DEX

SlowMist identified critical security vulnerabilities in NOFX AI, an open-source crypto futures trading platform built on DeepSeek and Qwen architectures, that allowed attackers to access wallet private keys and exchange API credentials. Binance and OKX worked with SlowMist to identify affected users and revoke compromised credentials by November 17. The flaws affected multiple system versions, with authentication controls failing to protect administrator functions and sensitive endpoints returning API keys by default.

Hyperliquid deployed HIP-3, a framework allowing developers to launch perpetual futures markets without central approval. Co-founder Jeff Yan announced the upgrade alongside initial integrations from TradeXYZ, Ventuals, and Felix Protocol. Each project deployed custom perpetual markets directly on the platform's Layer 1 infrastructure.

Uniswap introduced its Continuous Clearing Auctions (CCA) protocol on November 13, 2025, designed to streamline token launches on its decentralized exchange. The mechanism aims to address liquidity challenges and transparency issues in traditional token launch methods. Aztec Network became the first project to utilize CCA, launching as a privacy-focused Layer 2 solution on Ethereum. The protocol conducts continuous clearing processes that distribute token supply gradually over time through on-chain auctions.

Price manipulation attacks resulted in $42 million in losses across 51 separate incidents during 2025, according to CertiK Alert. The November 12 incident involving Popcat on Hyperliquid demonstrated coordinated manipulation tactics, triggering $63 million in liquidations through artificial buy walls and sudden order withdrawals. CertiK recorded 19 incidents in Q4 alone, approaching Q2's peak of 20 cases.

Aave Labs received regulatory authorization under the EU's Markets in Crypto-Assets framework, enabling its Push service to facilitate euro-to-stablecoin conversions across the European Economic Area. The Central Bank of Ireland granted the license to Push Virtual Assets Ireland Limited, a subsidiary managing Aave's European operations. The protocol will offer regulated fiat on- and off-ramps for its GHO stablecoin and other digital assets.

Crypto exchange OKX has enabled decentralized exchange trading within its self-custody wallet application, giving users access to DEXs on Base, Solana, and X Layer networks. The feature routes orders across more than 100 liquidity pools and is available globally, including in the United States.

An unidentified trader deliberately destroyed $3 million while executing a leveraged manipulation on Hyperliquid's POPCAT perpetual contract, causing approximately $4.9 million in losses to the platform's hyperliquidity provider vault. The attacker withdrew USDC from OKX, distributed funds across multiple wallets, opened over $26 million in long positions, then removed an artificial buy wall to trigger mass liquidations.

A trader deliberately sacrificed $3 million to manipulate Hyperliquid's POPCAT perpetual market, causing the platform's Hyperliquidity Provider vault to absorb $4.9 million in losses. The attacker distributed funds across 19 wallets, opened over $26 million in leveraged positions, and erected a fake $20 million buy wall that triggered cascading liquidations when removed. The manipulator's entire stake was liquidated during the event, with analysts describing the incident as a structural disruption rather than a profit-driven exploit.

Memecoin POPCAT fell 43% on Wednesday after a trader executed a manipulation scheme on Hyperliquid, a decentralized exchange. An unknown actor withdrew $3 million USDC from OKX, distributed funds across 19 wallets, and built long positions worth $20 million to $30 million on POPCAT. The trader then abruptly removed a $30 million buy wall, triggering mass liquidations totaling approximately $63 million.

Uniswap founder Hayden Adams introduced the UNIfication governance proposal, featuring protocol fee implementation, an $842 million token burn, and a buyback mechanism. UNI surged over 63% within one week, reaching $10 before settling near $8.57. The proposal allocates 0.3% of trading volume between liquidity providers (0.25%) and a buyback pool (0.05%), with projected annual buybacks of approximately $450 million.