Reading public derivatives positions
What a public perpetual position record shows and hides: entity problems, unseen hedges, modeled heatmaps versus real liquidation prices, and market makers in the data.
You’ll learn
- Explain why some venues publish positions and most do not, and what that does to any sample
- Read each field of a position record and calculate what it implies
- Explain why one address’s position does not show one entity’s exposure, using a documented case
- Distinguish a modeled liquidation heatmap from a real liquidation price, and state the limits of each
- Write a conclusion about a public position that claims only what the data can support
Three accounts and one short
On March 26, 2025, a $4.1 million short position in the memecoin JELLY on Hyperliquid would have looked, to anyone reading that one account, like a large directional bet. According to Arkham, the analytics firm, two other accounts held long positions of $2.15 million and $1.9 million that countered it, and its analysis treats all three accounts as acting together. As JELLY’s price rose more than 400%, the short was liquidated and passed to the HLP vault, which could not clear it. Hyperliquid delisted the contract and closed positions at $0.0095, a step Arkham called “highly controversial” for a decentralized exchange. Arkham estimated that the accounts deposited $7.17 million and withdrew about $6.26 million. This attribution is Arkham’s, and the methodology is not fully described. If it is right, the visible short was one side of a larger plan, and reading one record alone would have misread the position.
Why some positions are public
On a centralized venue, a position is a row in a private database. The exchange can see it, as can regulators and courts with authority, but outsiders cannot. On a venue whose accounts live in chain state, positions are readable by anyone because every validator or node needs that state in order to compute margin. Publicity is a by-product of design, and rarely a feature chosen for analysts.
| Venue type | What outsiders can see | Examples and limits |
|---|---|---|
| Centralized perpetual venue | Aggregates only: total open interest, published long-short ratios, a liquidation stream | Binance publishes account and position ratios for all traders and top traders, and a liquidation stream limited to the latest order per symbol per second |
| Regulated US futures | Weekly aggregates by trader category | The CFTC’s Commitments of Traders reports show category totals, not individual positions |
| Order book with chain state | Each address’s positions, margin, fills and funding | Hyperliquid via its public info API; dYdX, where the indexer serves balances and positions (its order book itself is off chain, in node memory) |
| Pool-based on-chain | Positions in smart contract state | GMX. Reading requires contract calls or an indexer, and a position may be held through a smart contract |
Access can be limited by region. For example, the dYdX indexer and Binance API returned regional blocks to some requests made while this lesson was prepared.
Traders know their positions are visible, and this creates a selection effect. Someone who wants privacy, whether to protect a strategy or simply by preference, can use a venue without public records, or split activity across addresses. So a public record is not a random sample of crypto derivatives positions. Chitra’s review notes that Binance and Bybit together processed nearly $58.5 trillion in perpetual notional in 2024, on private books. Any claim about what “whales” in general are doing, drawn only from a public venue, generalizes from an unrepresentative part of the market.
Anatomy of a position record
The Hyperliquid clearinghouseState response is a useful teaching case, since it is free, well documented and detailed. Other venues have similar fields under other names.
| Field | Meaning | What to watch |
|---|---|---|
| szi | Signed size in coins. Negative is short | Size in coins, not dollars |
| entryPx | Average entry price | Averaged across adds. It does not show when each add happened. It can change after partial changes |
| positionValue | Size × mark price | Moves with the mark, so a rise does not mean a trader added |
| unrealizedPnl | Open profit or loss at the mark | Unrealized. A closing trade would pay spread and impact |
| leverage | Type (cross or isolated) and setting | A margin setting, not the account’s risk (Lesson 12) |
| marginUsed | Margin assigned to this position | In cross mode, other equity also supports it |
| liquidationPx | Estimated liquidation price | Conditional on the rest of the account. May be null |
| returnOnEquity | Open profit relative to margin used | Inflated by a high leverage setting, for the same trade |
| cumFunding | Funding since opening, since change and all time | Check the sign convention on known cases before relying on it |
| accountValue, totalNtlPos | Equity and gross notional across the account | The inputs to effective leverage |
Field names from Hyperliquid’s API documentation, read November 2026. Comments are this lesson’s.
Reading two real rows
- From HLP, Hyperliquid’s public protocol vault, in a child vault with address beginning 0x010461c1, read on November 5, 2026.
- BTC row: szi −0.00288, entry $80,282.8, position value $229.59, unrealized +$1.62, margin used $11.48, leverage cross 20, and a liquidationPx of about $1.04 billion per BTC.
- The size is tiny relative to the account. Since the account is near 1x overall, this short would be closed only under an absurd rise, so the estimate is a mathematical artifact and not a level with any market meaning.
- ATOM row: szi 7,931.61, entry $1.4926, position value $12,077.46, unrealized +$238.09, and a liquidationPx of null.
- returnOnEquity on ATOM read 0.402. At entry, notional was 7,931.61 × 1.4926 = $11,838.7, and margin at 20x would be $591.9. 238.09 / 591.9 = 0.402.
On funding’s sign, the sample rows support a reading in which a positive cumFunding means the position paid. A short with funding at a positive rate showed a negative sinceOpen, and a long showed a positive one. That is an inference from a few rows, not a stated definition. Always confirm the convention on a case you can verify before building on it. userFills and userFunding give fuller history, including closed positions, which a current-state snapshot cannot show at all. Lesson 6’s warnings about cost basis and survivorship apply here without change.
Addresses are not entities
Lesson 7 covered attribution. Derivatives add a sharper version of the problem, because a position’s meaning depends on what offsets it. The opening JELLY case involved offsetting accounts. HLP shows the same structure in the open. The venue publishes a parent vault with child addresses, so it can be studied without any attribution guesswork.
One vault, two opposite-looking books
- HLP’s vault details on November 5, 2026 listed 7 child addresses. Only two held positions.
- Child 0x010461c1: equity about $3.06 million, gross notional about $3.46 million, 177 positions, long $1.60 million, short $1.86 million, so net −$0.26 million.
- Child 0x31ca8395: equity about $3.03 million, gross notional about $3.52 million, 177 positions, long $1.96 million, short $1.56 million, so net +$0.39 million.
- Taken alone, one child looks net short and the other net long. Combined they net to about +$0.13 million on $6.98 million gross.
- Their BTC rows point in opposite directions too: −0.00288 BTC in one and +0.02771 BTC in the other.
A related trap involves multiple accounts and subaccounts. Some venues support several subaccounts per wallet, as dYdX does with its subaccount number, and a trader can use separate wallets with no on-chain link, or link them only through an exchange withdrawal. Standard clustering heuristics, such as a shared funding source, can suggest a link. They can also create false ones, for example where many users withdraw from one exchange’s hot wallet. Timing correlations between accounts are weak evidence on their own. So state whether an entity claim comes from a public official statement, an established public attribution, or your own heuristic. Treat the last of these as a hypothesis, and do not attach a real person’s name to it.
Hedges you cannot see
A public record shows one venue’s leg of what may be a multi-leg position. A large public short may be any of the following.
| Reading | What would have to exist elsewhere | Can a public record rule it out? |
|---|---|---|
| Directional bet | Nothing | No |
| Cash-and-carry | Spot holdings, possibly on another venue or in cold storage | Only partly, if the entity’s wallets are known |
| Inventory hedge by a market maker | Long spot or perpetual inventory on other venues | No |
| Hedge for a token treasury or staking position | A token balance, possibly locked or staked | Partly, if attributed |
| Options-related hedge | An option position on a private venue | No |
| One leg of a manipulation attempt | An offsetting account, as alleged in the JELLY case | Only if linked |
Readings are not exhaustive and are not mutually exclusive.
He et al. model a market in which end users demand perpetuals for leveraged exposure while arbitrageurs take the other side and hedge in spot, so some shorts on any book may be hedges by design. Their evidence concerns price deviations and capital constraints, however, and not a measured split of open positions. No public dataset read for this lesson gives that split. The honest default is to describe a public position as what it is, a position on one venue, rather than as a view.
Modeled heatmaps and real liquidation prices
Two different objects get called liquidation data, and they often get confused.
Modeled liquidation heatmap: An estimate of where liquidations might cluster, built from market data and assumed leverage levels. The positions, entry prices and margin are not observed. CoinGlass describes its heatmap as predicting where liquidations might be triggered and not the actual number that will occur. It says the actual number is often lower than the intensity suggests, and that users should read the values as relative.
Observed liquidation price: A price computed from an actual position and its margin. It can be read from a public record, at least on venues that publish one. It holds only under the assumption that the rest of the account stays constant.
A simple construction shows what a heatmap assumes and why it can drift from the truth. Take an estimate of position opening at price P0 and assign it leverage buckets. Each bucket produces a level:
Example: a modeled level and the true level
- A model sees $10 million of OI added when the price was $100. Assume a 50:50 split across 25x and 50x longs. Ignore maintenance margin for simplicity.
- Modeled levels: 25x gives 100 × (1 − 1/25) = $96, and 50x gives 100 × (1 − 1/50) = $98. Each gets $5 million of notional.
- Now suppose the truth is different. Half of the long side is held in cross-margined accounts at an effective 3x, and only the other half is at 25x. Every long also has a short on the other side, with its own levels above the price.
- The true levels are then $5 million at $96 and $5 million at about $66.67, with nothing at $98.
- So the model places $10 million of long liquidations at $96 to $98, while the true figure in that range is $5 million.
Models therefore fail in predictable ways. OI does not reveal which side opened. Leverage is assumed, and on cross-margin accounts it differs from a label. Positions change: partial closes, margin added, profit accumulating. Models usually cover only some venues. A zone that looks large may also never be tested, and a heatmap by itself does not show that price is attracted to it. That last claim, widely repeated, needs a test with fixed rules, a benchmark and base rates, by the methods of Lesson 9. Evidence here is thin. Results also depend on the model and the provider, and a provider’s own heatmap may offer different versions.
Observed prices have limits too. A cross-margin level assumes all other positions stay constant, as the $1.04 billion BTC figure shows. On a venue with partial liquidation, a large position may not close all at once. For example, Hyperliquid sends 20% of liquidatable positions above 100,000 USDC to the book. Actual closure depends on the mark price, not the last trade. And margin can be added at any moment before the level is reached, so a level that looks near may move away by the time the price arrives, without any trade. Reported liquidation streams, on the other hand, measure what did happen, but venue conventions differ. Coin Metrics notes that OKEx reported the bankruptcy price rather than the fill price, that BitMEX reported the size still open rather than the amount filled, and that Binance’s stream shows at most one update per market per second.
Market makers in position data
Large public books often belong to market makers, whose positions describe a business, not a forecast. A market maker’s inventory comes from filling other traders’ orders. It tends to be hedged elsewhere, and it may reverse within minutes.
Some features suggest this activity, though none proves it: many positions across many assets, both long and short; gross notional much larger than net; low effective leverage; very many fills on both sides with small average size; and a repeated tendency to revert toward flat. The HLP example above has every one of the position features, and the venue describes it as a market-making vault. For an unlabeled address, those features justify only a hypothesis, since a systematic hedge fund or an arbitrage bot might look similar.
| Metric | How to compute | What a high value suggests, weakly |
|---|---|---|
| Gross-to-net | Σ|notionali| ÷ |Σ signed notionali| | A hedged or market-making book |
| Effective leverage | totalNtlPos ÷ accountValue | Account-level risk, regardless of label |
| Two-sided fill share | min(buy, sell notional) ÷ max(buy, sell notional) | Flow provision rather than one-way position building |
| Mean holding time | From fill history | Low values fit market making and arbitrage |
| Concentration | Largest position ÷ gross notional | A focused bet, or a single-asset hedge |
Exploratory measures with no accepted thresholds. Applied to one address, each inherits the entity problem above.
Gross-to-net on the HLP children
- Child 0x010461c1: gross 3,458,973, signed net −264,373. Ratio = 13.1.
- Child 0x31ca8395: gross 3,523,020, signed net +393,216. Ratio = 9.0.
- Combined: gross 6,981,993, signed net +128,843. Ratio = 54.2.
Drawing conclusions honestly
A public position supports only a narrow class of claims. The discipline is to write the claim in a form the data can actually support, and to state the limits in the same sentence.
| Weak statement | Supportable statement |
|---|---|
| “A whale is betting on a crash.” | “Address 0xabc held a short of 5,000 ETH on venue X at 14:00 UTC. Other positions and other venues are unknown.” |
| “Smart money is short.” | “Across N addresses selected by rule R, net notional on venue X was −$Y. The sample covers only venue X and only addresses meeting R.” |
| “Price is being hunted toward the liquidation at $92.” | “This address’s displayed liquidation price was $92 at this time, assuming the rest of the account stayed constant.” |
| “Liquidation clusters will pull price down to $96.” | “A provider’s model estimates relatively high liquidation exposure near $96. This is a model estimate, and no test of attraction is offered.” |
| “This trader has made $10 million with an 80% hit rate.” | “Closed fills on this address show $10 million of realized profit between dates A and B, net of recorded fees and funding. Selection on large winners inflates such figures.” |
Addresses and figures in this table are examples.
There is also a standing ethical point. A public address is not a public person. Publishing a claim that links a position to a named individual can cause real harm if it is wrong, and it invites targeting even if it is right. Use only attributions that come from public official statements or established public sources, name the source, and say how strong the link is. Lesson 7 gives the fuller argument.
Does position transparency help or harm a market?
The case for: anyone can check solvency, leverage and concentration on a public venue, so risk is harder to hide, and researchers such as Chitra can study an event from public fills while account-level data for private venues remain unavailable. The case against: visible positions can be targeted, large traders may move to private venues, and readers may overinterpret partial data. The JELLY and March 2025 cases show that a large public position can be used to pressure a venue’s own risk system, though neither proves that transparency caused them. Empirical work on the net effect in crypto is still early, and cross-venue comparisons struggle because traders choose which venue to use. A private venue’s operator still sees every position, so the real comparison concerns who sees positions, not whether anyone does.
Common mistakes
- Reading one address as one entity.
- Reading a position as a view. A hedge and a bet can look identical on one venue.
- Treating a current snapshot as a history. Closed positions and past margin changes need fills and funding records.
- Treating a cross-margin liquidation price as a fixed level.
- Treating a modeled heatmap as observed positions.
- Treating the largest visible accounts as informed. Those accounts are selected on size and on survival, and the data do not show what happened to those that closed or failed.
- Generalizing from a public venue to the whole market.
- Naming a person based on a clustering heuristic.
Problem set
- An example account shows account value $2 million, and three positions: long BTC $5 million, short ETH $4 million, long SOL $1 million. Compute gross notional, net notional, effective leverage and gross-to-net. What does the record not establish?
Show solution
Gross = 5 + 4 + 1 = $10 million. Net = 5 − 4 + 1 = +$2 million. Effective leverage = 10 / 2 = 5x. Gross-to-net = 10 / 2 = 5. The record doesn’t establish the holder’s spot holdings, positions elsewhere, intent or whether other addresses belong to the same entity. - Verify a returnOnEquity value. An example long of 100 ETH entered at $2,500, with a 25x cross setting, shows unrealized profit of $2,000. Calculate return on equity under the usual definition. What is the price return?
Show solution
Entry notional = $250,000, and margin at 25x = $10,000. Return on equity = 2,000 / 10,000 = 20%. The price return = 2,000 / 250,000 = 0.8%. The first number is 25 times the second by construction, whatever the account’s actual leverage. - A model assigns $20 million of new OI at $50 equally across 10x, 25x and 50x longs. Find the modeled levels and amounts, ignoring maintenance margin. Name three reasons the true amounts differ.
Show solution
10x: 50 × 0.90 = $45.00. 25x: 50 × 0.96 = $48.00. 50x: 50 × 0.98 = $49.00. Each has about $6.67 million. Reasons: each new contract also has a short side, so a long-only map shows part of the picture. Actual leverage settings are unknown, and cross-margin accounts have different effective levels. Positions change after opening, and the model may miss some venues. - Two addresses each hold large opposite positions in the same illiquid token. Write down what evidence you would want before saying they belong to one entity, and how you would phrase a result if the evidence is only timing.
Show solution
Wanted: a direct on-chain link such as repeated funding from a non-exchange source that serves only these addresses, transfers between them, a public official statement, or an established attribution with a stated method. Shared deposits from an exchange hot wallet don’t count, since many users share that. If only timing is available: “The two positions opened within N minutes of each other, in opposite directions. Common control is one possibility. It isn’t established by these data.” - A post claims: “The top 20 Hyperliquid accounts turned net short before the fall, so large traders knew.” List at least four separate flaws.
Show solution
(1) Accounts aren’t entities. (2) The ranking is selected on size and perhaps on profit, so it has survivorship bias. (3) The shorts may be hedges against positions held elsewhere. (4) One venue isn’t the market. (5) Market makers’ inventories may be mixed in. (6) “Before the fall” needs a pre-specified window, a base rate of how often they’re net short, and a benchmark. Without those it’s a selected anecdote. (7) “Knew” is an inference about intent that position data cannot carry. - Using the funding rate and notional, estimate an example account’s funding over one day if it holds a $1 million long at 0.00125% per hour. Explain how you would check the record’s sign convention.
Show solution
$1,000,000 × 0.0000125 × 24 = $300 a day, paid by the long at a positive rate. To check the sign convention, find a long position opened after the most recent funding change, with funding known to be positive, and see the sign of cumFunding sinceOpen after one funding hour. Repeat on a short. Compare the amount with notional × rate.
References
- Hyperliquid. Info endpoint and perpetuals API documentation (read November 2026). Source
- Hyperliquid. Protocol vaults documentation (read November 2026). Source
- Hyperliquid. Liquidations documentation (read November 2026). Source
- dYdX. Indexer architecture documentation (read November 2026). Source
- GMX. Providing liquidity documentation (read November 2026). Source
- Binance. Liquidation Order Streams, USDⓈ-M futures API (read November 2026). Source
- US Commodity Futures Trading Commission. Commitments of Traders: Explanatory Notes. Source
- CoinGlass. Learn page introducing the platform, including its description of the liquidation heatmap (read November 2026). Source
- Coin Metrics. Market Liquidations documentation. Source
- Arkham Research (March 26, 2025). JELLYJELLY exploit on Hyperliquid. Source
- Cointelegraph (March 27, 2025). Hyperliquid JELLY ‘exploiter’ could be down $1M, says Arkham. Source
- Chitra, T. (2025; v3 February 2026). Autodeleveraging: Impossibilities and Optimization. arXiv:2512.01112. Source
- He, S., Manela, A., Ross, O., and von Wachter, V. (2022, this draft September 2026). Fundamentals of Perpetual Futures. arXiv:2212.06888. Source
Exercise
- Run the script in this lesson on HLP’s child vaults. Numbers will differ from those given here, since they are a November 5, 2026 reading.
- Compute gross-to-net for each child and for the children combined, and explain the change.
- Compare a displayed liquidationPx on a large position and on a very small one. Explain which of the two carries more meaning.
- Read a provider’s heatmap description, such as CoinGlass’s, and write the assumptions it states. Compare a level on the heatmap with what public records can actually show.
- Write two sentences about a public position in the supportable form from this lesson. Do not name any person.
Check yourself
1. Why do on-chain perpetual venues expose positions while centralized venues generally do not?
2. Why is a public venue’s data not a random sample of the crypto derivatives market?
3. In the opening case, reading one account in isolation would have given which error?
4. A provider’s heatmap shows a bright band. What is the most accurate statement?
5. A cross-margin short with a tiny size displays a liquidation price of about $1 billion. What does it show?
6. Which set of features suggests, without proving, a market-making book?
7. Which sentence best follows the supportable form?
8. A post links a large position to a named person using a shared exchange withdrawal address. What’s wrong with that?
Describes past on-chain activity and how our data is built. Not investment advice. Method details: data methodology. Live panels: tracked whale wallets, updated 2026-11-05 15:41 UTC.