Markets & Trading

Solidus Flags $170M in Suspicious Hyperliquid Oil Orders

Solidus Labs flagged $170 million in unusual oil-linked orders on Hyperliquid. The reported pattern raised spoofing concerns, with intent unconfirmed.

Solidus Flags $170M in Suspicious Hyperliquid Oil Orders
An oil pumpjack in Djerba, Tunisia. The report concerns oil-linked derivatives, rather than physical oil deliveries. Photo: Mohamed Fsili / Unsplash

Key Notes

  • Solidus Labs flagged more than $170 million in unusual oil-linked orders across two Hyperliquid accounts.
  • The reported trading occurred March 8–10; the trader’s intent to manipulate remains unconfirmed.
  • US spoofing rules focus on intent to cancel before execution, rather than treating every cancellation as misconduct.

Solidus Labs identified more than $170 million in unusual oil-linked orders placed through two Hyperliquid accounts, according to an October 28 Bloomberg report. The surveillance firm flagged a pattern consistent with suspected spoofing.

The activity examined occurred on March 8–10 amid oil-market volatility associated with the Iran conflict. The figure describes orders, rather than $170 million in completed trades or stolen funds.

Displayed Orders Can Give a Misleading Signal

A public summary of the report describes large orders repeatedly canceled on one side of the book while trades were executed on the other. The trader’s manipulative intent remains unconfirmed.

Spoofing is a familiar market-abuse concern. CME Group’s explanation describes large orders used to create an artificial impression of buying or selling pressure. A trader can seek to benefit through genuine executions on the opposite side before withdrawing the misleading orders.

Displayed depth is therefore different from completed trading. A large sell order can influence how other participants assess supply, but its presence does not establish that its owner actually sold that amount.

Cancellation Alone Does Not Establish Spoofing

The Commodity Futures Trading Commission’s guidance defines spoofing around an intention to cancel a bid or offer before execution. It describes the statutory provision’s application to trading on or subject to the rules of registered entities, including designated contract markets and swap execution facilities.

CME’s current Rule 575 advisory distinguishes an order entered for a genuine transaction and later canceled because circumstances changed. It also explains that a partial fill does not automatically establish compliance. The surrounding pattern and intent matter.

Congress added the specific anti-spoofing provision through the 2010 Dodd-Frank Act. A 2015 Justice Department announcement described Michael Coscia’s conviction in the first federal prosecution under that provision. Criminal enforcement is therefore an established possibility in applicable cases, rather than a consequence automatically triggered by every canceled order.

Those rules provide context for evaluating the alleged pattern. They are not a finding that this trader violated U.S. law, nor do they establish jurisdiction over a particular offshore contract.

Public Records and Market Oversight Are Different Questions

Hyperliquid Labs said orders, cancellations and trades are publicly recorded onchain and available for review, according to the published summary. That response points to auditability; it does not independently settle the trader’s intent.

Hyperliquid’s HIP-3 documentation assigns market definition and operation to deployers using its shared infrastructure. Their responsibilities include contract specifications, the oracle supplying reference prices, leverage limits and settlement when necessary.

Each deployment has separate order books, margining and operator settings. That structure makes it important to distinguish an underlying blockchain from the businesses and controls associated with individual markets.

CoinScreamer’s earlier oversight report examined Jeff Yan’s proposal to regulate market operators. Our Ripple Prime coverage separately described institutional swaps referencing Trade.xyz perpetuals on Hyperliquid. Neither article establishes a connection to the accounts in this analysis.

The reported findings concern oil-linked derivatives on Hyperliquid. They do not demonstrate that the trader moved global physical-oil prices, and the surveillance assessment should be distinguished from a regulator’s enforcement decision.

Disclaimer: CoinScreamer is an independent media brand owned and operated by NuvexMedia LLC, publishing news, research, and market insights on digital assets and related technologies. NuvexMedia LLC invests in and collaborates with companies across the digital asset, blockchain, and technology sectors. These relationships do not influence CoinScreamer’s editorial coverage, and the publication maintains full editorial independence to provide accurate, timely, and objective information. © 2025 NuvexMedia LLC. All rights reserved. This content is for informational purposes only and should not be considered legal, tax, investment, financial, or other professional advice.

DeFi & FinTech, Markets & Trading, News