Perp DEX Review: Lighter Offers an Exit, Others Face Custody Risks

After reports of a $6.3 billion Binance hot-wallet theft and a similar signing-system breach at Bitget—neither described as a private-key leak—researcher jaehaerys reviewed the contracts of four perp DEXs: Lighter, Hyperliquid, Aster and Variational. The analysis examined where user funds are held, who can move them and whether traders can withdraw if a platform’s systems are compromised. It is not a security audit and does not claim any of the four platforms was hacked. Lighter was the only perp DEX in the review with a user-controlled forced-withdrawal route. Withdrawals require ZK-proof verification and are tied to users’ deposit wallets; users can trigger Desert Mode if withdrawals remain unprocessed for 14 days. However, the operator controls price feeds, and a security committee can help approve upgrades that bypass the usual notice period. The other perp DEXs have different custody dependencies. Hyperliquid reportedly holds about 86% of its roughly $6.5 billion in USDC in a Coinbase-controlled wallet, while its validator set and closed-source software add further dependencies. Aster withdrawals require operator approval and signatures from two Aster keys; hourly limits may slow withdrawals but do not remove that control. Variational’s design allows any one of 17 operator keys to transfer USDC from user pools, with no on-chain amount cap or independent user exit. For traders, the findings show that the perp DEX label does not guarantee self-custody or an emergency exit. Check where assets are held, who controls withdrawal and upgrade permissions, and whether funds can be recovered without the team.