tens of millions of dollars
An exchange inside an exchange, with a deposit on the line.
Hyperliquid is a crypto exchange that runs on its own blockchain. Its engine, called HyperCore, runs the order books, the margin and the liquidations for everyone.
HIP-3 ("Hyperliquid Improvement Proposal 3") lets outside teams run their own futures exchange inside Hyperliquid. They decide which markets exist and how they behave, but trade on Hyperliquid's engine, with Hyperliquid's traders. In return they lock up a very large deposit, and they lose some or all of it if their market misbehaves.
Running one of these markets for a real-world asset like gold, a stock or a currency is hard. LIQUIDPAD is the layer that makes it easier: anyone proposes a market, the crowd shows whether it deserves to exist, and the spec is written so a deployer could put it on Hyperliquid.
Five hundred thousand HYPE, locked for half a year.
tens of millions of dollars
HYPE is Hyperliquid's own token. The deposit is held as "stake", which means it's locked and can be penalised. Hyperliquid says the 500,000 requirement is expected to come down over time. Anything above the requirement can be withdrawn earlier.
Each deposit buys one exchange (Hyperliquid calls it a "dex"), kept separate from everyone else's. The first three markets on it are free to list. After that, each new market is sold by Dutch auction: the price starts high and drops until someone buys. Each deployer also gets up to seven "reserve" listings that skip the auction wait.
Every setting is a signed instruction sent to the chain.
This is the full list of what whoever runs a HIP-3 exchange can change. LIQUIDPAD's launch page asks you to choose the ones that matter before anything exists.
- Register a marketregisterAsset
- Creates the market: its name, price precision, starting price and margin style.
- Set the oracle pricesetOracle
- Pushes the real-world price in. Allowed at most every 2.5 seconds, and expected every 3 seconds even when nothing changed. More on this below.
- Leverage rulesmargin tables
- Up to three tiers, from 1x to 50x. For example 20x on small positions and 5x on very large ones.
- Open-interest capsetOpenInterestCaps
- The most money that can sit in open positions. The lowest allowed cap is $1,000,000, or half the current open interest if that's higher. It can always be lowered as a safety measure.
- Funding settingsmultipliers · rates · clamps
- Tunes the regular payments between longs and shorts that keep the market price close to the real price.
- FeessetDeployerFees
- The deployer adds a fee on top of Hyperliquid's, from 0 to 3 times the base fee, and collects it. "Growth mode" cuts fees by about 90% to attract early traders.
- Halt tradinghaltTrading
- Cancels every order and closes every position at the current price. It ends the market; it is not a pause. The same market can be reopened later.
- Sub-deployerssetSubDeployers
- Hands one specific power to another wallet. Typically a separate, always-on wallet that only updates prices.
- LabelssetPerpAnnotation
- Category, description and display name that trading apps show next to the market.
- Disable the exchangedisableDex
- Shuts the whole exchange down, permanently.
The deployer is the price feed. Hyperliquid only limits how wild it can be.
An oracle is how a market knows the real price of the thing it tracks: the price of gold in London, or of NVIDIA on Nasdaq. On HIP-3, the deployer supplies it. Hyperliquid can't check whether that price is honest, so it puts guard rails around it instead.
- The mark price (the price used for profit, loss and liquidations) is the middle value of three prices: two the deployer submits, and what is actually trading on the order book.
- It can move at most 1% per update.
- It can never go past 10 times the day's starting price.
- If the deployer goes silent for 10 seconds, the market falls back to order-book prices alone. Hyperliquid tells deployers not to rely on that.
- A main key changes the market's rules. It's used rarely and kept offline.
- A separate price key signs a new price about every 3 seconds, around the clock.
- If the price key leaks, the attacker can distort prices, but can't change leverage, fees or caps.
- Hyperliquid also asks for assets that are well defined and hard to manipulate. It says price indices are often unsuitable.
Four jobs, every few seconds, forever: pull prices from several sources (exchanges, benchmarks, on-chain feeds); throw out any that are stale or out of line; blend the rest into one reference price; and sign it from the separate price key. It also has to decide what a stock's price is on a Saturday, when Nasdaq is closed but the market isn't. Every real-world-asset deployer needs this, and most don't want to build it.
Break the market, lose the deposit.
Who decides: Hyperliquid's validators, the operators who run the network, vote. Votes count by how much each one stakes, and the penalty is the middle vote.
Only the effect matters. An honest mistake, a badly written spec and a stolen key are all treated the same. Ordinary Hyperliquid bugs that have nothing to do with the deployer's inputs are not punished.
Slashed HYPE is burned. It isn't paid to traders who lost money and can't be recovered. The deposit stays slashable during the 7-day withdrawal wait, so leaving doesn't dodge a penalty.
What stops one bad trade sinking the market.
- Isolated marginthe default
- Each position is backed only by the money put into it. If it fails, it can't drain the rest of your account.
- Cross marginopt-in, permanent
- One balance backs several positions. Only allowed for assets with deep trading, a reliable outside price and resistance to manipulation. An asset that moves more than 50% in a day more than once a month is disqualified. Once turned on, it can't be turned off.
- Backstop liquidatorone per exchange
- A built-in account that takes over positions that are failing, so they don't have to be dumped on the market.
- Auto-deleveragingADL, last resort
- If even the backstop isn't enough, Hyperliquid closes some winning positions to pay for the losing ones, so the exchange can never owe more than it holds.
- Collateralquote asset
- Any token that qualifies as a quote currency can back positions, usually a dollar stablecoin. If validators later disqualify it, the exchanges using it are paused, but the deployer isn't slashed for that.
An allowlist, for markets that legally need one.
Banks and regulated funds can't trade on a venue where anyone can show up. They need known counterparties, country restrictions and KYC ("know your customer" identity checks). HIP-3* lets a deployer flag a venue as permissioned and keep a list of approved wallets. The operator gets exactly five powers, and no others:
Approve or remove wallets
Who is allowed to trade at all.
Cancel one order
A specific resting order on the venue.
Cancel all orders
Every resting and time-sliced order, or those on up to ten markets.
Force reduce-only
A user can shrink positions but not open or grow them.
Move collateral
Between accounts, inside the same venue only.
Testnet draft
Live on Hyperliquid's test network only. The rules may change and there's no mainnet date. Normal open markets are unaffected.
Yes or no, fully paid for up front.
HIP-4 adds a different kind of market: a yes/no contract that settles somewhere between 0 and 1. A "yes" pays out in full if it happens, a "no" pays out if it doesn't. Everything is fully collateralised, so there's no leverage and nothing to liquidate. Hyperliquid's first example is a daily question about Bitcoin's price, settled at 06:00 UTC. Fees are zero while it's being tested.
On LIQUIDPAD, a proposal can carry one: "Will this market go live in time?" or "Will it find traders in its first week?", letting people price a proposal's chances. Third-party coverage says builders can now create these from approved templates by staking 500,000 HYPE; Hyperliquid's HIP-4 page itself doesn't spell out who can deploy them yet.
Two chains. What works today, and what doesn't yet.
Where markets are proposed and backed
- An Ethereum-compatible network from Robinhood (chain ID 4663), built on Arbitrum's technology.
- The wallet you use on LIQUIDPAD is the same kind you'd use on Robinhood Chain.
Where a funded market would trade
- A HIP-3 exchange with the proposal's oracle, leverage, cap and access settings.
- Traded by anyone on Hyperliquid, or only allowlisted wallets on a HIP-3* venue.
Signed proposals and pledges
- You launch a proposal by signing a message with your wallet. It's free: no gas, no transaction, no funds.
- The server checks the signature matches both your wallet and the exact spec, then publishes it with its own page.
- Others back it with a signed, non-binding pledge. Counts are real.
- Live Hyperliquid data on Explore and every market page is read straight from Hyperliquid.
Money and deployment
- Pooling the 500,000 HYPE stake. It needs legal sign-off first, and someone to carry the stake to Hyperliquid.
- Running the oracle router live.
- Deploying a proposal to Hyperliquid as a real market.
Real-world assets went from a sideshow to half the volume.
Stocks and indices from one builder, TradeXYZ, carry most of that volume, and most builder exchanges have nothing live at all. You can see both on the Explore page, live.
Every term on this site, in one line.
- Perp
- A "perpetual future": a bet on a price going up (long) or down (short) that never expires.
- Leverage
- Trading with more than you put in. 10x turns a 1% move into a 10% gain or loss.
- Liquidation
- When a leveraged position loses enough, it's closed automatically before it can lose more than it holds.
- Oracle
- The source that tells a market the real-world price of what it tracks.
- Mark price
- The price used for profit, loss and liquidations. On HIP-3, a blend of the oracle and the order book.
- Open interest
- The total value of all positions currently open in a market.
- Funding
- Regular payments between longs and shorts that pull the market price toward the real price.
- Stake
- Tokens locked up as a deposit that can be penalised.
- Slashing
- Destroying part or all of a stake as a penalty.
- Validator
- One of the operators who run the Hyperliquid network and vote on penalties.
- HYPE
- Hyperliquid's own token, used for staking.
- HIP
- "Hyperliquid Improvement Proposal": a numbered upgrade to how Hyperliquid works.
- Dex / deployer
- A builder's own exchange inside Hyperliquid, and the team or wallet that runs it.
- RWA
- Real-world asset: stocks, commodities, currencies, indices, private companies.
- Signing a message
- Your wallet proving something came from you. Free, and moves nothing.
Read the originals.
- HIP-3: Builder-deployed perpetualsHyperliquid docs
- HIP-3 deployer actionsHyperliquid docs
- HIP-4: Outcome marketsHyperliquid docs
- HIP-3 and the new market trust boundaryChainstack
- Hyperliquid tests allowlists for its markets (HIP-3*)CryptoSlate
- As RWA trading surges on Hyperliquid, Dragonfly's Qureshi makes the case for a multichain futureThe Block · Sep 17, 2026