Every perp DEX tells you its insurance fund protects your trades, but the fund's actual depth and drawdown history rarely get scrutinized before a trader deposits margin. That gap matters because when a fund runs dry, the backstop shifts to auto-deleveraging, which means your profitable position can get force-closed to cover someone else's loss. This article breaks down how the insurance funds and backstop vaults at Hyperliquid, dYdX, GMX, and Aster actually work, what has happened when they were tested, and how to size your risk before you trade.
Panaprium is independent and reader supported. If you buy something through our link, we may earn a commission. If you can, please support us on a monthly basis. It takes less than a minute to set up, and you will be making a big impact every single month. Thank you!
How Perp DEX Backstops Actually Work
Most perp DEXs use a layered defense against bad debt. The first layer is the liquidation engine, which closes underwater positions before they go negative. The second layer is the insurance fund, which absorbs the gap when a liquidation fills at a worse price than the account's remaining collateral covers.
If the insurance fund runs out, the third layer kicks in: auto-deleveraging (ADL). ADL force-closes the most profitable, highest-leverage counterparty positions to cover the shortfall, without their consent. This is the part most traders never read about until it happens to them.
Best Perp DEX in 2026: Hyperliquid vs Aster vs dYdX vs GMX covers the broader tradeoffs between these platforms on fees, leverage, and liquidity. This article goes deeper on one specific question: how deep is the money that stands between you and a socialized loss.
Protocol Comparison: Backstop Design and Depth
Hyperliquid: HLP Vault Plus a Separate Insurance Fund
Hyperliquid's setup is unusual because it runs two layers instead of one. The HLP (Hyperliquidity Provider) vault is the primary liquidator and absorbs positions the moment they breach maintenance margin. A separate, smaller protocol insurance fund exists behind HLP and, as of early 2026, held a balance in the low tens of millions of dollars, according to Hyperliquid's own liquidation documentation.
HLP itself carried roughly $187 million in TVL, per Hyperliquid's live vault dashboard. That sounds like a deep backstop, but HLP is not a passive reserve. It is an actively trading market-making book, meaning its "insurance" capacity shrinks exactly when markets move violently and liquidations spike- the moments a backstop is needed most.
This design was stress-tested directly in March 2025. An attacker manipulated the thinly traded JELLYJELLY token, forcing HLP to inherit a large short position that faced roughly $12 million in unrealized losses as the token pumped over 400% in an hour. Hyperliquid's validators voted within two minutes to delist the JELLY market and settle positions at a price far below where the token was trading, a move that avoided the loss but drew criticism for how much discretion a "decentralized" exchange retained in an emergency.
Similar attempts followed: a POPCAT-related incident in November 2025 and a Fartcoin-related incident in April 2026, per CoinGecko's analysis of HLP's history. The repetition matters. It shows that HLP's role as a backstop liquidator makes it a predictable, repeatable target rather than a one-time fluke.

Image source: app.hyperliquid.xyz/vaults
dYdX: Fee-Funded Insurance Fund With Governance Control
dYdX v4 runs a protocol-owned insurance fund funded by liquidation fees and voluntary contributions. Per dYdX's own documentation, the fund is the first backstop; if a liquidated account has negative equity, the fund covers the loss before deleveraging is triggered against profitable traders. Governance controls the fund's parameters, including the maximum size at which deleveraging is disabled.
The fund's real-world resilience was tested in November 2023, when dYdX's then-live v3 insurance fund lost about $9 million, roughly 40% of its balance, to a targeted attack on the illiquid YFI market. Open interest in YFI spiked from under $1 million to $67 million in days, and the platform confirmed no user funds were lost while the fund was left with $13.5 million remaining. dYdX's response was to raise initial margin requirements on thinly traded markets, a direct acknowledgment that low-liquidity pairs are where insurance funds get drained fastest.
That event predates dYdX v4's current architecture, but the lesson carries forward: an insurance fund sized for normal volatility can still be materially dented by a single coordinated attack on a low-liquidity market.
GMX: Isolated GM Pools Instead of a Pooled Insurance Fund
GMX does not run a traditional insurance fund. Instead, liquidity providers are the direct counterparty to traders through GM pools, and GMX V2 isolates each market (ETH/USDC, BTC/USDC, and so on) so a blowup in one pair cannot drain liquidity backing another. This isolated design followed directly from GMX V1's GLP model, where all assets shared one pool and risk could spread across unrelated markets.
GMX had its own real stress test in July 2025, when a vulnerability in the legacy V1 deployment on Arbitrum allowed roughly $40 million in GLP liquidity to be withdrawn to an outside wallet. The funds were fully recovered after negotiation, and GMX paid a $5 million bug bounty to the person who disclosed the flaw. GMX V2's isolated GM pools were unaffected throughout, since the exploit targeted V1's shared-pool architecture specifically.
Combined GMX TVL across Arbitrum and Avalanche sits around $600 million as of mid-2026, split roughly $500 million and $100 million between chains. The isolation model means your actual backstop depth depends entirely on which specific GM pool you trade against, not GMX's headline TVL.

Image source: defillama.com/protocol/gmx
Aster: No Published Insurance Fund
Aster, the BNB Chain-based perp DEX that surged in late 2025 on CZ's public endorsement and its WLFI stablecoin partnership, has not published a formal insurance fund structure comparable to Hyperliquid's or dYdX's. Independent reviews note the exchange has been live for under a year with no reported security breaches, but also caution that users should assume on-chain trading here does not carry the same account-level safeguards typical of custodial venues unless Aster explicitly states otherwise.
That is a meaningfully different risk profile than Hyperliquid or dYdX, where the backstop mechanism and, in Hyperliquid's case, real dollar figures, are publicly documented. Aster's rapid growth and untested backstop make it a venue where position sizing should be more conservative, regardless of how attractive its fee structure looks.
Comparing the Backstops Side by Side
|
Protocol |
Backstop Mechanism |
Approx. Fund Depth |
Stress-Tested? |
Isolation Design |
|
Hyperliquid |
HLP vault + separate insurance fund |
HLP ~$187M TVL; insurance fund low tens of millions |
Yes, JELLY (2025), POPCAT (2025), Fartcoin (2026) |
Shared across markets except HIP-3 builder DEXs |
|
dYdX v4 |
Fee-funded protocol insurance fund, then ADL |
Governance-set cap, grows from liquidation fees |
Yes, v3 lost $9M (40%) to YFI attack |
Chain-wide, not per-market isolated |
|
GMX V2 |
Isolated GM pools, no shared insurance fund |
Varies by pool; combined TVL ~$600M |
Yes, V1 GLP exploit ($40M, recovered) |
Fully isolated per market |
|
Aster |
Not publicly documented |
Unknown |
No public record to date |
Unknown |
Common Mistakes When Evaluating a Backstop
Most traders never look past the headline TVL number, which is a mistake because TVL and insurance capacity are not the same thing.
- Confusing vault TVL with insurance depth: HLP's $187 million TVL is trading capital, not a dedicated loss reserve. It can shrink fast during the exact volatility spike that triggers mass liquidations.
- Ignoring low-liquidity market risk: Both the dYdX YFI attack and Hyperliquid's JELLY incident targeted thinly traded tokens, not BTC or ETH. Backstop depth on a protocol's flagship pairs tells you little about its exposure on a memecoin listing.
- Assuming isolation means safety: GMX's isolated GM pools stop contagion between markets, but a single pool can still be thin. Check the specific pool's liquidity, not the protocol's combined TVL.
- Trusting "no incidents yet" as a track record: Aster and other newer venues without a stress-test history simply have not been tested publicly. Absence of an incident is not proof of resilience.
- Not checking who controls the fund: dYdX's fund is governance-controlled and can be redirected by vote. Hyperliquid's emergency response during JELLY relied on validator discretion, not a fixed rule. Know who can move the money before you assume it is untouchable.
What to Check Before Depositing Margin or LP Capital
Before sizing a position or depositing into a market-making vault, run through the protocol's actual backstop mechanics rather than its marketing copy.
- Published, on-chain-verifiable insurance fund balance, not just a stated policy
- History of ADL events or forced settlements, and how they were communicated to users
- Whether the backstop is isolated per market or shared across the whole protocol
- Governance control over the fund, including who can withdraw or redirect it
- Fund funding source (liquidation fees, protocol revenue, or discretionary top-ups) and whether it is growing or shrinking
- Track record specifically on illiquid or newly listed markets, where attacks concentrate
For a broader look at how DeFi insurance products themselves have performed when claims were actually filed, see DeFi Insurance in 2026: Which Protocols Actually Pay Out?, which covers third-party coverage options separate from a perp DEX's own internal backstop.
Who Should Use Which Protocol
|
User Type |
Recommended Option |
Why |
|
Trading large size on major pairs (BTC, ETH) |
Hyperliquid or dYdX |
Deepest liquidity and the most publicly documented, tested backstop history |
|
Providing liquidity passively for yield |
GMX V2 GM pools |
Isolation limits contagion; you can pick a pool matching your risk tolerance. |
|
Trading illiquid or newly listed tokens |
Avoid oversized leverage anywhere |
All three tested protocols show attacks concentrate on thin markets |
|
Chasing lowest fees or highest leverage |
Aster, with reduced size |
Competitive pricing but unproven backstop depth |
|
Risk-averse, capital preservation focused |
Split across Hyperliquid and dYdX |
Diversifying backstop exposure reduces single-point-of-failure risk |
My Take
Hyperliquid and dYdX are the two venues with genuinely documented backstop histories, and that transparency is worth more than either protocol's marketing. Hyperliquid's HLP model is impressive when it works, but the JELLY, POPCAT, and Fartcoin incidents show a pattern, not a one-off, and the vault's dependence on active market-making means its capacity contracts under exactly the stress it exists to absorb. I would not put more than a small, deliberately sized allocation into HLP as a yield product, and I would treat its APR figures as noise until you have multi-quarter, drawdown-adjusted data.
GMX's isolated GM pool design is the most structurally sound approach among the four, because it contains damage instead of relying on a single shared reserve to absorb every market's risk. The V1 exploit recovery also showed the team can respond competently under pressure. If you are providing liquidity rather than trading, GMX deserves a serious look precisely because its architecture assumes something will eventually go wrong in one pool and builds a wall around it.
Aster is the one I would treat with the most caution right now, not because anything has gone wrong, but because nothing public exists to evaluate. Fast growth and an unproven insurance mechanism is a combination that has burned depositors before on other platforms. Use it for smaller, more disposable position sizes until it publishes real backstop data or survives a public stress test the way its competitors have.
Conclusion
The insurance fund a perp DEX advertises is only meaningful if you know its actual size, its funding source, and how it has performed under real attack conditions. Hyperliquid and dYdX both have public incident histories that show their backstops work, but also show real dollar losses and emergency governance intervention when illiquid markets got targeted. GMX's isolated pool design limits contagion better than either, while Aster remains an open question because it has not published comparable data.
The practical next step is simple: before sizing a position or depositing into a vault, check the specific market's liquidity and backstop depth rather than the protocol's headline TVL. Illiquid pairs are where every documented attack in this article happened, so size leverage down accordingly on anything outside the top few markets on any platform.
FAQs
1. Which perp DEX has the deepest insurance fund in 2026?
Hyperliquid's HLP vault carries the largest combined backstop capital at roughly $187 million TVL, though a portion of that is active trading capital rather than a dedicated reserve. dYdX's fee-funded insurance fund is smaller but has a clearer, governance-defined cap and top-up mechanism.
2. What happens when a perp DEX's insurance fund runs out?
Auto-deleveraging (ADL) kicks in, which force-closes the most profitable, highest-leverage opposing positions to cover the shortfall without the trader's consent. This has not fully happened on the major venues covered here, but dYdX's v3 fund did lose 40% of its balance in a single 2023 attack.
3. Is GMX safer than Hyperliquid for liquidity providers?
GMX's isolated GM pools contain losses to a single market instead of spreading them across the whole protocol, which is structurally more conservative than Hyperliquid's shared HLP vault. Neither is risk-free, and GMX's V1 architecture was directly exploited for $40 million in 2025 before the funds were recovered.
4. Should I trust Aster with large position sizes?
Aster has not published a formal insurance fund structure and has under a year of live trading history, so its backstop resilience is unverified. Size positions conservatively there until the protocol demonstrates a track record comparable to Hyperliquid or dYdX.
5. Why do insurance fund attacks target illiquid tokens instead of BTC or ETH?
Thin order books make it cheaper for an attacker to move price sharply and force outsized liquidations relative to the capital they risk. Both the Hyperliquid JELLY incident and the dYdX YFI attack followed this exact pattern on low-liquidity markets.
References
Hyperliquid HLP Vault Dashboard: https://app.hyperliquid.xyz/vaults/0xdfc24b077bc1425ad1dea75bcb6f8158e10df303
Hyperliquid Liquidations and Insurance Fund: https://eco.com/support/en/articles/15247705-hyperliquid-liquidations-explained-margin-calls-and-insurance-fund
Hyperliquid HLP Vault Analysis: https://www.coingecko.com/learn/hyperliquid-hlp-vault-analysis
dYdX Liquidations Documentation: https://docs.dydx.xyz/concepts/trading/liquidations
GMX GLP Funds Recovery Statement: https://gmxio.substack.com/p/glp-funds-on-arbitrum-fully-recovered
GMX V2 GM Pools Explained: https://defi-explained.dev/gmx/gm-pools/
Aster DEX Review 2026: https://coinspot.io/en/reviews/aster-dex/
Was this article helpful to you? Please tell us what you liked or didn't like in the comments below.
About the Author: Chanuka Geekiyanage
What We're Up Against
Multinational corporations overproducing cheap products in the poorest countries.
Huge factories with sweatshop-like conditions underpaying workers.
Media conglomerates promoting unethical, unsustainable products.
Bad actors encouraging overconsumption through oblivious behavior.
- - - -
Thankfully, we've got our supporters, including you.
Panaprium is funded by readers like you who want to join us in our mission to make the world entirely sustainable.
If you can, please support us on a monthly basis. It takes less than a minute to set up, and you will be making a big impact every single month. Thank you.
0 comments