Two Wallets Accused of Gaming PaperTrade's Pricing System on Hyperliquid
Published October 11, 2026, 14:45 PKT. Based on October 10-11 reporting by crypto.news, cryptonews.net and KuCoin's news flash on on-chain observer claims, and PaperTrade's published protocol documentation. The exploitation claims below are allegations from pseudonymous observers and have not been independently verified.
Two cryptocurrency wallets are accused of actively exploiting PaperTrade, a decentralized trading venue built on HyperEVM, by nudging Ethereum's price on Hyperliquid and profiting from synthetic positions priced off that same move. The allegations, circulated by on-chain observers on October 10 and 11, describe roughly $20 million in ETH trades pushing the reference price 10 to 20 basis points while the wallets hold positions worth hundreds of millions of dollars on PaperTrade. If true, the maneuver turns a tiny quote wobble into outsized gains, and the money comes out of PaperTrade's own liquidity pool.
The $20 million ETH trades and the 10-basis-point nudge
Crypto trader Rune amplified the concerns on October 11 after X user Boblob (@Dr_bobo54) claimed that two wallets were exploiting a weakness in PaperTrade's pricing system, crypto.news reported. According to Boblob, the wallets executed trades of approximately $20 million each on Hyperliquid, briefly moving ETH quotes by 10 to 20 basis points, roughly 0.1 to 0.2 percent. The researcher claimed the wallets simultaneously held long positions on PaperTrade with a combined nominal value reaching hundreds of millions of dollars.
The trick, as alleged, is that PaperTrade's pricing system allows traders to open or close positions using prices derived from Hyperliquid's order book. Move the reference price on Hyperliquid even slightly, the allegation goes, and the much larger positions on PaperTrade reprice against the manipulated number. TokenPost reported on October 11 that the alleged transactions involved nine-figure positions on PaperTrade alongside the $20 million Hyperliquid orders, though the report gave no verified wallet addresses, transaction hashes, or independently established loss figure.
The $3.14 million pool and the wallet ending in 840e
A separate October 10 allegation from pseudonymous observer El33 described the same pattern from the other side of the trade. El33 alleged that a trader opened large ETH shorts on PaperTrade, sold ETH on Hyperliquid to depress the midpoint price by roughly 10 basis points, then closed the PaperTrade positions for a profit, cryptonews.net reported. PaperTrade's public data showed about $3.14 million in the house liquidity pool and no queued payout debt when the strategy was flagged. A PaperDash view of the cited wallet, ending in 840e, showed about $1.73 million in realized trading gains, though that figure does not by itself establish that the gains came from manipulation.
El33 described a second leg in which the trader switches from shorts to longs on PaperTrade and then unwinds the Hyperliquid position, writing that the pattern looked like "someone currently draining Papertrade LP by Oracle manipulation," cryptonews.net reported. Marcin Kazmierczak, the co-founder of oracle provider RedStone, shared the post and called it an interesting oracle manipulation strategy on PaperTrade during weekends. His post did not include a separate transaction analysis, and the characterization remains an allegation, not an established loss estimate.
The BBO midpoint that makes it possible
PaperTrade does not match buyers and sellers the way an exchange does. It sells synthetic trades between customers and its own liquidity pool, pricing entries and exits off the midpoint of Hyperliquid's best bid and best offer, the price halfway between the highest buy order and the lowest sell order, according to the protocol's description. The platform offers leverage of up to 1,000 times on supported markets, including Bitcoin and Ethereum, which means even a fraction-of-a-percent reference-price move can multiply into large paper profits.
Critically, PaperTrade's own published documentation already flags this as a risk. Rune pointed to disclosures in the docs identifying possible manipulation of the best bid and offer as an unresolved protocol-level concern, KuCoin's news flash reported on October 11, citing Foresight News. According to the documentation excerpts discussed, a trader could potentially influence the midpoint by placing an order at a new best bid or offer, even if that order never executes. If the protocol accepts the resulting price without an independent check, a position could open or close against a quotation that does not reflect the prevailing market value. The existence of a documented risk, however, does not establish that an exploit actually occurred or that any user lost money.
That design differs from Hyperliquid's own pricing. Hyperliquid's official documentation describes separate oracle and mark prices meant to reduce the effect of abnormal trading, crypto.news reported: the oracle price is a weighted median of centralized-exchange prices updated by validators roughly every three seconds, and the mark price blends several inputs, including Hyperliquid's own market prices and prices from other venues, to calculate unrealized profit and loss, margin requirements, and liquidations. Nothing in the allegations suggests Hyperliquid's blockchain, trading engine, or oracle system was compromised. The concern is confined to how PaperTrade reads Hyperliquid's order book.
This is not the first time a Hyperliquid-connected pricing choice has drawn scrutiny. In July, a Hyperliquid-linked SK Hynix perpetual contract on Trade.xyz dropped 17.9 percent after an unusual transaction in South Korea moved the external price feeding the contract, and the operator later said it would cover qualifying liquidation losses, crypto.news reported. That incident involved a separate contract and pricing method and does not establish anything about PaperTrade.
What PaperTrade has and has not said
As of publication, PaperTrade had not issued a confirmed public response to either the El33 or the Boblob allegations, and no independently verified loss figure, compensation arrangement, or timeline for changing the pricing system had been announced. That silence is the gap in the story: the on-chain patterns are visible, the wallets are public, but the profits-versus-manipulation question has no official answer.
Some details of the pool mechanics are public. PaperTrade administrator @izebel_eth previously explained that only user losses enter the house pool, not collateral, and that when a winning trade closes while a payout queue exists, only the profits are queued while the original collateral becomes available again. The team's published launch controls give administrators the ability to pause new positions, freeze markets, change fee and impact parameters, and adjust opening headroom, cryptonews.net reported. That means the protocol can, in principle, halt new positions in a frozen market while existing positions still close against the paused midpoint, though no such action had been announced as of publication.
Until PaperTrade publishes its own accounting, the story sits where crypto security incidents often begin: an unverified pattern on a public ledger, real money seemingly at stake, and a documented design choice doing exactly what its own risk section warned it might do.
This article is news reporting and is not investment advice.
Sources
- crypto.news, "Hyperliquid sees $20M ETH trades: Was Papertrade exploited?" (October 11, 2026), primary source for the Boblob and Rune allegations, the $20 million trades, the 10-20 basis point moves, and the nine-figure position claims
- cryptonews.net, "Papertrade Faces Oracle-Manipulation Allegation as House Pool Shows $3.14 Million" (October 11, 2026), primary source for the El33 allegation, the $3.14 million pool snapshot, the $1.73 million PaperDash wallet gains, the 840e wallet reference, the RedStone co-founder comment, and the administrator's pool-mechanics explanation
- KuCoin news flash, "Papertrade Discloses BBO Price Manipulation Risk and ETH Price Volatility on Hyperliquid" (October 11, 2026), secondary source for the documentation risk disclosures, citing Foresight News and ME News
- PaperTrade official documentation, primary source for the BBO midpoint pricing mechanics and the disclosed manipulation risks
- TokenPost (October 11, 2026), secondary source for the nine-figure position framing, via crypto.news
MABOnChain Daily Brief
The key crypto and markets stories in one short, plain-language email. Free. Unsubscribe any time.
Prefer chat? Join us on Telegram
Keep reading
Triple-A Hacker Moves $12.4 Million in Ether to Tornado Cash
The attacker behind Triple-A's July treasury breach moved 4,970 ETH, worth about $12.4 million, into Tornado Cash on October 9 through 56 deposits, according to blockchain security firm Salus. The funds were consolidated from two intermediary wallets after crossing chains to Ethereum, a classic mixer-laundering pattern that lands while the mixer itself sits sanctions-free after the U.S. Treasury's March 2025 delisting.
France's Crypto Tax Plans Hit a Wall as Finance Committee Rejects Budget 31-3
France's National Assembly Finance Committee rejected the 2027 budget's revenue section 31-3 on October 9, stranding three crypto tax amendments it had just approved: a stablecoin swap tax, an exit tax on crypto over 800,000 euros, and a 10-year loss carryforward. Supporters must table them again when floor debate starts October 13, with a formal vote due October 20.
Ledger Confirms Tampered Hardware Implant in CryptoBilis Wallet Drain Probe
Ledger confirmed on October 10 that a device belonging to one affected CryptoBilis customer contained an unauthorized hardware implant, the first official evidence of physical tampering in the wallet-drain scandal that on-chain trackers now place above $93 million. CryptoBilis has suspended all hardware-wallet sales while Ledger works with authorities and security response group SEAL 911.


