Bitget App
Trade smarter
Buy cryptoMarketsTradeFuturesEarnSquareMore
Hyperliquid’s HLP Vault Hit by $5M POPCAT Attack

Hyperliquid’s HLP Vault Hit by $5M POPCAT Attack

CoinomediaCoinomedia2025/11/13 21:27
By:Aurelien SageAurelien Sage

Hyperliquid suffers $5M loss after POPCAT token manipulation triggers cascading liquidations.How the POPCAT Manipulation WorkedWhat This Means for DeFi Risk

  • Hyperliquid’s HLP vault drained of $5M due to POPCAT price manipulation
  • Attack triggered massive liquidations in the vault system
  • Highlights growing risks in unmonitored token exposure

The decentralized perpetuals exchange Hyperliquid has suffered a major security setback. Its HLP vault lost approximately $5 million following a deliberate price manipulation of the POPCAT token, a meme coin with volatile market behavior.

The attacker exploited a vulnerability in how the exchange handles lower-liquidity tokens. By artificially pumping the price of POPCAT, they created massive imbalances that triggered cascading liquidations across the vault. These forced liquidations drained the HLP vault, leaving users and liquidity providers with major losses.

How the POPCAT Manipulation Worked

According to early reports, the attacker manipulated POPCAT’s price on external markets and possibly took advantage of low slippage and weak oracle pricing mechanisms within Hyperliquid. Once the price spiked unnaturally, leveraged positions in the HLP vault began liquidating rapidly, multiplying the damage.

This strategy isn’t new in the DeFi space — attackers often use low-cap or meme tokens with low trading volumes to manipulate prices. In this case, it was enough to cause a multi-million-dollar drain on a well-known DeFi protocol.

⚠️ ALERT: Hyperliquid’s HLP vault lost $5M after a POPCAT manipulation attack triggered cascading liquidations. pic.twitter.com/AWKQYMuJnP

— Cointelegraph (@Cointelegraph) November 13, 2025

What This Means for DeFi Risk

This incident shines a spotlight on the growing systemic risks in decentralized finance , especially when protocols support high-leverage trading of volatile or unverified tokens. While Hyperliquid has become known for its zero-gas trading and efficient user interface, this attack shows that security and risk controls remain crucial.

The team has not yet released a full post-mortem but has acknowledged the incident and is reportedly working on safeguards to prevent similar exploits in the future.

Read Also :

  • UFC Partners with Polymarket for Crypto Predictions
  • DOGE Collapses, & XRP Falters, While Zero Knowledge Proof (ZKP) Becomes the Next Unexpected Power Player in Crypto!
  • Whales Accumulate 45K BTC as Bitcoin Eyes $106K
  • Bitcoin and Ethereum ETFs See Major Outflows on Nov 13
  • First Spot XRP ETF Launches in the United States
0

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

PoolX: Earn new token airdrops
Lock your assets and earn 10%+ APR
Lock now!