A $6M Short, a 429% Pump, and the Two-Minute Vote That Exposed Hyperliquid's Kill Switch

A trader engineered a self-inflicted liquidation against Hyperliquid's own risk engine on March 27, 2025, putting the exchange in a bind: absorb a loss that had reached roughly $12 million, or step in and reveal that its "decentralized" infrastructure has a centralized override. Hyperliquid chose the latter. A small group of validators reached quorum in about two minutes and voted to forcibly delist the JELLY perpetual market at a price far below where it was trading — overriding the market rather than let the position run.

This is not the first time Hyperliquid's security posture has drawn scrutiny. Rekt covered concerns in December 2024 after DPRK-linked wallets were spotted testing the protocol's defenses. Despite subsequent claims of validator expansion and hardened security, this incident suggests the underlying weaknesses were never fully addressed.

01Anatomy of the trade

The target was JellyJelly ($JELLY), a thinly traded token with roughly a $20 million market cap — small enough to be moved deliberately. The trader's approach unfolded in stages: first, open a roughly $6 million short position on JELLY perpetuals, while simultaneously building spot long exposure to the same token across multiple chains. With both legs in place, the second phase began — pushing up JELLY's spot price on exchanges, which in turn forced the trader's own short position toward liquidation.

JELLY's price rose 429% within a single hour. Under Hyperliquid's standard mechanics, when a large short gets liquidated, the position doesn't simply vanish — it gets absorbed by the protocol's own liquidity backstop, the Hyperliquid Liquidity Pool (HLP). HLP inherited the now-toxic short and began bleeding value as funding rates spiked against it.

The trade effectively forced a binary choice on Hyperliquid: let the roughly $230 million HLP vault absorb potentially unbounded losses if JELLY kept climbing, or intervene using emergency powers that undercut the platform's decentralization narrative. Analysts identified four specific weaknesses the trade exploited: the absence of real position limits on illiquid assets, insufficient protection against oracle/price manipulation, automatic inheritance of liquidated positions by the protocol's pool, and no circuit breakers to halt the spiral.

02The delisting and its price

Once unrealized losses approached $12 million with no clear ceiling, Hyperliquid moved to force the issue: an emergency validator vote to delist JELLY outright. Consensus among the validator set was reached in roughly two minutes. The settlement price was set at $0.0095, even though JELLY was trading around $0.50 on the open market at the time — a roughly 98% haircut that converted what could have been an eight-figure loss for the trader into an approximately $700,000 profit instead.

03Exchanges pile on

As the situation unfolded, Binance and OKX both launched JELLY perpetual contracts, timing that struck many observers as opportunistic given the chaos already underway at Hyperliquid. ZachXBT noted that the two wallets behind the JELLY manipulation (0x20e8 and 0x67f) had both been freshly funded via Binance on Arbitrum shortly before the attack began. Adding to the intrigue, users pointed to an alleged message from Binance co-founder Yi He responding "Ok, received/got it" to a suggestion that Binance list JELLY specifically to damage a rising competitor.

BitGet CEO Gracy Chen weighed in directly, stating Hyperliquid "may be on track to become FTX 2.0" and calling its handling of the episode "immature, unethical, and unprofessional." One trader, Wazz, described the exchange dynamic as two platforms effectively ganging up on a rival in public, arguing it undercuts any claim that the market isn't fundamentally adversarial.

ZachXBT also raised a consistency question, pointing out that Hyperliquid moved swiftly against this market manipulator but had not taken equivalent action when North Korean hackers held sizable positions funded by proceeds from the Radiant Capital hack. Commentary elsewhere drew comparisons to prior industry blowups involving concentrated emergency powers — from Sam Bankman-Fried's fraud, which drew a 25-year sentence, to Terra's roughly $40 billion collapse — framing Hyperliquid's intervention as another instance of centralized control sitting underneath decentralized branding.

04What the two-minute vote revealed

Hyperliquid's own statement described the episode simply: "the validator set convened and voted". But the underlying validator distribution undercuts the framing of broad-based consensus: according to one breakdown, roughly 81% of the 404 million staked HYPE tokens sit with foundation-affiliated nodes. ValiDAO, described as an independent validator, confirmed its vote: "we voted to delist JELLY perps at the price where market manipulation happened," without further explanation of the process or justification for the roughly 98% price cut applied at settlement.

Twitter user Lucas posed the underlying question directly: had Hyperliquid quietly built in the power to override market prices, or had that capability existed all along without being disclosed? He later pressed further, arguing that "HL can clear up all FUD by publishing the admin permissions that currently exist, and when they'll be removed. Obscurity not a good look here."

In the aftermath, Hyperliquid announced it would refund JELLY long holders at a rate of 0.037555, acknowledging that its risk model had failed when HLP absorbed the toxic short position. The team said it would introduce stricter liquidation caps, tighter open-interest limits, and an on-chain voting mechanism for delisting inactive or compromised assets going forward.

05The takeaway

The episode leaves Hyperliquid facing the same structural questions raised in December: a protocol with no position limits on illiquid markets and weak protections against price manipulation also turned out to have a centralized mechanism — the validator vote — capable of overriding market prices and forcing a settlement at a fraction of the prevailing rate. HYPE's price fell in the aftermath as the market absorbed the implications. Whatever the final accounting of the JELLY trade, the incident demonstrated concretely that Hyperliquid's emergency powers are real, fast to invoke, and concentrated among a small set of validators heavily weighted toward the foundation.