Part 2 of 2 in DeFi & trading
Perpetual Futures: A Contract With No Expiry, and Who Pays When It Breaks
How futures work, why crypto removed the expiry date, how funding keeps a perp near spot, what happens when a liquidation can't be filled, and how a bitcoin exchange's product reached oil, gold and the NYSE's parent company.
In 1993 the economist Robert Shiller proposed a futures contract that would never expire1. He wanted markets for assets that rarely trade and are hard to price, like houses. Twenty-three years later a bitcoin exchange called BitMEX listed one2 for bitcoin, a contract designed to do something much simpler: let people trade with leverage without ever rolling a position.
It became the most traded product in crypto. In 2025, perps did about $62 trillion of volume, more than three times spot, according to CryptoQuant. On a single day that October, over $19 billion of positions were force-closed. And in 2026 perps left crypto altogether: oil, gold and the S&P 500 now trade this way, US regulators have approved them, and the company that owns the New York Stock Exchange wants to list them.
This post is about how a contract with no end date stays tied to the price of anything, what happens when it doesn't, and who pays.
What a future is
A future is an agreement to trade something at a fixed price on a set date. The buyer is long and profits if the price rises. The seller is short and profits if it falls. Neither pays the full value upfront. Each posts margin, a deposit, and gains and losses move between their accounts as the price changes. That's where the leverage comes from: a small deposit controls a large position.
The expiry date does one important job. On the last day the contract either delivers the asset or settles in cash at the spot price, so at that moment the future and the spot price have to be the same. Before expiry the two can drift apart, and that gap is called the basis. But it has to close by the deadline, and traders know it. The calendar is what holds the contract to reality.
Expiry also has costs. Anyone who wants to stay in a position has to roll it, closing one contract and opening the next, paying spreads and fees each time. And delivery can bite. On April 20, 2020, the May contract for US crude settled below minus $37 a barrel, one day before expiry, because holders were obliged to take physical oil at a hub in Cushing, Oklahoma, that was essentially full. Traders paid to get out.
Removing the expiry
A perp is a future with the last day deleted. You can hold it for a minute or a year, and there's nothing to roll or deliver.
But with no last day, nothing forces it to meet the spot price. It's a contract that settles against nothing, so in principle it could trade anywhere.
The replacement for the calendar is funding: a payment between longs and shorts, made every few hours, that depends on how far the perp has drifted from the asset's real price. Three prices are involved:
- Index price: the asset's spot price, usually an average across large exchanges
- Mark price: the exchange's fair estimate of the perp's price
- Last price: the most recent trade
When the perp trades above the index, longs pay shorts. When it trades below, shorts pay longs. The exchange takes no cut; the money moves between traders.
Dave White's Cartoon Guide to Perpetual Futures calls this a thermostat3. If the perp runs hot, holding a long gets expensive and holding a short gets paid, so longs close and new shorts open, which pushes the price down. If it runs cold, the same happens in reverse. Nothing forces the two prices together. Funding only makes being on the wrong side of the gap expensive.
The formula
Here is how Binance computes it, for its default 8-hour interval:
F = P + clamp(I - P, -0.05%, +0.05%)
P = average premium of the perp over the index
I = interest rate, 0.01% per 8 hoursSay the perp averaged 0.10% above the index during the interval. Then I - P is -0.09%, the clamp limits it to -0.05%, and the rate is 0.05%. A $10,000 long pays a short $5. That sounds small until you remember it happens three times a day: 0.05% every 8 hours is about 55% a year.
The clamp has a side effect. Any premium between -0.04% and +0.06% produces exactly 0.01%, so in calm markets funding sits at that one number4. Longs then pay shorts about 11% a year by default. The interest term exists because a long perp is economically like borrowing dollars to hold the asset, and borrowing should cost something.
Hyperliquid, the largest on-chain venue, uses the same formula but pays every hour at one eighth of the rate. A faster loop means less drift between payments.
Funding is the roll
White's guide has a second model that goes deeper. In its simplified perp, funding is the gap between mark and index, paid per day. Holding that perp, you could sell 1/24 of your position every hour and use the funding to buy 1/24 of a bitcoin. After a day you'd hold the actual asset. So a perp at that setting should be priced like a future expiring in 24 hours5.
That changes how to think about the contract. A perp isn't really a future with no expiry. It's a very short future that rolls itself forever, and funding is the cost of the roll.
Who keeps it honest
Funding is only a signal until someone acts on it, and the people who act are arbitrageurs running the basis trade, or cash-and-carry.
Buy $1 of bitcoin and short $1 of the bitcoin perp. If the price moves, one leg's gain cancels the other's loss. What's left is the funding, which is usually positive. When too many people want to be long, the funding rises, more arbitrageurs short the perp to collect it, and that selling is what pushes the perp back down. Traders with leverage demand pay traders without it.
Ethena turned this trade into a stablecoin. USDe is backed by long crypto positions hedged with short perps, and funding pays the yield. That made it a large natural short in the market, and tied its size to funding: supply peaked at about $15 billion in October 2025 and was below $5 billion by late August 2026 as the yield faded. In August 2026 it was extending the same strategy to equity perps.
Leverage and liquidation
A traditional futures broker can call you for more margin and give you a little time to send it. A crypto exchange runs 24/7 and doesn't wait6. It watches every account, and when your equity gets too low it closes you automatically. That's a liquidation.
Take a 10x long: $1,000 of margin, a $10,000 position, 0.1 BTC bought at $100,000.
The naive answer is that you're wiped out at a 10% fall. In practice you're closed earlier, because the exchange requires a maintenance margin. At 2.5%, liquidation comes at about $92,300, a 7.7% fall. The space between there and $90,000, the bankruptcy price, is the engine's room to get you out before your loss exceeds your deposit.
This is why mark price exists. If liquidations used the last trade, a single large order on a thin book could liquidate thousands of people in a second. So the mark is built to resist that. Hyperliquid takes the median of three inputs: an oracle price adjusted by a moving average, its own order book, and the mid prices of perps on other exchanges.
When a liquidation can't be filled
Perps are zero-sum. For every long there's a short, and a winner's profit is literally the loser's money. So if a loser goes bankrupt with the price still moving, the loss has to land somewhere, or the winner doesn't get paid. Exchanges handle this with a waterfall.
- The book. The engine sends market orders. Almost every liquidation ends here. If it fills above the bankruptcy price, nobody else is involved.
- The backstop. If the book can't take it, the position goes to a pool of capital. On a centralized exchange that's an insurance fund, built up from liquidation profits7. On Hyperliquid, a liquidator vault inside HLP, a community-funded vault, takes over accounts below two thirds of maintenance margin.
- Auto-deleveraging. If an account still goes negative, the exchange closes positions on the other side. Hyperliquid ranks opposing traders by unrealized profit and leverage, then closes them at the previous mark price against the underwater account.
ADL is the part of perps people find hardest to accept. You can be right, in profit, and fully margined, and have your position closed for you because someone else failed. It's also what lets an exchange promise that it has no bad debt. Hyperliquid's docs state the guarantee precisely: "a user who has no open positions will not socialize any losses of the platform." The losses go to people with open positions, and specifically to the winners.
It's worse than it sounds for anyone hedged. If your short was protecting a long somewhere else, ADL removes the hedge at exactly the moment the market is most violent.
October 10
On October 10, 2025, Donald Trump announced a 100% tariff on Chinese imports. Over the next day, more than $19 billion of positions across over 1.6 million accounts were force-closed, by CoinGlass's count, with $3.21 billion going in one minute. It was the largest liquidation day on record, and every step of the waterfall ran at once.
The cascade is the mechanism working against itself. Liquidations are market sells, market sells push the price down, and a lower price triggers the next liquidations. Hyperliquid alone recorded about $10 billion8. Its book couldn't absorb the flow, and ADL closed profitable shorts. Its vault, buying at distressed prices, reportedly made over $40 million.
The sharpest failure was about collateral. Binance's unified accounts let traders post other assets as margin, and it valued those using its own order books. During the crash, Ethena's USDe fell to $0.65 on Binance while it stayed around $0.99 on Curve and Uniswap. Cross-margined accounts were marked down against a price that existed on one exchange, and some were liquidated on it. wBETH and BNSOL slipped the same way. Binance later paid out $283 million.
Binance's position is that this wasn't the cause: in its post-mortem it says roughly 75% of the day's liquidations came before those prices deviated. Both things can be true. The market was going down regardless, and a bad mark price still took people out who shouldn't have gone.
On-chain perps
Crypto's perp markets grew up on centralized exchanges, which means trusting an operator with both your funds and the liquidation engine. Decentralized venues have tried several ways to remove that.
| Design | Example | How it works | Main trade-off |
|---|---|---|---|
| Pool and oracle | GMX | Traders take the other side of a liquidity pool at oracle prices | Pool depositors carry the risk, and the oracle is an attack surface |
| Verified order book | Lighter | Matching happens off-chain, with on-chain zk verification | Relies on the operator to stay up |
| App chain | Hyperliquid | A purpose-built L1 runs the order book itself | Fast, but a small validator set controls a lot |
So far Hyperliquid has won this contest. It holds 53–57% of on-chain open interest9 depending on who's counting. Its bet was that traders want an exchange's speed more than they want a general-purpose chain, and that an on-chain order book is worth building a blockchain for. It also makes everything visible: every position and every liquidation is public, which is why its October 10 numbers look so large next to everyone else's.
The cost showed up on March 26, 2025. A trader opened a large short on JELLYJELLY, a thin memecoin, and the price moved until the position was liquidated. The book couldn't absorb it, so HLP inherited the short and sat on about $12 million of unrealized losses as the price kept rising. Then, within hours, Hyperliquid's validators voted to delist the market and settled it at $0.009510, well below where it was trading. HLP's loss disappeared.
That's the backstop being rescued by the people who run the chain. It's the same question as in my post on prediction markets: the mechanism is fine until something goes wrong, and then it matters who decides.
Everything becomes a perp
The newest development is that the asset no longer has to be crypto.
Under Hyperliquid's HIP-3, anyone staking 500,000 HYPE can deploy a perp market, choosing its oracle, its specification and its leverage limits. Validators can slash that stake if the operator misbehaves. By October 28, 2026 there were 169 of these markets live holding $4.12 billion of open interest, and the largest were not crypto: the S&P 500, gold and WTI crude. On July 8 these markets out-traded crypto on Hyperliquid for the first time.
The attraction is the hours. A perp on oil trades on Sunday. Over the weekend of February 28, as crude surged, Hyperliquid's builder markets did nearly $720 million of volume, while the futures markets that normally set the oil price were closed for the weekend.
There's a design problem hiding in that, though. Funding needs an index to compare against, and on a Sunday the reference market is shut. The thermostat loses its thermometer. The perp trades mostly on its own flow until the market reopens, when it can reprice in one jump, past anyone's liquidation price.
The US, meanwhile, is catching up. On May 29, 2026 the CFTC approved Kalshi's bitcoin perpetual, the first in the country11, and cleared Coinbase to give US customers access to perps on Deribit. Kalshi added gold and silver in September. Coinbase has filed for single-stock perps.
The incumbents aren't relaxed about it. CME sued the CFTC in June, arguing that these contracts are swaps, not futures, and the CFTC has asked the court to dismiss the case12. And on October 29, ICE, which owns the NYSE, announced a deal with trade[XYZ], the largest HIP-3 operator, for a CFTC-regulated venue offering 24/7 perps built on Hyperliquid, subject to approval13.
What a perp is
Strip it down and a perp is two ideas. The first is funding, which replaces a date with a price: instead of the calendar forcing convergence, a recurring payment makes divergence expensive. The second is the liquidation waterfall, which replaces a clearinghouse and a margin call with an automatic engine and, at the bottom, a rule for taking money from winners.
The first idea is close to solved. It's simple, it works, and it's now being applied to oil and equities. The second is where every serious failure has happened: a wrong mark price, an empty vault, a validator vote. Perps work almost all the time, and they fail in the moments when the most money is moving. As the product spreads from crypto traders to the S&P 500 at 3am on a Sunday, the question worth asking is what happens on the day it can't track the index, and who was told in advance that they'd pay.
Further reading
- The Cartoon Guide to Perpetual Futures: Dave White's four mental models for what a perp is. The best explanation there is.
- Measuring Asset Values for Cash Settlement in Derivative Markets: Shiller's 1993 paper proposing perpetual futures
- Perpetual Futures Pricing: Ackerer, Hugonnier and Jermann on the theory
- Binance funding rates: the full formula, caps and intervals
- Hyperliquid docs on funding, liquidations and auto-deleveraging: the clearest public description of how a modern perp engine works
- The October 10 crypto crash explained: CoinGecko's timeline of the day
- The ultimate 10/10 crash autopsy: The Defiant on the causal chain
- Perp DEX rankings: Castle Labs' updated figures for on-chain venues
Notes
- 1Source
Shiller's contract would cash settle every day, on both the change in the futures price and a dividend or rent index for that day. The paper appeared in the Journal of Finance in July 1993, alongside the index methods he needed to price things like housing.
source → - 2Context
BitMEX launched XBTUSD in May 2016, but it wasn't the first. Alexey Bragin designed an inverse perpetual for the ICBIT exchange in 2011. And the Chinese Gold and Silver Exchange Society of Hong Kong had long run an "undated futures" market, one-day futures rolled over automatically.
source → - 3Note
White's guide models a simplified FTX perp, a reminder of its 2021 vintage, and assumes funding of 100% of the gap per day. Real exchanges are far gentler. He also notes the size of the thermostat's effect is hard to predict, which is why the price tracks the index loosely rather than exactly.
source → - 4Source
On BitMEX, bitcoin perp funding printed exactly 0.01% for 78.19% of Q3 2025, and was positive for over 92% of the quarter. A BitMEX study of XBTUSD since 2016 found extreme funding had become 90% less common. The market has matured, or at least become more crowded with arbitrageurs.
source → - 5Source
The academic version: Ackerer, Hugonnier and Jermann show that a perp's price is the risk-neutral expectation of spot "sampled at a random time". In other words, a future whose expiry date is unknown. The strength of funding sets how soon that random date tends to arrive.
source → - 6Quote
"For the cost of $1, a 100x bitcoin perp [...] behaves like $100 of bitcoin." At that leverage a 1% move against you is the whole deposit, before any maintenance margin.
— Dave White, Paradigm
source → - 7Context
The fund was tested on March 12, 2020, when bitcoin fell by more than half in a day and BitMEX saw about $1.1 billion of liquidations. The Block reported that the fund lost about 1,627 BTC, then grew to a record 36,493 BTC. Liquidations profit the fund as well as drawing on it.
source → - 8Counter
These totals flatter nobody. Jeff Yan, Hyperliquid's co-founder, wrote that its "fully onchain liquidations cannot be compared with underreported CEX liquidations". Binance was reported to publish only one liquidation order per second. If so, the real total was above $19 billion, and more of it sat on centralized venues.
source → - 9Context
Castle Labs had it at 57% of $13.2 billion on October 31, 2026. A Q3 report put it at 53% of about $24 billion; trackers differ on what they include. Its share of volume is lower, 45% that day on Castle Labs' count. Volume can be farmed with incentives, which open interest is harder to inflate with.
source → - 10Counter
Bitget's CEO, Gracy Chen, said the handling risked making Hyperliquid "FTX 2.0" and called it "immature, unethical, and unprofessional". Hyperliquid said all users apart from flagged addresses would be made whole by the Hyper Foundation.
source → - 11Context
Coinbase had already launched "perpetual-style" futures in the US on July 21, 2025, but those technically expire after five years. They use funding and trade 24/7, without being perpetual in the legal sense.
source → - 12Source
The CFTC argues CME hasn't shown competitive harm. As of late October 2026 the case hadn't been decided.
source → - 13Note
ICE deleted its X post about the deal on October 31, two days later, without explanation. Its press release and trade[XYZ]'s own announcement stayed up. No launch date has been given.
source →