On September 5, 2025, a screenshot of positions from the on-chain monitoring agency Onchain Lens suddenly brought two "licensed institutions" in DeFi into the spotlight: through address tagging and data analysis, Onchain Lens disclosed that addresses associated with global market maker Wintermute and digital asset financial services company Galaxy Digital held large short positions on the decentralized perpetual contract protocol Hyperliquid — approximately $99.82 million short and about $5.12 million long for Wintermute, with short positions far outweighing long ones; the address associated with Galaxy Digital held about $26.41 million short, totaling nearly $126 million in shorts across both institutions on the protocol. More glaring is the time dimension: over the past 30 days, these on-chain positions have generally been in a state of loss, though specific figures have not been released, the image of "licensed institutions stubbornly holding large shorts while suffering losses on an emerging DeFi protocol" is enough to quickly ferment in the market and media. However, among currently known information, no regulatory agency has publicly stated or initiated enforcement procedures regarding this specific set of positions, the real source of tension in the industry is another layer of issues: when institution funds constrained by traditional licenses massively enter the DeFi derivatives world lacking KYC and clear legal entities, how will every addition, closure, or liquidation on transparent chains be interpreted by compliance teams as "normal hedging," "arbitrage trading," or "potential manipulation," and who defines this red line, and based on what rules, is becoming an unavoidable core issue.
On-chain monitoring exposes whale short positions
In this incident, it was not platform announcements but third-party monitoring agency Onchain Lens that truly brought institutional positions into the limelight. It categorized certain Hyperliquid user addresses along with wallets associated with Wintermute and Galaxy Digital through address tagging and on-chain data analysis, then presented the derivative position structures of the two institutions on this decentralized perpetual contract protocol in a publicly visualized interface: public on-chain data and media reports indicate that Wintermute-associated addresses hold approximately $99.82 million short and about $5.12 million long on Hyperliquid, while Galaxy Digital-associated addresses hold about $26.41 million short, with a total of approximately $126 million in shorts, and the relevant positions have been generally in a state of loss over the past 30 days, although the exact loss amount has not been verified by multiple parties. This means that in a DeFi environment lacking traditional reporting and position disclosure obligations, third-party technical entities can already "stitch together" institutions' on-chain risk exposures into a near real-time public position report.
This "public position effect" driven by on-chain transparency directly changes the behavioral environment for institutions on DeFi protocols: any large increase in positions or sustained losses are no longer just internal risk control numbers, but may quickly be amplified by monitoring agencies, media, and social platforms, forming similar regulatory external scrutiny and public opinion pressure. However, in the compliance context, it is essential to clearly delineate the boundary between verifiable facts and market interpretations — currently available public information only shows position size, direction, and the loss status over the past 30 days, market claims about "holding spot and shorting perpetuals as basis or funding fee strategies" versus "directionally bearish" come from KOL analyses and have not been confirmed by Wintermute or Galaxy Digital officials, nor is there any corroborating material indicating that regulatory agencies have initiated enforcement actions regarding this specific position or recognized it as anomalous trading behavior. At a time when on-chain monitoring is increasingly viewed as a future regulatory tool, treating the data itself as a "compliance conclusion" remains a dangerous shortcut; how to maintain prudence between factual disclosure and strategic interpretation is becoming the first compliance test that institutions must navigate when participating in DeFi derivatives.
Traditional licensed institutions entering DeFi derivatives
Galaxy Digital and Wintermute are institutions shaped by traditional financial regulatory frameworks: the former must adhere to the securities and derivatives rules of their respective jurisdictions in trading, asset management, and investment banking, while the latter, as a global market maker, operates actively on multiple centralized and decentralized platforms, long subjected to anti-money laundering and market conduct regulations. Between 2020 and 2024, most major jurisdictions have incorporated derivatives such as perpetual contracts into licensing and reporting scopes, platforms offering such products typically need to meet licensing, risk disclosure, and customer suitability requirements, which are foundational prerequisites for Galaxy Digital and Wintermute's internal compliance systems. Now, these two institutions have formed large exposures on Hyperliquid, which does not adopt traditional KYC account systems and whose operational entities and licensing status differ significantly from regulated CEXs, indicating they are practically placing regulated derivatives business and DeFi perpetual contracts, which remain in regulatory gray areas, within the same risk landscape, requiring compliance teams to answer the fundamental question of "what category of regulated activity does this trade belong to."
On-chain data has already provided a sharply pointed starting point: public information shows that Wintermute-related addresses hold approximately $99.82 million short and about $5.12 million long on Hyperliquid, while Galaxy Digital-related addresses have about $26.41 million short, with a combined total of about $126 million in shorts, and the overall status has been one of losses in the past 30 days. In traditional regulatory frameworks, such large concentrated derivative shorts would typically fall under monitoring for anomalous trading and market manipulation, and institutions would need to explain the strategic logic, risk controls, and whether there is a market impact through internal and external reporting; however, in a DeFi protocol lacking licensing, KYC, and clear legal entities, these exposures directly lie on-chain and are visualized as "similar to public holdings" by third parties like Onchain Lens. For Galaxy Digital and Wintermute, this means that risk management and legal compliance must simultaneously respond to three pressures: how to explain this $126 million short within the framework of internal concentration and exposure limits, whether and how to present such on-chain perpetual contract activities in traditional regulatory reporting and audit processes, and preparing a consistent compliance narrative in anticipation of possible regulatory inquiries without clear enforcement actions having emerged, every position choice by licensed institutions entering DeFi derivatives is effectively rewriting their compliance boundaries.
$126 million short in losses and risk boundaries
From the details disclosed by Onchain Lens, Wintermute-related addresses have about $99.82 million short and $5.12 million long on Hyperliquid, while Galaxy Digital has about $26.41 million short, resulting in a total directional exposure of about $126 million, which has been generally in a state of loss over the past 30 days. However, this is only a visible segment on-chain: public information does not cover their hedging structures, spot holdings, or overall balance sheets on other platforms, thus lacking direct evidence to support claims of "violating trading" or "reckless betting." What has truly been ignited is the pressure testing of risk control and compliance — under the internal limits, concentration management, and risk reporting framework for licensed business lines, how this already floating loss on-chain gets classified and recorded is the first question that each compliance team must answer.
The regulatory focus is not solely on losses, but on the combination risk of "scale + concentration": $126 million shorts weighed down on a single perpetual protocol Hyperliquid may amplify effects on that protocol's liquidity and funding rates in extreme market conditions, triggering keywords like "market manipulation" and "systemic risk assessment" within traditional regulatory contexts. In regulated derivatives markets, large concentrated shorts typically automatically fall onto the anomalous trading monitoring list, requiring institutions to explain strategy logic and risk controls to exchanges and regulators; while currently, the on-chain environment has not shown any explicit enforcement actions against Hyperliquid or this position, the visualized large exposures have already provided a natural entry point for regulatory agencies, auditing firms, and even the media. Externally, it is impossible to accurately determine whether Wintermute and Galaxy Digital have crossed boundaries solely based on this set of on-chain data, but such information is sufficient to support queries like "whether there exists undeclared high-risk derivatives activities" or "whether it conflicts with risk commitments of regulated business," the tension between visible large positions and invisible balance sheets will long determine how far institutions can go in on-chain derivatives and where regulators will draw the next red line.
How regulators will take over the on-chain perpetual contract battlefield
Between 2020 and 2024, several major jurisdictions have written a clear premise through enforcement actions against unregistered crypto derivatives platforms: perpetual contracts are regarded as regulated derivatives and must be incorporated into licensing and reporting frameworks. In sharp contrast, DeFi derivatives protocols often operate solely on smart contracts and community governance without traditional license holders and compliance officers, and lack clear legal entities. When large concentrated shorts totaling approximately $126 million are clearly presented on-chain, the regulatory intervention paths are shifting from "whether to regulate" to "how to specifically regulate": on one end, requiring front-end settings to be real-name based, geo-blocked, and risk-disclosed for users from specific countries, pulling perpetual contracts back under home country derivatives rules; on the other end, promoting self-regulatory compliance standards at the protocol level, such as establishing industry covenants concerning position concentrations, leverage multiples, and liquidation mechanisms, and incorporating anomalous positions into routine reporting and communication.
To implement these pathways, on-chain monitoring agencies and compliance technology are being pushed to the "outpost" position. On-chain monitoring and RegTech have been widely used in anti-money laundering, sanction enforcement, and risk identification, possessing the technical capability to extend to monitoring DeFi perpetual contract positions and risks — Onchain Lens's recent visual disclosure of institutional shorts on Hyperliquid essentially demonstrates to regulators: it is possible to construct a real-time risk map akin to traditional "anomalous trading radar" on a public ledger without contacting exchange back-ends. As high-throughput, low-latency protocols like Hyperliquid attract participation from professional institutions such as Wintermute and Galaxy Digital, on-chain trading for institutions transitions from "marginal experimentation" to "observable scale," forcing the market to confront three layers of pressure: who will hold derivative licenses and be responsible for the protocol, who will organize cross-platform self-regulatory risk rules, and how will various countries' regulators coordinate cross-border enforcement rhythms based on shared on-chain data. As the perpetual contract battlefield has shifted on-chain, the next real competition will be among regulators, protocols, and institutions regarding who can first master this real-time risk map and redraw industry power boundaries accordingly.
Extracting institutional compliance checklist from this exposure
After the cumulative shorts of approximately $126 million on Hyperliquid were extracted, tagged, and publicly disclosed by Onchain Lens from on-chain data, the positions of Wintermute and Galaxy Digital on the decentralized perpetual contract protocol were magnified for the first time under near "real-time position disclosure," clearly demonstrating that institutions' behaviors on such protocols are no longer hidden experiments, but could be transformed at any moment into compliance samples through on-chain monitoring and media. Although there is currently no evidence indicating that the two institutions have faced explicit regulatory penalties or judicial lawsuits due to this position, the publicly available data on shorts, loss status, and strategic disputes are sufficient to force future participants to arrange a high-level compliance checklist: first, the concentration of positions and risk exposures must be quantified into explainable metrics within the institution, with large unilateral shorts being preemptively included in monitoring for anomalous trading and market manipulation; second, platform selection should no longer be solely a trade-off between liquidity and technical performance, but should assess the legal attributes, counterparty, and governance risks of protocols in a compliance framework when lacking traditional licenses, KYC, and clear legal entities; third, internal reporting chains need to cover on-chain derivative businesses, incorporating such positions into routine compliance and risk reporting, rather than being treated as "gray innovations" floating outside formal systems; fourth, external disclosures and contingency plans must acknowledge that on-chain monitoring and RegTech have expanded to the level of perpetual contract positions, and the narrative of "on-chain footprints as compliance evidence" is becoming a reality, requiring institutions to be prepared for regulatory inquiries and even cross-border data sharing. The real uncertainty lies in the fact that DeFi derivatives regulation is still in the early exploration stages, and the formal attitudes of various jurisdictions regarding such protocols have not yet been unified; licensing boundaries, reporting obligations, and risk tolerances remain undecided, future participants can only continue to weigh between being the first to test the waters and avoiding line crossing, and each large on-chain derivative position will simultaneously become a dual annotation of revenue curves and regulatory boundary tests.
Join our community to discuss and become stronger together!
Exclusive Hyperliquid benefits for AiCoin: https://app.hyperliquid.xyz/join/AICOIN88
Exclusive Aster benefits for AiCoin: https://www.asterdex.com/zh-CN/referral/9C50e2
On-chain Telegram community: https://t.me/AiCoinWhaleData
On-chain community: https://www.aicoin.com/link/chat?cid=N6OVMor5g
AiCoin on-chain Twitter: https://x.com/aicoinwhaledata
免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到support@aicoin.com，本平台相关工作人员将会进行核查。
