OAK — OnChain Attack Knowledge

Worked example · 2026-10

Papertrade — a 1,000x exchange priced every trade off Hyperliquid's bid/ask midpoint, so a trader moved that midpoint by a few dollars — Papertrade / HyperEVM (Hyperliquid) — 2026-10-10

Loss
~$1.28M profit to one wallet (0x2025…840e) on ~$3.18B Papertrade volume on launch day, per The Block's review of trading data; the wallet withdrew ~$2.48M against ~$1.2M deposited. Papertrade's pool fell from ~$5M to ~$2.4M before recovering. A later 30-short position was liquidated for a ~$450K loss. Papertrade says the trader returned most gains through new accounts; unverified.
OAK Techniques observed
OAK-T17.001 (Cross-Venue Arbitrage-Driven Price-Discovery Distortion — primary. Papertrade prices every trade at the midpoint of Hyperliquid's best bid and offer. The wallet held large leveraged Papertrade positions while buying ~6,060 ETH on Hyperliquid (lifting ETH ~$3, 0.12%), selling ~5,210 ETH (dropping it ~$3.50), and later selling ~6,590 ETH into 660x shorts. At up to 1,000x, a 0.1% move on the reference venue is a full-margin payout on the derived one. See techniques/T17.001-cross-venue-arbitrage-price-distortion.md). No key, contract or authorisation was bypassed.
Attribution
pseudonymous. First flagged by X users Boblob and butler.
Key teaching point
Leverage divides the cost of moving your price feed. About $52K of Hyperliquid fees bought ~$1.28M because the venue's price was a single book's top-of-book and its open-interest caps let one account hold positions far larger than the depth behind that price. Papertrade calls it loose launch caps, not a design flaw; either way, the cap is what bounded the loss, and it was set for demand rather than for the cost of manipulation.

Summary

Papertrade, a HyperEVM perpetuals exchange offering up to 1,000x, launched at 10:00 ET on 2026-10-10. Within hours one wallet alternated large Hyperliquid ETH trades with offsetting Papertrade positions and closed them at the moved midpoint. Papertrade said the attempts were "not an oversight in the mechanism design," attributed them to loose open-interest caps and tightened caps on-chain and at the relayer.

Root-cause evidence

Public references

Techniques demonstrated (1)