Cobo Agentic Wallet

Papertrade Attack Exposes Risks in High-Leverage Pool and Revenue-Sharing Model

A single wallet reportedly extracted about $1.28 million from Papertrade less than a day after launch by exploiting the relationship between external pricing and extreme leverage. The incident has also raised questions about a token model whose revenue is largely generated by trader losses and distributed through PAPER staking.

Cobo Newsroom
Cobo NewsroomOct 18, 2026
Key takeaways
  • Papertrade uses a dollar-denominated digital asset in a liquidity pool as the counterparty to traders and references mid-market prices from Hyperliquid, leaving the pool exposed to short-term price moves in an external market.
  • A wallet reportedly moved ETH prices on Hyperliquid, opened corresponding positions on Papertrade, and later reversed the trade, extracting about $1.28 million from the protocol.
  • The platform advertised leverage of up to 1,000 times, allowing very small reference-price movements to produce disproportionately large changes in margin and pool liabilities.
  • Papertrade’s reported protocol revenue is largely linked to trader losses, while PAPER staking enables participants to share in the resulting income.
  • The model’s durability depends on whether sustained, genuine trading demand can replace early token incentives and whether tighter risk controls can reduce pool exposure without removing the product’s core utility.

News illustration

Summary

A single wallet reportedly extracted about $1.28 million from Papertrade less than a day after launch by exploiting the relationship between external pricing and extreme leverage. The incident has also raised questions about a token model whose revenue is largely generated by trader losses and distributed through PAPER staking.

A fast launch, followed by a structural stress test

Papertrade became one of the most closely watched new derivatives protocols almost immediately after opening for trading. It also faced a major test just as quickly. According to figures cited by TechFlow, a single wallet extracted approximately $1.28 million from the platform in less than a day by combining trades on Papertrade with price-moving activity in the external market used for reference pricing.

The episode matters beyond the amount involved. It highlights a structural vulnerability that can appear when a protocol combines three features: an external price feed, a passive liquidity pool acting as the counterparty, and extremely high leverage. In that setting, a trader who can influence the reference market may be able to create a price movement that produces a much larger payout from the pool than the cost of moving the market.

Papertrade opened trading on October 10, 2026. It was initially focused on synthetic perpetual contracts for assets including BTC and ETH, with leverage advertised as high as 1,000 times. Unlike a conventional order-book exchange, it does not rely on its own matching engine or a network of market makers to take the other side of each trade. Instead, trades settle against a liquidity pool using a dollar-denominated digital asset. If a trader profits, the pool pays the profit; if the trader loses, the loss flows into the pool.

For pricing, Papertrade reads the best bid and ask quotations on Hyperliquid and uses their midpoint as a reference. This architecture can reduce some of the operational complexity associated with maintaining an order book and can offer a trading interface without conventional funding rates. It also concentrates risk in the connection between the external market and the protocol’s internal settlement system.

How the reported trade worked

The reported sequence began with the wallet buying approximately 6,060 ETH in Hyperliquid’s spot market. That activity moved the relevant price by roughly $3, or about 0.12 percent. Under ordinary leverage, a move of that size might have limited financial significance after fees. At 1,000 times leverage, however, the same movement can translate into a much larger change relative to posted margin.

The wallet reportedly held a corresponding long position on Papertrade. When the external reference price moved higher, the position generated a gain that the Papertrade pool had to recognize. About an hour later, the trader reversed the structure. The wallet first opened 30 ETH short positions on Papertrade at approximately 660 times leverage, representing a reported notional value of around $297 million. It then sold roughly 6,590 ETH on Hyperliquid, pushing the reference price lower and generating a gain on the short position.

TechFlow estimated that the trader spent approximately $52,000 on Hyperliquid transaction fees and withdrew about $1.28 million from Papertrade. The wallet’s earlier history also suggested that its operator was an experienced Hyperliquid trader, with a substantial cumulative trading volume and reported net gains dating back to 2025. That history is relevant because the incident appears less like a random liquidation event and more like a deliberate examination of how the new protocol priced and settled risk.

The weakness was not simply that the platform allowed a large position. It was that the pool was largely passive while the price was determined elsewhere. A conventional market maker can adjust quotes when one side of its book becomes too large or when a market appears vulnerable to manipulation. A passive pool that simply reads an external price does not have the same flexibility. It may be forced to pay out on a price movement that was created specifically to exploit the settlement mechanism.

Limits can reduce the payout, but not remove the design problem

Papertrade reportedly responded that its initial position limits were too loose and that it was tightening them. That response addresses an important part of the problem. Smaller position limits can reduce the amount an attacker can extract from a single price move and may make an attack economically unattractive.

However, position limits also expose a tension in the product’s design. A platform marketed around 1,000-times leverage must still limit the notional size that a user can actually control. If the risk controls reduce the usable position to a very small amount, the headline leverage may remain technically available while its practical value declines.

More importantly, position limits are only one layer of defense. The protocol still has to manage the reliability of the price source, market impact, update timing, concentration by account and asset, and the pool’s ability to absorb losses during volatile conditions. Any system that allows small external price movements to determine large internal payouts must assume that participants will test the boundary between legitimate trading and economically rational price manipulation.

This is not a risk unique to Papertrade. Other on-chain liquidity pools that take directional exposure have also faced losses when large positions interacted with thin liquidity or external price formation. The broader lesson is that removing an order book does not remove market-making risk. It transfers that risk to the pool, the pricing mechanism, or both.

Why the revenue numbers look so large

Papertrade’s early revenue figures have attracted almost as much attention as the attack. TechFlow, citing DefiLlama, reported approximately $42.24 million in protocol revenue over a seven-day period, placing the project above several more established protocols during that period. Those figures should not be interpreted as ordinary exchange fees without examining how the revenue is generated.

In Papertrade’s pool-based model, trader losses increase the pool’s assets, while trader profits become liabilities for the pool. The protocol also uses an “Asymmetric PnL” mechanism under which trader profits may be reduced by a specified adjustment or settlement charge, while losses are not reduced on an equivalent basis. The result is a structure in which a significant portion of reported protocol revenue is connected to losses incurred by traders.

Papertrade then links those economics to the PAPER token. Through staking and revenue-sharing arrangements, token participants can receive a portion of the income generated by the protocol. This creates a direct relationship among three groups: traders take on leveraged exposure, the pool receives losses when traders lose, and token participants gain distribution rights connected to the pool’s performance.

That structure can create powerful early incentives. Token rewards may attract traders, liquidity providers, and participants seeking a share of protocol revenue. Increased activity can expand the pool and make the product appear economically successful in a short period. TechFlow reported that Papertrade had said its pool held roughly $5 million and had distributed approximately $25 million to PAPER stakers; it also reported that total value locked approached $70 million two days after launch and that active addresses exceeded 10,000.

But rapid revenue growth can coexist with substantial user losses. In another example cited by TechFlow and attributed to on-chain monitoring, one trader generated approximately $2.84 billion in notional volume and lost around $1.71 million on Papertrade. The trader reportedly received about $1.07 million in dollar-denominated digital-asset rewards and a large allocation of PAPER tokens. Even after accounting for those rewards, the trader’s cash loss was estimated at roughly $637,000.

The case illustrates why protocol revenue and participant returns are not the same measure. A pool can record large income while many traders lose money. Token rewards can offset part of those losses for selected participants, but the distribution may favor early or strategically positioned users. Later participants may face a different risk profile if incentives decline, pool liabilities increase, or the market becomes more competitive.

The sustainability question behind the staking model

The central question for PAPER’s revenue-sharing design is whether the protocol can generate durable activity without relying primarily on the continued arrival of incentivized participants. If income is mainly tied to high-leverage trader losses, then revenue growth is economically linked to the ability of users to keep losing money. That is not the same as building a stable fee business based on repeat demand for execution, settlement, or liquidity.

The model also creates a circular incentive structure. Traders may participate because of token rewards. Their trading produces gains or losses for the pool. Pool performance supports distributions to token participants, which can in turn attract more activity. Such a loop can be powerful during an early expansion phase, but it must be tested under less favorable conditions. If rewards are reduced, if risk limits make positions less attractive, or if new capital slows, trading volume and token demand may weaken together.

The composition of the rewards matters as well. A token allocation may have a high stated value without representing the same economic value as cash revenue. If rewards rely on continued issuance or on future participation, the system’s apparent yield can be sensitive to changes in demand and distribution policy. The key question is whether traders use Papertrade because its execution and settlement design meet a durable need, or because the reward schedule temporarily compensates them for taking losses.

What to watch next

Papertrade’s next phase will likely be defined by the trade-off between safety and product appeal. Stronger controls could include lower account and market exposure limits, more robust reference-price protections, safeguards around abrupt price changes, and mechanisms to pause or restrict settlement during extreme conditions. Each measure may reduce the probability or size of an exploit, but each can also reduce capital efficiency and the practical usefulness of very high leverage.

The most important indicators will therefore be broader than short-term revenue rankings. Observers will need to assess whether trading activity remains after risk limits are tightened, whether the liquidity pool can withstand concentrated positions, whether revenue becomes less dependent on trader losses, and whether token distributions remain economically supported without continuous incentive expansion.

Papertrade has demonstrated that a highly aggressive product design can attract rapid attention, liquidity, and transaction activity. The reported attack and trader-loss examples demonstrate the other side of that growth: exceptional revenue can reflect exceptional risk transfer. Until the platform shows that its pricing, pool management, and token distribution mechanisms can remain resilient under pressure, its early performance should be viewed as evidence of strong market interest—not as proof that the model is structurally sustainable.

Source: link

DEFI

About Cobo

Cobo is an institutional digital asset infrastructure provider founded in 2017. The Cobo Agentic Wallet extends Cobo's MPC custody platform to autonomous onchain agents.

Press inquiries: [email protected] · Media kit, executive bios, and additional materials available on request.
✦ Agentic Economy by Cobo

Get this in your inbox every Friday.

The weekly newsletter from the Cobo team — unpacking the most consequential stories in crypto, AI & payments through the lens of institutional custody.