted median of prices from centralized exchanges, updated by validators about every three seconds. The mark price combines several inputs including the exchange's own market prices and prices from other venues, and it is the mark price that governs unrealized profit and loss, margin and liquidations. PaperTrade's contracts reference the order book midpoint directly instead. On the reporting read for this story, the allegations therefore describe exposure in PaperTrade's pricing design, not a compromise of Hyperliquid's blockchain, trading engine or oracle system.

The money mechanics put the risk on the pool. PaperTrade's liquidity pool sits on the opposite side of customer positions, and the protocol's documentation says the pool begins without deposited liquidity and grows as traders realize losses. A token called PAPER is issued in connection with eligible trading losses, and holders can stake it to participate in distributions under the protocol's rules. If the pool lacks the funds to cover profitable withdrawals, winning settlements enter a payment queue until funds become available. The October 11 reports did not establish whether the suspected transactions affected the pool, created queued claims or resulted in realized withdrawals.

Why it matters

Reference price design is one of the oldest failure points in decentralized trading, and the PaperTrade allegations describe the textbook version. An application that prices trades off a single order book's midpoint inherits that book's moment to moment shape, including shapes that a well funded trader can create on purpose. Hyperliquid built its own oracle and mark price system precisely to avoid letting one venue's quotes decide liquidations. PaperTrade chose the simpler reference, disclosed the risk in its documentation, and is now accused of having that risk exercised against it within days of launch. The sequence is a reminder that disclosing a vulnerability is not the same as neutralizing it.

The leverage figures explain why a 0.1 to 0.2 percent move is worth alleging about. On a cash trade, ten to twenty basis points is noise. On a position with hundreds of millions of dollars in notional value opened at high leverage, the same move is a payday. That asymmetry is what makes midpoint pricing attractive to attack: the cost of nudging the reference is small, and the payoff scales with the size of the positions the protocol lets traders hold against it. It is also why the venue's exposure limits and open interest caps, which its documentation mentions, are load bearing parts of the design rather than fine print.

The pool structure decides who pays if the allegations prove true. Because PaperTrade's pool takes the other side of customer trades, a trader who systematically extracts profit through reference price games is extracting it from the pool's counterparties. If the pool cannot cover a winner immediately, the payout queues rather than failing outright, which converts a sudden loss into a waiting line. That design contains the damage but does not prevent it, and it raises the question the reports could not yet answer: whether any queued or realized payouts trace to the suspected wallets.

Honesty about the evidence is part of why this story belongs in the package as an allegation rather than as a confirmed exploit. The public record so far consists of researcher claims, amplified posts and secondary reports, with no wallet addresses, transaction hashes or independent loss calculation in the coverage reviewed. Treating it as proven would repeat the exact error the Ledger story warns against, letting an early estimate harden into fact. What is established is the design, the documented risk, and the claim that someone may be using it.

The July precedent cited in the reporting shows this class of problem is not theoretical. A Hyperliquid linked perpetual contract tracking SK Hynix fell 17.9 percent after an unusual transaction in South Korea moved the external price the contract referenced, and the operator later said it would cover qualifying liquidation losses. That incident involved a separate contract and pricing method, and it does not validate the PaperTrade claims. It does show what happens when a derivative's reference price can be pushed: positions get marked, liquidated or settled at prices the broader market never really traded.

What to watch

Watch for independent verification. The allegations will stay allegations until onchain analysts publish wallet addresses, transaction sequences and a reconstructed profit and loss that others can check. A verified analysis would also show whether the suspected wallets profited, lost money on the attempt, or simply traded in a pattern that looked suspicious.

Watch for a response from PaperTrade. The fix the analysts keep naming is to price off Hyperliquid's official oracle value, which aggregates quotes across venues, instead of the single book midpoint. The platform could also tighten exposure limits, reduce maximum leverage, or add checks that reject reference prices that deviate from the broader market. Any of those changes would acknowledge the design gap. Silence would leave the documented risk exactly where the researchers found it.

Watch the pool. If winning settlements start queueing, or if the venue's public data shows the liquidity pool under strain, that would be the first onchain sign that extraction is happening rather than merely being attempted. A healthy pool through the episode would suggest the allegations describe probing rather than a successful drain.

Finally, watch other venues that price off a single book. PaperTrade is not the only application to reference Hyperliquid's order book, and the same midpoint logic can appear anywhere a protocol wants a simple price feed. If the allegations are verified, expect a round of disclosures and quiet repricings across similar designs. If they are not, the episode still serves as a live drill for a risk that every synthetic venue's documentation already names.