Solidus Labs identified $170M in suspicious orders on Hyperliquid oil perps with 30:1 cancellation-to-execution ratio, raising spoofing concerns amid Iran war volatility.
DeFi & Yields ·
Solidus Labs detected more than $170 million in atypical orders across two Hyperliquid accounts during March 8–10, a period marked by volatile oil price movements stemming from Iran war developments. The surveillance firm flagged the activity as potentially indicative of spoofing—a manipulation tactic in derivatives markets—though it stopped short of confirming intent to deceive. The bulk of the orders involved Brent crude futures positions.
The trading pattern involved submitting sizeable bids or asks on one side of the book before promptly withdrawing them, while simultaneously executing buys or sales elsewhere. This cycle generated approximately $119,000 in gains over the three-day window, with cancellations outpacing executed orders by a ratio of roughly 30:1. Solidus characterized the behavior as consistent with spoofing techniques.
Hyperliquid Labs responded by noting that the blockchain foundation of its platform renders all order activity, cancellations, and executions permanently visible and subject to independent verification. The core question—whether the activity reflects intentional market manipulation or coincidental trading patterns—remains unresolved.