



Yaugourt.hl
1.2K posts

@Yaugourt
Building on @hyperliquidx - @liquidterminal





Update on HIP-4, V2 contract found. After posting the V1 research, @androolloyd and I kept digging. He reverse-engineered a second contract deployed at genesis by the same team wallet. V2: 0x6d86b21e853758F5719408633e6BcB2cfd50cf07 Team wallet: 0xe21c78037329d06fe0d6fefc4221aaa67cb0d135 Full bytecode decompiled, Solidity reconstructed. 24/24 function selectors verified against on-chain bytecode. Important: All live prediction markets currently trading on HyperCore are linked to the V1 contract, NOT V2. V2 has no active markets yet. It exists on-chain at genesis but appears unused so far. What changed: Security V1 had no protection. V2 adds the full OpenZeppelin stack: Ownable2Step (2-phase ownership transfer), ReentrancyGuard on every financial function, Pausable as a circuit breaker. Claim system reworked, V1 leaf: hash(contestId, sideId, address). V2 leaf: hash(index, recipient, amount). Payout amounts are now inside the Merkle proof. Enables ranked payouts, weighted rewards, not just proportional splits. Bitmap tracking instead of mappings, cheaper gas. Fee model V1: Hardcoded 0.9% + sweepUnclaimed takes everything. V2: admin publishes a rewardPool with the Merkle root, withdraws precise amounts via withdrawPlatformFee. Fee can vary per contest. Deposit now takes a deadline param. Protection against stale mempool txs. Same: Same owner, same genesis, HYPE only, renounce disabled, zero interaction with CoreWriter or precompiles. Also cracked V1's mystery selector 0xb2447e34, it was withdrawPlatformFee all along. V2 research → liquidterminal.xyz/hip4/home Credit @androolloyd for the V2 decompilation 🤝 Hyperliquid





JUST IN: USDC stablecoin issuer Circle $CRCL stock crashes 18% today.

Update on HIP-4, V2 contract found. After posting the V1 research, @androolloyd and I kept digging. He reverse-engineered a second contract deployed at genesis by the same team wallet. V2: 0x6d86b21e853758F5719408633e6BcB2cfd50cf07 Team wallet: 0xe21c78037329d06fe0d6fefc4221aaa67cb0d135 Full bytecode decompiled, Solidity reconstructed. 24/24 function selectors verified against on-chain bytecode. Important: All live prediction markets currently trading on HyperCore are linked to the V1 contract, NOT V2. V2 has no active markets yet. It exists on-chain at genesis but appears unused so far. What changed: Security V1 had no protection. V2 adds the full OpenZeppelin stack: Ownable2Step (2-phase ownership transfer), ReentrancyGuard on every financial function, Pausable as a circuit breaker. Claim system reworked, V1 leaf: hash(contestId, sideId, address). V2 leaf: hash(index, recipient, amount). Payout amounts are now inside the Merkle proof. Enables ranked payouts, weighted rewards, not just proportional splits. Bitmap tracking instead of mappings, cheaper gas. Fee model V1: Hardcoded 0.9% + sweepUnclaimed takes everything. V2: admin publishes a rewardPool with the Merkle root, withdraws precise amounts via withdrawPlatformFee. Fee can vary per contest. Deposit now takes a deadline param. Protection against stale mempool txs. Same: Same owner, same genesis, HYPE only, renounce disabled, zero interaction with CoreWriter or precompiles. Also cracked V1's mystery selector 0xb2447e34, it was withdrawPlatformFee all along. V2 research → liquidterminal.xyz/hip4/home Credit @androolloyd for the V2 decompilation 🤝 Hyperliquid


Yesterday I posted about HIP4 being the first HIP to use HyperEVM. Full research → liquidterminal.xyz/hip4/home HIP4 has no official documentation. No verified source. No ABI. So we reverse-engineered the contract from bytecode and calldata on testnet. What we mapped: → Full reconstructed ABI (selectors, signatures, access control) → Every event (DepositReceived, Claimed, ContestCreated, ContestFinalized, MerkleRootPublished) → All revert strings mined from bytecode → Storage layout (owner, mappings, initialization flags) → Complete contest lifecycle: createContest → deposit → publishMerkleRoot → claim → sweepUnclaimed → Bridge architecture L1↔EVM (asset index formula, outcome token mapping) → Real decoded testnet transactions → JS + Python code examples Some findings: - Pre-deployed at genesis, not a standard deployment - renounceOwnership always reverts, admin is permanent by design - Merkle-based claims, 0.9% platform fee on reward pool - Three market types: custom, priceBinary, recurring liquidterminal.xyz/hip4/home Testnet only. This is v1, early test from the team, raw design, and some things might be off. Nothing is final. If you spot errors or have insights, feedback is very much appreciated. Hyperliquid.

Markets mobile app is now in beta. We're opening up limited slots to a focused group of traders. The first users will get a free trade, on us. Comment "Markets" if you have $1m+ volume on Hyperliquid.




Yesterday I posted about HIP4 being the first HIP to use HyperEVM. Full research → liquidterminal.xyz/hip4/home HIP4 has no official documentation. No verified source. No ABI. So we reverse-engineered the contract from bytecode and calldata on testnet. What we mapped: → Full reconstructed ABI (selectors, signatures, access control) → Every event (DepositReceived, Claimed, ContestCreated, ContestFinalized, MerkleRootPublished) → All revert strings mined from bytecode → Storage layout (owner, mappings, initialization flags) → Complete contest lifecycle: createContest → deposit → publishMerkleRoot → claim → sweepUnclaimed → Bridge architecture L1↔EVM (asset index formula, outcome token mapping) → Real decoded testnet transactions → JS + Python code examples Some findings: - Pre-deployed at genesis, not a standard deployment - renounceOwnership always reverts, admin is permanent by design - Merkle-based claims, 0.9% platform fee on reward pool - Three market types: custom, priceBinary, recurring liquidterminal.xyz/hip4/home Testnet only. This is v1, early test from the team, raw design, and some things might be off. Nothing is final. If you spot errors or have insights, feedback is very much appreciated. Hyperliquid.













Update on HIP-4, V2 contract found. After posting the V1 research, @androolloyd and I kept digging. He reverse-engineered a second contract deployed at genesis by the same team wallet. V2: 0x6d86b21e853758F5719408633e6BcB2cfd50cf07 Team wallet: 0xe21c78037329d06fe0d6fefc4221aaa67cb0d135 Full bytecode decompiled, Solidity reconstructed. 24/24 function selectors verified against on-chain bytecode. Important: All live prediction markets currently trading on HyperCore are linked to the V1 contract, NOT V2. V2 has no active markets yet. It exists on-chain at genesis but appears unused so far. What changed: Security V1 had no protection. V2 adds the full OpenZeppelin stack: Ownable2Step (2-phase ownership transfer), ReentrancyGuard on every financial function, Pausable as a circuit breaker. Claim system reworked, V1 leaf: hash(contestId, sideId, address). V2 leaf: hash(index, recipient, amount). Payout amounts are now inside the Merkle proof. Enables ranked payouts, weighted rewards, not just proportional splits. Bitmap tracking instead of mappings, cheaper gas. Fee model V1: Hardcoded 0.9% + sweepUnclaimed takes everything. V2: admin publishes a rewardPool with the Merkle root, withdraws precise amounts via withdrawPlatformFee. Fee can vary per contest. Deposit now takes a deadline param. Protection against stale mempool txs. Same: Same owner, same genesis, HYPE only, renounce disabled, zero interaction with CoreWriter or precompiles. Also cracked V1's mystery selector 0xb2447e34, it was withdrawPlatformFee all along. V2 research → liquidterminal.xyz/hip4/home Credit @androolloyd for the V2 decompilation 🤝 Hyperliquid


Update on HIP-4, V2 contract found. After posting the V1 research yesterday, @androolloyd and I kept digging. He reverse-engineered a second contract deployed at genesis by the same team wallet. V2: 0x6d86b21e853758F5719408633e6BcB2cfd50cf07 Team wallet: 0xe21c78037329d06fe0d6fefc4221aaa67cb0d135 Full bytecode decompiled, Solidity reconstructed. 24/24 function selectors verified against on-chain bytecode. Important: All live prediction markets currently trading on HyperCore are linked to the V1 contract, NOT V2. V2 has no active markets yet. It exists on-chain at genesis but appears unused so far. What changed: Security V1 had no protection. V2 adds the full OpenZeppelin stack: Ownable2Step (2-phase ownership transfer), ReentrancyGuard on every financial function, Pausable as a circuit breaker. Claim system reworked, V1 leaf: hash(contestId, sideId, address). V2 leaf: hash(index, recipient, amount). Payout amounts are now inside the Merkle proof. Enables ranked payouts, weighted rewards, not just proportional splits. Bitmap tracking instead of mappings, cheaper gas. Fee model V1: Hardcoded 0.9% + sweepUnclaimed takes everything. V2: admin publishes a rewardPool with the Merkle root, withdraws precise amounts via withdrawPlatformFee. Fee can vary per contest. Deposit now takes a deadline param. Protection against stale mempool txs. Same: Same owner, same genesis, HYPE only, renounce disabled, zero interaction with CoreWriter or precompiles. Also cracked V1's mystery selector 0xb2447e34, it was withdrawPlatformFee all along. V2 research → liquidterminal.xyz/hip4/home Credit @androolloyd for the V2 decompilation 🤝 Hyperliquid