The House Edge

Appearance

9. Hyperliquid: The CLOB That Worked ​

The chain that eliminated the extraction surface — and where the value re-concentrated when it did. ​

Cold open ​

On 15 May 2026 — one day after this chapter is written — Bitwise's spot Hyperliquid ETF begins trading on NYSE Arca under the ticker BHYP, with Anchorage Digital as custodian, a 0.67% annual management fee, and approximately 85% of native HYPE staking rewards retained for ETF investors after fees. Approved trading counterparties: FalconX, Flowdesk, Nonco, Wintermute — the same firms named in the Chapter 7 approval-not-exclusivity disclosure.[1] In the same week, the Hyper Foundation announces an expansion of the active validator set from 24 to 27 over a 30-day onboarding window.[2] In the same quarter, Hyperliquid's chain-level application revenue passes Solana's by approximately $55 million — $144.8 million versus ~$89.5 million in Q1 2026 — the first quarter on record in which a single-application L1 outearned the largest general-purpose L1 in real economic value.[3] The chain was launched in November 2024 by an approximately eleven-person team led by Jeff Yan, a Harvard '17 alumnus and former Hudson River Trading quant who self-funded the protocol with profits from his prior trading firm and took zero outside venture capital.[4] The matching engine that produces the chain's roughly $619 billion of Q1 2026 perpetual-trading volume runs inside HyperBFT consensus at approximately seventy-millisecond block intervals; there is no mempool to observe pending orders, no proposer-builder separation to intermediate block construction, and no relay layer to commit a builder's bid to a validator.[5] Chapter 8 documented Solana as the chain whose vertical integration compresses the extraction surface; Chapter 9 documents Hyperliquid as the chain whose architecture eliminates it — and answers the question Chapter 8's verdict left open: when the extraction surface goes away, where does the value go?

What this chapter answers ​

  • Why does the CLOB design work at scale on Hyperliquid when every Solana CLOB experiment failed at spot?
  • What is the HLP — the chain's house — and how is it structurally different from a market maker, a passive AMM LP, and an exchange's risk desk?
  • What does the validator set actually do on Hyperliquid, given that there is no block constructor to optimise and no mempool to sequence?
  • What is HIP-3, and why has builder-deployed perp volume grown to more than 35% of the chain's trading volume in eight months?
  • When you eliminate the extraction surface Ethereum and Solana operate inside, where does the value capture re-concentrate?

The setup ​

Hyperliquid's architectural premise, stated cleanly: the matching engine runs inside HyperBFT consensus. HyperCore — the perpetuals, spot, order book, and liquidation primitives — and HyperEVM — the general-purpose EVM-compatible programmability layer — share the same consensus and the same blocks while maintaining independent state.[6] There is no mempool to observe. There is no proposer-builder separation to intermediate. There is no relay layer to commit a builder's bid to a validator. There is no block-construction outsourcing of any kind. The validator's role is not to construct blocks against searcher bundles (Solana) or to sign blocks built by a specialised builder (Ethereum) — it is to operate the matching engine inside consensus. Every action a trader takes — placing an order, cancelling an order, modifying an order, taking a fill — passes through the consensus process and is sequenced by the validators directly, with the matching logic itself running as code inside the protocol rather than as a smart contract layered on top of it.

The chapter previews two structural findings the worked example and the mechanics develop. First: Hyperliquid eliminates the extraction surface Ethereum operates inside (Chapter 7) and Solana could only compress (Chapter 8). No searchers can observe pending orders because there are none; no sandwich attackers can frontrun a swap because order placement and matching collapse into a single consensus operation; no builders extract a wedge between block value and proposer payment because there is no builder. The chain still has a value-capture stack — every trade pays fees, every fee flows somewhere — but the stack's components are named differently: the HLP (the chain's house), the validator set (24 large stakers, expanding to 27), the HIP-3 deployers (TradeXYZ at >90% of HIP-3 open interest, plus the long-tail), and the HYPE holders via the buyback machine ($1B+ cumulative buybacks since November 2024). Different names from Ethereum's and Solana's; comparable concentration.

Second: Hyperliquid's architectural trade-off is deliberate, not accidental. The chain sacrificed general-purpose programmability — HyperEVM TVL of approximately $1.9 billion is roughly 1/50th of Solana DeFi and 1/30th of Ethereum — and ecosystem breadth — no Phantom-equivalent wallet UX, no Jupiter-equivalent aggregator layer, no Helius-equivalent third-party RPC provider — for single-product excellence: perpetual futures executed at roughly 6% of global perp futures market share by March 2026, including centralised venues, with the next on-chain competitor (dYdX) running at roughly 10–12% of Hyperliquid's monthly volume.[7] The chapter's verdict frame is built on whether this trade — less programmability and ecosystem in exchange for a single product done exceptionally well — represents an improvement, a different concentration shape, or both.

The worked example ​

Alice — the trader the book has followed since the prologue and Chapter 1 — opens a $10,000 long-BTC perpetual position on Hyperliquid. The chapter follows the dollar through every layer of the chain's 2026 architecture.

The published and partially-illustrative take at each layer for Alice's $10,000 BTC long:

LayerMechanismTake (illustrative)Cumulative
DepositCircle CCTP — native USDC into HyperCore (no Arbitrum bridge)$0 (CCTP is free)$0
MatchHyperCore matching against HLP and external maker quotesmaker rebate possible; taker pays standard fee~$1.50 (2 bps on $10K notional × leverage assumption)
Funding8-hour funding rate exposure on the position (variable; long pays short when funding positive)~0.01–0.05% per 8 hours typical; depends on position duration and direction~$1–$5 / day at typical funding levels
Liquidation bufferPosition margin maintained vs HLP's residual-counterparty exposure$0 (only triggered if liquidated)$0
Fee flow3% of HLP-routed flow to HLP depositors; 97% to Assistance Fund (separately: 99% of validator-operated-perp fees to Assistance Fund)the protocol economy, not Alice's direct costn/a
ExitClosing the position; another taker fee + spread~$1.50 (mirrors the entry leg)~$3 plus funding
Total~2–4 basis points all-in on Alice's $10K notional, depending on holding period

Two acknowledgements. First: the dollar trace concentrates the fee economy into a single accounting concept (the Assistance Fund's buyback machine), where Chapter 8's Solana trace dispersed it across five firms. The lower per-trade cost is real and is the chain's clearest improvement in retail welfare versus Solana spot or Ethereum L1 swap routes; the higher visibility — the buyback is on-chain and verifiable, every fee dollar's destination is auditable — is also real. Second: the funding-rate component is variable and direction-dependent, which is why "all-in cost" is a range rather than a point. The 2–4 basis points figure is the typical retail experience on a short-to-medium-held perpetual position; longer holds or positions caught on the wrong side of a sustained funding regime can cost meaningfully more.

The number anchors the chapter's structural argument: Alice pays less per trade on Hyperliquid than on any comparable on-chain venue, and her fee flow is concentrated into a single mechanism rather than dispersed across five named firms. Whether that is structurally preferable to Solana's lower-visibility / higher-magnitude take is the chapter's clinical comparison — offered, not imposed.

The mechanics, in detail ​

The CLOB inside consensus — why Hyperliquid works where Phoenix didn't ​

The architectural reason no Solana CLOB succeeded at spot, and Hyperliquid's CLOB succeeds at perpetuals, is visibility plus latency.

Solana's gas regime is cheap; that was never the binding constraint. The constraint Chapter 2 identified at the venue level — and Chapter 3 developed at the chain level — was that every order action (placement, cancellation, modification) on a Solana CLOB was a transaction visible via Gulf Stream forwarding to the current and next slot leaders before inclusion. A market maker quoting on Phoenix knew that any opportunistic taker watching the visibility surface could see her quote in flight and lift it at a faster cadence than she could cancel. The asymmetry was fatal to tight-spread market making at scale; market makers either widened their spreads to compensate (which made the venue uncompetitive against AMM-routed alternatives) or migrated to operating prop-AMMs (where they could internalise adverse selection rather than be exposed to it). The CLOB experiment ended for spot. Phoenix was renamed Phoenix Legacy in early 2026 and pivoted to perpetuals.[8]

Hyperliquid closes this surface twice. First, by matching inside HyperBFT consensus, there is no pending state for a searcher or taker to observe. An order placement and the matching engine's response collapse into a single consensus operation; the order is matched against the book at the same instant it becomes visible to anyone, including the maker who placed it. The visibility-before-inclusion gap that doomed Phoenix does not exist on Hyperliquid because there is no "before inclusion" surface to observe. Second, by running HyperBFT at approximately seventy-millisecond block intervals with end-to-end median finality of approximately 200 milliseconds (and p99 of approximately 900 milliseconds, Chapter 2), a market maker's cancel reaches the matching engine before opportunistic takers can lift the stale quote. The two conditions hold simultaneously only on Hyperliquid; Solana satisfies the second (400-millisecond block intervals are slow but operable) and fails the first (Gulf Stream visibility); Ethereum satisfies neither (12-second block intervals plus mempool visibility). The architectural specificity of Hyperliquid's design is what makes the CLOB viable for active market making at scale.

HyperCore's published throughput: approximately 200,000 orders per second sustained, with the matching logic running as protocol code rather than smart-contract code.[9] The chain's dual-state architecture — HyperCore for matching, HyperEVM for general-purpose programmability — shares consensus but maintains independent state, with the canonical wrapped HYPE token (WHYPE) connecting the two layers and natively-minted USDC linked across both via Circle's CCTP infrastructure (Chapter's footnote 1 anchor).

The HLP — the chain's house ​

The Hyperliquid Liquidity Provider vault — HLP — is the chain's protocol-owned market-maker pool. Any depositor can fund it; deposits are subject to a four-day withdrawal lock; HLP runs multiple market-making strategies inside HyperCore, quotes against incoming flow, and absorbs liquidator surplus and shortfall on perpetuals.[10] As of May 2026, HLP held approximately $383 million of total value locked, recovered from a JELLY-triggered post-March-2025 trough that briefly drove TVL down 65%. Lifetime cumulative profit-and-loss through October 2025 was approximately $121.8 million — roughly a 450% total return on the initial seed pool, with recent quarterly reports citing continued positive PnL through Q1 2026. HLP earns approximately 3% of trading fees routed through HLP-quoted matches; the remaining 97% routes to the Assistance Fund for HYPE buybacks.

Meet the House (sidebar)

The HLP is not a market maker, exactly. A market maker quotes both sides of a book on her own account, takes the spread, and goes home flat. The HLP also quotes both sides — but it is the protocol's quoting account, funded by passive depositors, and it inherits whatever residual position is left after every liquidation cascade in the system.

The HLP is not a passive AMM LP, exactly. A Uniswap V3 LP deposits two tokens into a price-range curve and gets passive exposure to the curve's behaviour. The HLP runs active market-making strategies that change in response to flow; it is more like a passively-held position in a trading desk than a position in an algorithmic curve.

The HLP is not a centralised exchange's risk desk, exactly. A CEX risk desk is the exchange's own balance sheet absorbing residual positions; the depositors are the exchange's shareholders, not external participants. The HLP's depositors are external participants — anyone with a wallet — who are exposed to the chain's worst trades the same way the exchange's shareholders would be.

The closest TradFi analogue is a clearinghouse's default fund — a depositor-funded pool that absorbs counterparty failures, paid by a portion of the exchange's fees in exchange for tail exposure. The structural shape is similar; the access is different (any wallet can deposit; no membership requirement; no collateral concentration limits beyond the 4-day withdrawal lock).

When the JELLY trade hit on 26 March 2025, the HLP looked like all three of these things at once — and was, briefly, none of them. Which is the structural fact this sidebar makes legible: the HLP is the chain's house in a literal sense. It pays the dealer. It collects when the cards run right. It is exposed to the trader who walks in with a counterfeit hand.

The JELLY incident of 26 March 2025 is the chapter's published stress-test case. A whale opened approximately $8 million of JELLY shorts on Hyperliquid, then pumped the underlying JELLY spot price by approximately 400% in under an hour, attempting to force the HLP to inherit the squeeze. Initial unrealised loss to HLP: approximately $12 million. The Hyper Foundation responded by delisting JELLY and closing all positions at $0.0095 — a price that converted the attempted attack into a roughly $700,000 gain for HLP. HLP's TVL fell from approximately $500 million pre-incident (12 March 2025) to approximately $177 million by 1 April 2025 — a 65% drawdown that took roughly six weeks to recover to ~$195 million.[11] The episode produced tighter leverage rules on the venue's product surface and is the named precedent for HIP-3's slashing framework, which the next subsection develops.

The structural argument the HLP subsection lands: depositors are paid by the surface they fund (the spreads, the funding-rate flow, the liquidator-surplus) but tail-exposed to the venue's worst counterparties. The HLP is structurally a passive-LP-class equivalent for Hyperliquid — what the public AMM LP was supposed to be on Solana before prop-AMMs displaced the design (Chapter 8). The difference: HLP's passive depositors are exposed to active market making, not to a static curve, which means the asymmetric-information problem Chapter 2 identified for AMM LPs (LVR, adverse selection) is partially solved at the algorithm layer rather than passed through to the depositor. JELLY is the case where the algorithm layer was overwhelmed and the depositor base inherited the residual.

The validator set — what it does without a block construction layer ​

The active validator set on Hyperliquid crossed 21 in late 2025 or early 2026 and is currently 24, expanding to 27 over a 30-day onboarding window announced 18 May 2026.[12] Slot #21 currently requires approximately 525,000 HYPE in delegated stake — roughly $26 million at the May 2026 reference price of approximately $50 per HYPE. Self-delegation requirement: 10,000 HYPE locked for one year; a validator dropping below the self-delegation threshold enters "undelegate-only mode" and stops accepting new delegations. Commission rates typically run 1–5%; commission cannot be increased by more than 1% per step (an anti-bait-and-switch governance constraint). HYPE staking APR at approximately 400 million HYPE staked sits at roughly 2.37%, derived from an inverse-square-root reward formula that reduces the per-validator share as more stake enters the set.[13]

Named institutional validators currently in or near the active set: Imperator (operates ~50 protocols across multiple chains); Bharvest (operates ~13 protocols with 16,000+ delegators); P2P.org; Figment (also the Chapter 5 / Chapter 8 anchor for Solana; runs a Hyperliquid validator under the same institutional umbrella); the Hyperliquid Strategies × Unit Labs validator (listed on NASDAQ as PURR; live 11 May 2026, three days before the chapter's writing date; HYPE custodied at Anchorage Digital Bank, N.A.); and the Hyper Foundation Nodes — five validators operated directly by the Hyper Foundation with low commission rates.[14]

The validator's role on Hyperliquid is structurally different from both the Solana slot leader (Chapter 8) and the Ethereum proposer (Chapter 5). There is no block construction to optimise; the matching engine's logic is fixed protocol code, not validator software. There is no scheduler-mode choice that affects revenue; there is no Harmonic equivalent at the marketplace layer; there is no builder relationship to capture +101% versus median. The validator's revenue is fully accounted for by commission on the staking-reward flow plus its proportional share of the buyback machine's value-accretion effect on the HYPE token price. This is the chain's structural intention: by eliminating the block-construction surface, the chain also eliminates the access-vs-operational gap Chapter 7 documented on Solana. There is no top-quintile vs bottom-quintile validator gap on Hyperliquid in the Solana sense because there is no software or relationship moat to exploit — all validators run the same protocol code at the same latency requirements.

A structural caveat to that picture: slashing is not yet automatically implemented on Hyperliquid for validator misbehaviour. Per the chain's published staking documentation: slashing is reserved for "provably malicious behaviour such as double-signing blocks at the same round," but there is currently no automatic slashing implemented at the consensus layer.[15] Validators may vote to jail peers that do not respond with adequate latency or frequency to consensus messages; a jailed validator stops producing rewards for delegators until unjailed by quorum vote. This is structurally different from Ethereum's automatic slashing for double-signing (Chapter 5) and from Solana's no-slashing-but-vote-credit-reduction model. HIP-3 does implement slashing — but at the application-deployer layer rather than the consensus layer, which the next subsection develops. Slashing exists on Hyperliquid; it just exists in a different place than on either of the other two major chains.

Chapter 5's "permissionless-top-21 validator set" framing — accurate through late 2025 — is now superseded. The set is 24 expanding to 27, and the structural argument (a small, permissioned-in-practice validator set whose role is operating the matching engine inside consensus rather than constructing blocks externally) survives the specific-number update.

HIP-3 — the chain's programmability primitive, in motion ​

HIP-3 builder-deployed perpetuals launched on mainnet on 13 October 2025, with a 500,000 HYPE (~$25 million) staking requirement to gate deployment.[16] The mechanics: a deployer who posts the stake can permissionlessly launch any number of perpetual markets on top of HyperCore, with full control over oracle selection, contract specifications, maximum leverage (subject to protocol-level safety caps), margin ratios, and open-interest caps. The deployer must provide its own front-end interface and its own liquidity (which can be HLP-backed via HIP-3-specific HLP allocations, externally market-made, or some combination). From the user's perspective, fees on HIP-3 markets are 2× the standard validator-operated perp fees; the deployer receives 50% of the fee, the protocol receives the other 50%. The net effect is that the protocol collects the same fee regardless of whether a trade routes through an HIP-3 or a validator-operated market — the additional fee charged on HIP-3 markets is the deployer's revenue, not the protocol's.

The deployer's stake must be maintained for thirty days after all the deployer's perps are halted (a clawback window against malicious behaviour). HIP-3's slashing framework — the structural cousin of Solana's Foundation Delegation Program enforcement — is the chapter's load-bearing point about Hyperliquid's risk geography: up to 100% of the deployer's staked HYPE can be slashed for invalid state transitions; 50% for brief downtime; 20% for network degradation.[17] The slashed tokens are burned rather than redistributed (per the chain's published rationale, to prevent perverse incentives between users and validators). This is meaningfully different from Solana's removal-from-SFDP enforcement, which redirects stake delegation but does not destroy capital.

The empirical state of HIP-3 in May 2026: aggregate 30-day HIP-3 volume of approximately $2.82 billion with 20,348 unique traders, and HIP-3 markets now representing more than 35% of all Hyperliquid trading volume.[18] Named operators and volumes:

  • TradeXYZ (XYZ100): >90% of HIP-3 open interest; tokenized stocks and commodities on-chain perpetuals; $12.7 billion cumulative volume since launch; the flagship "TradFi-asset-on-on-chain-perp-CLOB" use case.
  • Ventuals: 13 listed markets; 30-day perpetual volume approximately $702,000; the venture-stage product surface example.
  • Felix Protocol: ~$300M TVL on HyperEVM; HIP-3 markets paired with feUSD (a Hyperliquid-native stablecoin derived from a Liquity V2 fork).
  • Markets by Kinetiq: HIP-3 perpetuals built on Kinetiq's kmHYPE liquid staking token; Kinetiq is the chain's largest liquid-staking protocol (kHYPE TVL approximately $639 million, peak approximately $2.28 billion).
  • HyENA, Dreamcash, Paragon: live HIP-3 operators at smaller volumes.

The structural framing the subsection lands: HIP-3 is the chain's permissioned-but-non-exclusive programmability primitive — anyone can deploy if they post the stake, but the stake is large enough to gate the operator set to institutional or VC-backed teams. This is structurally different from Ethereum's permissionless smart-contract layer (anyone can deploy any contract for ~$0 of gas, modulo gas fees) and from Solana's program-deployment surface (similarly permissionless for ~$0–$10 of deployment cost). HIP-3 is the chain saying: programmability exists, but at a price. The price is the moat that keeps the deployer set institutional. The 500K HYPE deployment stake is the structural mechanism that makes HIP-3 deployer slots economically comparable to Ethereum's builder layer's economies-of-scale moat (Chapter 5).

HYPE tokenomics and the buyback machine ​

HYPE has a 1 billion maximum supply and approximately 333 million circulating tokens as of March 2026.[19] 99% of trading fees on validator-operated perpetual markets route to the Assistance Fund — the on-chain treasury — which executes autonomous on-chain HYPE buybacks against open-market liquidity. Weekly buyback rate as of January 2026: approximately $1.7 million, accelerating in high-volume periods. Cumulative buybacks crossed $1 billion in fifteen months from HYPE launch (November 2024 → February 2026).[20] In December 2025, the community proposed and executed a burn of approximately 37.5 million HYPE — roughly 4.17% of total supply, valued at approximately $912 million at execution prices — held by the Assistance Fund. An additional proposal in January 2026 nominated approximately 13% of circulating supply for a future burn under the same governance pattern.

The two-framing question Chapter 5 carried — "3% of trading fees to HLP / 97% to the Assistance Fund" versus "99% of fees to the Assistance Fund for buybacks" — resolves here against the primary documentation. The 3%/97% split describes the allocation of HLP-routed trading flow: when a trade routes through an HLP-quoted match, 3% of the fee goes to HLP depositors and 97% goes to the Assistance Fund. The 99%/1% framing describes the allocation of validator-operated perp fees overall (the broader denominator that includes both HLP-quoted and non-HLP-quoted trades on validator-operated markets). The two are not the same flow; they are nested allocations of different denominators. The chapter cites the Hyperliquid Docs for the reconciliation.[21]

The structural argument the tokenomics subsection lands: Hyperliquid runs at structural breakeven by design. Revenue and buybacks net out at the protocol level — DefiLlama's published "Earnings $0" classification across all periods is the accounting reflection of this design choice, not a P&L failure. The chain's economic value-capture mechanism is token holders via the buyback-and-burn machine, not protocol equity-holders in a traditional sense. There is no Hyperliquid Labs revenue line that compounds into corporate equity value; there is a HYPE token whose price the buyback machine supports against issuance. Whether this structural choice is sustainable across multi-year volume cycles — particularly if perp-trading volume contracts the way Solana's memecoin volume contracted in Q1 2026 — is an open question the chapter notes but does not resolve.

The Bitwise BHYP ETF — live on NYSE Arca on 15 May 2026, the day after this chapter is written — is the institutional access surface the buyback machine plus 2.37% HYPE staking APR plus approximately 85%-of-staking-rewards-retained-after-fees offers regulated US investors.[22] Anchorage Digital Bank, N.A. is the custodian. The 0.67% annual management fee is competitive with comparable single-asset crypto ETF wrappers. Approved trading counterparties: FalconX, Flowdesk, Nonco, Wintermute (the same firms named in the Chapter 7 approval-not-exclusivity disclosure). The ETF launching makes Hyperliquid the first single-application L1 to acquire a regulated US ETF wrapper with native staking yield exposure. The structural significance is that the chain's validator set now has Anchorage-custodied HYPE among its delegated stake — institutional flow is being introduced to the validator base, not just to the trading surface.

How this plays out on each chain — and what Hyperliquid is not ​

Hyperliquid is the chain where the matching engine sits inside consensus and the extraction surface (mempool, builder, relay, searcher) is eliminated. The trade-off the chapter has documented: less programmability than Solana (HyperEVM TVL is roughly 1/50th of Solana DeFi), smaller dev ecosystem than Ethereum (no general-purpose smart-contract surface beyond HyperEVM), concentrated team (approximately eleven people, no outside venture capital), single dominant product (perpetuals at ~6% of global perp market share). The chain won what no Solana CLOB attempt could win, but it won by sacrificing what Solana's general-purpose architecture provides.

Solana (Chapter 8) is the chain whose vertical integration compresses the extraction surface; Hyperliquid is the chain whose architecture eliminates it. The cross-chain comparison: Solana retains a wallet-RPC-aggregator-bundle-validator stack with five named firms per trade (Phantom, Helius, Jupiter, Jito, the leader validator); Hyperliquid replaces this with HLP, validator set, HIP-3 deployers, and the buyback machine — four loci, fewer named firms per trade, more concentrated value capture per locus. Different shape, comparable aggregate concentration.

Ethereum and its L2s (Chapter 10) are the third structural option. Ethereum is the chain where exclusive flow reached its most mature form (Chapter 7) and where PBS is the explicit separation that Solana never accepted and Hyperliquid eliminated. The L2 fragmentation problem and the cross-chain MEV surface are Chapter 10's central questions. The Arbitrum bridge that Hyperliquid is deprecating — the chain's I/O surface in 2024–2025, the locus of the December 2024 DPRK-tagged-wallet scare with the $502.71 million single-day outflow record, and now being retired in favour of natively-minted USDC via Circle's CCTP[23] — is itself a hint at the L2 thesis. The same Arbitrum infrastructure that handled most of Hyperliquid's USDC I/O is the chain whose Ethereum-anchored security guarantees plus sequencer-controlled MEV produces a different value-capture pattern than Hyperliquid's in-consensus matching. Chapter 10 develops both.

Who wins, who loses, why ​

Four-actor stratification, in order of structural significance.

The HLP depositors win — when the flow is healthy. When the flow is adversarial, they lose. Approximately $383 million of TVL collected roughly $121.8 million of cumulative profit-and-loss through October 2025. JELLY (March 2025) demonstrated the tail risk: a single targeted attack drove a 65% TVL drawdown in two weeks. The HLP is structurally a passive-LP-class equivalent — depositors fund the surface, take the spread plus the liquidator-surplus flow, and are tail-exposed to the venue's worst counterparties. The Hyperliquid version of "the public AMM LP who got displaced by prop-AMMs on Solana" is "the HLP depositor who could not be displaced because the venue runs HLP as its house." The structural improvement is real; the tail exposure is also real.

The validator set wins, structurally. 24 large stakers, expanding to 27 — each requiring more than 525,000 HYPE delegated (~$26 million at recent prices) — capture 1–5% commission on the staking-reward flow plus their proportional share of the buyback machine's value-accretion effect on HYPE price. The validator set is the chain's structural beneficiary of every trade, in proportion to its HYPE stake. The named professional operators (Imperator, Bharvest, Foundation Nodes, P2P.org, Figment, Hyperliquid Strategies × Unit Labs) are the chain's incumbent stake holders; the BHYP ETF launching the day after this chapter is written now introduces Anchorage-custodied regulated US institutional flow to the same set.

HIP-3 deployers win — but the structural moat is the 500K HYPE stake. TradeXYZ at >90% of HIP-3 open interest and $12.7 billion cumulative volume is the flagship. Ventuals, Felix, Kinetiq Markets, HyENA, Dreamcash, Paragon are the long-tail. Deployers earn 50% of the doubled-fee on their markets, and the 500K HYPE deployment stake (~$25 million) is a structural moat that gates the operator set to institutional or VC-backed teams. The moat is comparable in shape to the Ethereum builder layer's economies-of-scale concentration (Chapter 5) and is the chain-architecture version of Chapter 7's structural finding: even in a chain that eliminated the extraction surface, programmability primitives concentrate into a small set of well-capitalised teams.

Retail traders pay less per trade than on any comparable on-chain perp venue — but pay it more visibly. Alice's $10,000 BTC long pays approximately 2–4 basis points of all-in cost over a short-to-medium hold (taker fees, funding-rate exposure, occasional minor slippage at depth-of-book). The structural take is lower per trade than Solana's wallet-RPC-aggregator-bundle-validator stack — but the flow routes through a single mechanism (HLP-quoted matching plus the Assistance Fund) rather than dissipating across multiple firms, which makes the take both lower and more legible. Whether higher visibility plus lower magnitude is structurally preferable to lower visibility plus higher magnitude is the chapter's clinical comparison rather than a moral judgement.

The structural closing observation. Hyperliquid is the chain that eliminated the extraction surface Ethereum operates inside and Solana could only compress. The value did not disappear when the surface went away. It re-concentrated into four named loci — the HLP, the validator set, the HIP-3 deployers, HYPE holders via the buyback machine — and the names are different from Ethereum's and Solana's but the concentration is comparable. The chapter's "concentrated differently" framing is the answer to the question Chapter 8's verdict left open. Hyperliquid does not have searchers, sandwich-attackers, builders, or relays in its extraction stack. It has the house, the validator set, the deployers, and the token holders. The first is exposed to tail risk by design; the second is a permissioned-by-stake set of large operators; the third is moated to institutional teams; the fourth captures the protocol's economic surplus via a buyback-and-burn machine that runs at structural breakeven. The architecture is genuinely different. The shape of who-captures-what is not as different as the architecture suggests.

What changes when… ​

Chapter 10 picks up the third structural option. Ethereum is the chain where exclusive flow reached its most mature form (Chapter 7) and where proposer-builder separation is the explicit architectural choice neither Solana nor Hyperliquid made. The L2 fragmentation problem — Arbitrum, Base, Optimism, Linea, plus the sequencer-controlled MEV surface each L2 introduces — produces a different value-capture pattern than either Solana's vertically-integrated stack or Hyperliquid's in-consensus matching. The Arbitrum bridge Hyperliquid is deprecating, the Optimism Superchain's cross-rollup interop work, the Base sequencer's published MEV-redistribution policies, and the cross-chain MEV the L2 ecosystem now produces are the central questions of Chapter 10. The three-chain Part III concludes there.

Footnotes and sources ​

  1. Bitwise Investments, Bitwise Launches Spot Hyperliquid ETF (BHYP), https://bitwiseinvestments.com/newsroom/bitwise-launches-spot-hyperliquid-etf-bhyp; PR Newswire, Bitwise Launches Spot Hyperliquid ETF (BHYP), 15 May 2026, https://www.prnewswire.com/news-releases/bitwise-launches-spot-hyperliquid-etf-bhyp-offers-exposure-to-leading-onchain-derivatives-exchange-with-staking-rewards-302772855.html; Bitwise S-1/A 10 April 2026, https://www.streetinsider.com/SEC+Filings/Form+S-1A+Bitwise+Hyperliquid+ETF/26300298.html. NYSE Arca listing 15 May 2026; Anchorage Digital custody; 0.67% annual management fee; ~85% of staking rewards retained for ETF investors; approved trading counterparties FalconX, Flowdesk, Nonco, Wintermute. Already cited (S-1/A) in Chapters 5 and 7. Accessed 2026-05-14. ↩︎ ↩︎ ↩︎

  2. Coin Edition, Hyperliquid to Increase Validators Amid Transparency and Security Discussions, https://coinedition.com/hyperliquid-to-increase-validators-amid-transparency-and-security-discussions/. Validator set expanding from 24 to 27 over a 30-day onboarding window; announcement 18 May 2026. Accessed 2026-05-14. ↩︎ ↩︎

  3. Coinpedia on X, Hyperliquid #1 Crypto Application Revenue Q1 2026, https://x.com/CoinpediaNews/status/2040351547629154534; PANews, Solana Q1 2026 Network Activity Report, https://www.panewslab.com/en/articles/019da9c6-e9d5-76c0-904a-878418fd7fbc. Hyperliquid Q1 2026 application revenue ~$144.8M (#1 crypto application); Solana Q1 2026 chain REV ~$89.5M (#2 chain, down 68% YoY). Already cited Chapter 8. Accessed 2026-05-14. ↩︎

  4. Fortune, How a Harvard Grad Helped Make Hyperliquid the Biggest DeFi Trading Venue in the World, 12 January 2026, https://fortune.com/2026/01/12/hyperliquid-jeff-yan-defi-perpetuals-perps-exchange-defi/; Datawallet, Who Is Jeff Yan? The Founder of Hyperliquid, https://www.datawallet.com/crypto/who-is-jeff-yan-hyperliquid; Medium, The 10-Person Team Quietly Building a Crypto Empire, https://medium.com/@qq441849029/uncovering-hyperliquid-founder-jeff-yan-the-10-person-team-quietly-building-a-crypto-empire-e32770ae02aa. Jeff Yan (Harvard '17 alumnus, former Hudson River Trading quant, founder of Chameleon Trading) + pseudonymous co-founder "iliensinc" (Harvard classmate); Hyperliquid Labs ~11 people; zero outside venture capital. Accessed 2026-05-14. ↩︎

  5. DefiLlama, Hyperliquid Protocol Page, https://defillama.com/protocol/hyperliquid; Yellow Research, Hyperliquid Perp Volume Dominance in 2026, https://yellow.com/research/hyperliquid-perp-volume-dominance-how-2026. Q1 2026 perpetual trading volume ~$619.46B; April 2026 30-day perp volume ~$180B+; HyperBFT block intervals ~70ms. Accessed 2026-05-14. ↩︎

  6. Hyperliquid Docs, HyperCore Overview, https://hyperliquid.gitbook.io/hyperliquid-docs/hypercore/overview; Zealynx Security, Understanding Hyperliquid Architecture (HyperBFT, HyperCore, HyperEVM) Part 1, https://www.zealynx.io/blogs/Understanding-Hyperliquid-Architecture-HyperBFT-HyperCore-HyperEVM-Part1. HyperBFT consensus mechanics: pipelined HotStuff-derivative BFT protocol; ~70ms block intervals; end-to-end median finality ~200ms / p99 ~900ms (Chapter 2). HyperCore + HyperEVM share consensus and blocks with independent state. Accessed 2026-05-14. ↩︎

  7. The Block, Hyperliquid Gains on Centralized Exchanges as Perps Market Share Nears 6%, https://www.theblock.co/post/395728/hyperliquid-gains-centralized-exchanges-perps-market-share-nears-6; Atomic Wallet, Perpetual DEXs 2026, https://atomicwallet.io/academy/articles/perpetual-dexs-2026. Hyperliquid global perp futures market share ~6% (March 2026), up from ~3.5% one year prior; on-chain perp DEX share ~70%; #2 (dYdX) at ~10–12% of Hyperliquid's monthly volume. HyperEVM TVL ~$1.9B as of mid-2026. Accessed 2026-05-14. ↩︎

  8. DefiLlama, Phoenix Protocol Page, https://defillama.com/protocol/phoenix; Ellipsis Labs, Introducing Phoenix Perpetuals, https://www.ellipsislabs.xyz/blog-posts/introducing-phoenix-perpetuals. Phoenix peak Q2 2024 revenue $3.7M; Q1 2026 $68,604; renamed Phoenix Legacy; pivoted to perpetuals. Already cited Chapters 2 and 8. Accessed 2026-05-14. ↩︎

  9. Hyperliquid Docs, HyperCore Overview; throughput specification of ~200,000 orders per second sustained. Accessed 2026-05-14. ↩︎

  10. Hyperliquid Docs, Protocol Vaults — HLP, https://hyperliquid.gitbook.io/hyperliquid-docs/hypercore/vaults/protocol-vaults; DefiLlama, Hyperliquid HLP, https://defillama.com/protocol/hyperliquid-hlp; 0xian Substack, Understanding Hyperliquid's HLP Vault, https://0xian.substack.com/p/understanding-hyperliquids-hlp-vault. HLP TVL ~$383M as of May 2026; lifetime cumulative PnL ~$121.8M through October 2025 (~450% total return); 4-day withdrawal lock; ~3% of trading fees to HLP depositors, 97% to Assistance Fund (on HLP-routed flow). Already cited Chapter 2. Accessed 2026-05-14. ↩︎

  11. Monolith VC, Hyperliquid After the JELLY Attack: Collapse or Comeback, https://medium.com/@monolith.vc/hyperliquid-after-the-jelly-attack-collapse-or-comeback-f380ce55472c; OAK Research, Hyperliquid JELLY Attack: Context, Vulnerability, Team Solution, https://oakresearch.io/en/analyses/investigations/hyperliquid-jelly-attack-context-vulnerability-team-solution; The Block, Hyperliquid Delists JELLYJELLY Memecoin Amid Whale Manipulation Fiasco, https://www.theblock.co/post/348314/hyperliquid-delists-jellyjelly-memecoin-amid-whale-manipulation-fiasco. JELLY incident 26 March 2025: ~$8M whale shorts; ~400% spot pump; initial unrealised HLP loss ~$12M; closed at $0.0095 ($700K HLP gain); HLP TVL fell $500M → $177M (65% drawdown); recovered to ~$195M by May 2025. Accessed 2026-05-14. ↩︎

  12. Coin Edition source per [2:1]; Hyperliquid Docs, Staking, https://hyperliquid.gitbook.io/hyperliquid-docs/hypercore/staking; Imperator, Hyperliquid Validators Guide, https://www.imperator.co/resources/blog/guide-hyperliquid-validators. Slot #21 ~525,000 HYPE; self-delegation 10,000 HYPE locked one year; commission cap rules (no more than +1% per step). Accessed 2026-05-14. ↩︎

  13. Hyperliquid Docs, Staking; StakingRewards, Hyperliquid Validator Yields, https://www.stakingrewards.com/asset/hyperliquid. HYPE staking APR ~2.37% at ~400M HYPE staked (inverse-square-root reward formula); validator commission rates 1–5% typical. Accessed 2026-05-14. ↩︎

  14. PR Newswire, Hyperliquid Strategies and Unit Labs Announce Validator on Hyperliquid, 7 May 2026, https://www.prnewswire.com/news-releases/hyperliquid-strategies-and-unit-labs-announce-validator-on-hyperliquid-302765934.html; StockTitan, Hyperliquid Strategies and Unit Labs Announce Validator, https://www.stocktitan.net/news/PURR/hyperliquid-strategies-and-unit-labs-announce-validator-on-22lxt08tvvkx.html. Hyperliquid Strategies (NASDAQ: PURR) × Unit Labs validator launched 11 May 2026; HYPE custodied at Anchorage Digital Bank, N.A. Accessed 2026-05-14. ↩︎

  15. Hyperliquid Docs, Staking (slashing reserved for "provably malicious behavior such as double-signing blocks at the same round"; "There is currently no automatic slashing implemented"); Hyperliquid Docs, HIP-3 Builder Deployed Perpetuals, https://hyperliquid.gitbook.io/hyperliquid-docs/hyperliquid-improvement-proposals-hips/hip-3-builder-deployed-perpetuals. HIP-3 deployer slashing: up to 100% stake for invalid state transitions; 50% brief downtime; 20% network degradation; slashed tokens burned rather than redistributed. Accessed 2026-05-14. ↩︎ ↩︎

  16. Hyperliquid Docs, HIP-3 Builder Deployed Perpetuals; The Block, Hyperliquid Activates HIP-3 Upgrade, https://www.theblock.co/post/374306/hyperliquid-activate-hip-3-upgrade; OAK Research, What Is Hyperliquid HIP-3?, https://oakresearch.io/en/analyses/innovations/what-is-hyperliquid-hip-3-how-it-works-and-use-cases. HIP-3 mainnet launch 13 October 2025; 500,000 HYPE staking requirement; 50/50 deployer/protocol fee split; user fee 2× standard; 30-day clawback window after deployer halts perps. Accessed 2026-05-14. ↩︎

  17. Hyperliquid Docs, HIP-3 Builder Deployed Perpetuals. Slashing schedule per [15:1]; tokens burned rather than redistributed. Accessed 2026-05-14. ↩︎

  18. Loris HIP-3 Dashboard, https://loris.tools/hip3; Dune, HIP-3 Dashboard (yandhii), https://dune.com/yandhii/hip3; Metaverse Post, TradeXYZ, Ventuals, and Felix Protocol Launch HIP-3, https://mpost.io/tradexyz-ventuals-and-felix-protocol-launch-hip-3-introducing-permissionless-perpetual-markets-on-hyperliquid/; The Defiant, Tokenized Equity Market on Hyperliquid Heats Up, https://thedefiant.io/news/defi/tokenized-equity-market-on-hyperliquid-heats-up. Aggregate 30-day HIP-3 volume ~$2.82B; 20,348 unique traders; HIP-3 >35% of all Hyperliquid trading volume; TradeXYZ XYZ100 cumulative volume $12.7B (>90% of HIP-3 open interest). Accessed 2026-05-14. ↩︎

  19. Tokenomics.com, Hyperliquid Tokenomics: How HYPE Captures $65M Monthly in Holder Revenue, https://tokenomics.com/articles/hyperliquid-tokenomics-how-hype-captures-65m-monthly-in-holder-revenue; Buildix, HYPE Tokenomics Explained, https://www.buildix.trade/blog/hype-tokenomics-explained-buyback-burn-staking-supply-2026. HYPE max supply 1B; circulating ~333M (March 2026). Accessed 2026-05-14. ↩︎

  20. DL News, Hyperliquid's HYPE Token Buyback Tops $1B: Is It Sustainable?, https://www.dlnews.com/articles/defi/hyperliquid-hype-token-buyback-1bn-but-is-it-sustainable/; The Defiant, Hyperliquid Proposes Burning 13% of Circulating Token Supply, https://thedefiant.io/news/tokens/hyperliquid-proposes-burning-13-percent-of-circulating-token-supply; Phemex, Hyperliquid Repurchase Fund Exceeds $1 Billion, Burns 4.17% of HYPE Supply, https://phemex.com/news/article/hyperliquid-repurchase-fund-exceeds-1-billion-burns-417-of-hype-supply-64202. Cumulative HYPE buybacks crossed $1B in 15 months (Nov 2024 → Feb 2026); weekly buyback ~$1.7M in January 2026; 37.5M HYPE (~4.17% of supply, ~$912M at execution prices) burned 25 December 2025; additional ~13% of circulating supply proposed for burn January 2026. Accessed 2026-05-14. ↩︎

  21. Hyperliquid Docs, Protocol Vaults — HLP; Hyperliquid Docs, Staking. The 3%/97% allocation describes HLP-routed flow only; the 99%/1% allocation describes validator-operated-perp fees overall (the broader denominator that includes both HLP-quoted and non-HLP-quoted trades on validator-operated markets). The two are nested allocations of different denominators rather than competing claims. Accessed 2026-05-14. ↩︎

  22. Bitwise newsroom and PR Newswire sources per [1:1]; Bitwise S-1/A 10 April 2026 per [1:2]. BHYP NYSE Arca listing 15 May 2026; Anchorage Digital custody; 0.67% annual management fee; ~85% of staking rewards retained; approved trading counterparties FalconX, Flowdesk, Nonco, Wintermute. Accessed 2026-05-14. ↩︎

  23. Cointelegraph, Hyperliquid Outflows on North Korea Exploit Fears, https://cointelegraph.com/news/hyperliquid-outflow-north-korea-exploit-fears; CoinDesk, Hyperliquid Sees Record $60M in USDC Flee as North Korea Said to Be Probing Perpetuals Exchange, 23 December 2024, https://www.coindesk.com/markets/2024/12/23/hyper-liquid-sees-record-60-m-in-usdc-flee-as-north-korea-said-to-be-probing-perpetuals-exchange; Blockworks, Hyperliquid Security Fuels Decentralization Concerns, https://blockworks.com/news/hyperliquid-security-fuels-decentralization-concerns; Hyperliquid on X, Bridge Deprecation Announcement, https://x.com/HyperliquidX/status/1997852864308486319; CCN, Hyperliquid Retires Arbitrum Bridge for Native USDC, https://www.ccn.com/news/technology/hyperliquid-retires-arbitrum-bridge-for-native-usdc/. Arbitrum bridge record single-day outflow ~$502.71M on 23 December 2024 (DPRK-tagged wallet scare; no exploit confirmed by Hyperliquid Labs); bridge being deprecated; USDC natively linked HyperCore ↔ HyperEVM via Circle CCTP. Accessed 2026-05-14. ↩︎