Security

Hyperpetua is designed to be safe by construction rather than by trust.

• Self-custodial for traders. You keep your underlying position in your own wallet. The only thing escrowed is a USDC collateral buffer.
• Fully collateralized, bounded loss. Both your buffer and the vault's matching buffer are locked at open, so the swap is fully collateralized from the start. Your maximum loss is your posted buffer — there is no liquidation and no way to owe more than you put in.
• Keeper-settled on public data, with backstops. A keeper settles each matured swap on the cumulative realized funding it reads from Hyperliquid's public funding history. If a matured swap is ever left unsettled past a 7-day grace, anyone except the trader can void it (voidSwap) and both buffers are returned — the trader is excluded so a losing trader can't void to dodge a settlement owed to the pool. The owner can also emergency-void any open swap (adminVoid), returning both buffers with no P&L.
• Per-swap size cap. A single swap can lock at most a set fraction of the pool's free liquidity, and terms are capped at 30 days — so one swap can't freeze the vault or over-concentrate its risk.
• Pull-payments. Settlement credits each party's balance, which they claim independently — a blacklisted or paused counterparty can only block itself.

For liquidity providers

LPs deposit USDC into the pooled vault and receive shares. That capital is the counterparty to traders' swaps and earns or loses the vault's side of P&L. Withdrawals come from idle pool liquidity; capital locked in open swaps frees as those swaps settle.

Pilot status

The live deployment is a HyperEVM testnet playground using mock USDC — no real value. The contract is unaudited: it has an extensive internal test suite and has passed internal adversarial review, but a professional third-party audit will be commissioned before any mainnet / real-money use. The keeper and owner are trust assumptions during the pilot. Keep size small.