Bitget App
Trade smarter
Buy cryptoMarketsTradeFuturesEarnSquareMore
Hyperliquid’s HLP Vault Hit by $5M POPCAT Attack

Hyperliquid’s HLP Vault Hit by $5M POPCAT Attack

CoinomediaCoinomedia2025/11/13 21:27
By:Aurelien SageAurelien Sage

Hyperliquid suffers $5M loss after POPCAT token manipulation triggers cascading liquidations.How the POPCAT Manipulation WorkedWhat This Means for DeFi Risk

  • Hyperliquid’s HLP vault drained of $5M due to POPCAT price manipulation
  • Attack triggered massive liquidations in the vault system
  • Highlights growing risks in unmonitored token exposure

The decentralized perpetuals exchange Hyperliquid has suffered a major security setback. Its HLP vault lost approximately $5 million following a deliberate price manipulation of the POPCAT token, a meme coin with volatile market behavior.

The attacker exploited a vulnerability in how the exchange handles lower-liquidity tokens. By artificially pumping the price of POPCAT, they created massive imbalances that triggered cascading liquidations across the vault. These forced liquidations drained the HLP vault, leaving users and liquidity providers with major losses.

How the POPCAT Manipulation Worked

According to early reports, the attacker manipulated POPCAT’s price on external markets and possibly took advantage of low slippage and weak oracle pricing mechanisms within Hyperliquid. Once the price spiked unnaturally, leveraged positions in the HLP vault began liquidating rapidly, multiplying the damage.

This strategy isn’t new in the DeFi space — attackers often use low-cap or meme tokens with low trading volumes to manipulate prices. In this case, it was enough to cause a multi-million-dollar drain on a well-known DeFi protocol.

⚠️ ALERT: Hyperliquid’s HLP vault lost $5M after a POPCAT manipulation attack triggered cascading liquidations. pic.twitter.com/AWKQYMuJnP

— Cointelegraph (@Cointelegraph) November 13, 2025

What This Means for DeFi Risk

This incident shines a spotlight on the growing systemic risks in decentralized finance , especially when protocols support high-leverage trading of volatile or unverified tokens. While Hyperliquid has become known for its zero-gas trading and efficient user interface, this attack shows that security and risk controls remain crucial.

The team has not yet released a full post-mortem but has acknowledged the incident and is reportedly working on safeguards to prevent similar exploits in the future.

Read Also :

  • UFC Partners with Polymarket for Crypto Predictions
  • DOGE Collapses, & XRP Falters, While Zero Knowledge Proof (ZKP) Becomes the Next Unexpected Power Player in Crypto!
  • Whales Accumulate 45K BTC as Bitcoin Eyes $106K
  • Bitcoin and Ethereum ETFs See Major Outflows on Nov 13
  • First Spot XRP ETF Launches in the United States
0

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

PoolX: Earn new token airdrops
Lock your assets and earn 10%+ APR
Lock now!

You may also like

Trump’s Wall Street Fundraiser Sparks Renewed Debate Over Deregulation and Regulatory Oversight Following Trade Finance Crisis

- Trump dined with Wall Street leaders amid First Brands' $3B trade finance collapse, exposing non-bank lending risks and triggering calls for stricter oversight. - Jefferies faces scrutiny over $3B in tied debt as its stock fell 19%, while JPMorgan's Dimon warned of systemic gaps in non-bank lending oversight. - Trump's 50-year mortgage proposal sparked debate, with critics fearing "debt for life," while a 42-day government shutdown worsened market uncertainty. - The administration's deregulatory agenda c

Bitget-RWA2025/11/14 00:30

Digital Identity, No Data Required: ZK Protocol Secures $9M to Champion a Privacy-Centric Tomorrow

- Self Labs raised $9M in seed funding led by Greenfield Capital and SoftBank, with participation from Web3 leaders like Sreeram Kannan and Sandeep Nailwal. - The ZK-based platform enables privacy-preserving identity verification using zero-knowledge proofs and supports 129 countries' biometric passports and India's Aadhaar system. - A points-based rewards program incentivizes on-chain verification, while integrations with Google, Aave , and Velodrome expand use cases like token distribution and age checks

Bitget-RWA2025/11/14 00:30
Digital Identity, No Data Required: ZK Protocol Secures $9M to Champion a Privacy-Centric Tomorrow

Bitcoin’s Sharp Decline: Is This a Healthy Correction or an Ominous Signal?

- Bitcoin fell 10.5% in November 2025 amid a $19B derivatives crash, driven by Fed policy uncertainty and U.S.-China trade tensions. - Regulatory shifts and leveraged liquidations (1.6M traders impacted) exposed vulnerabilities in crypto's derivatives-heavy market structure. - Institutional demand persisted (e.g., JPMorgan's 64% ETF stake increase), suggesting long-term adoption despite short-term volatility. - Derivatives recovery may lag until 2026, hinging on Fed rate clarity and inflation trends, with

Bitget-RWA2025/11/14 00:28
Bitcoin’s Sharp Decline: Is This a Healthy Correction or an Ominous Signal?

Bitcoin Leverage Liquidation Spike: Systemic Threats in Crypto Derivatives During Q4 2025 Market Turbulence

- Q4 2025 crypto derivatives saw $20B in liquidations as Bitcoin fell below $100,000, exposing systemic risks from extreme leverage (up to 1,001:1) and interconnected markets. - Platforms like Hyperliquid and Binance faced $500M+ losses in 24 hours due to cascading margin calls, with 78% of perpetual futures volume amplifying volatility through feedback loops. - Regulators scramble to address risks as unregulated leverage, macroeconomic pressures, and geopolitical tensions (e.g., U.S.-China trade wars) inc

Bitget-RWA2025/11/14 00:28
Bitcoin Leverage Liquidation Spike: Systemic Threats in Crypto Derivatives During Q4 2025 Market Turbulence