Skip to content
Temporal Docs← Back to the app

03 · Wallet & accounts

Wallet & accounts

Wallet, accounts and equity#

Your wallet is your own address. Your money outside the venue stays in your HyperCore account, and PORTFOLIO prints it on one line ("In your HyperCore wallet"). An account holds its own equity — the cash deposited into it plus its own profit and loss — and its own positions. Margin, the leverage cap and the solvency test read the account's equity and nothing else. There is no idle balance sitting between the two. A freshly connected wallet has no accounts; the act that needs one opens it.

Nothing moves out of your HyperCore wallet except an amount a button printed and you signed. A DEPOSIT or an ADD MARGIN moves dollars from your HyperCore wallet into an account, with the amount printed on the button. An open that would leave the account short says so, and its button carries the amount (ADD $X AND TRANSACT). Fees, funding and liquidations never reach into your wallet. WITHDRAW releases equity above what the account must keep behind what it holds, and is refused below that, with both numbers named. It goes back to your HyperCore wallet; daily limits are in section 6. When a single position closes, what it frees stays in the account; CLOSE ACCOUNT pays the whole residual back to your wallet.

There is no house#

The venue owns nothing and quotes nothing. The first curve on the book is the first one a person funds and posts; until then nothing trades. Every quote is backed by an account's own deposit.

Four account kinds#

The kind is fixed when the account is opened. OPTIONS holds the options you open from the OPTION ticket, with no perp behind them (accounts opened before the rename, such as TRADE 1, keep their name and wear the OPTIONS badge). PROTECT holds exactly one perp and one option pair. EARN holds one quoted curve and the positions it accrues against traders; a maker holds no perp of its own.

A name is the kind and a number — OPTIONS 1, PROTECT 1, EARN 1 — counting every account of that kind the wallet has opened. It is given once and never changes. An account is active until CLOSE ACCOUNT ends it; an ended account is inactive and sits behind SHOW INACTIVE.

Margin: one closed form, summed at the account#

Every sold option is margined by the traditional closed form, with no scenario and no path length. Per unit of coin written: the initial margin is the larger of (15 % − how far out of the money the strike is) and 10 %, times spot, plus the option's mark. The maintenance margin is 7.5 % of spot plus the mark. An in-the-money option has zero distance out of the money, so it takes the full 15 %, and its mark is never below its intrinsic.

The legs add up at the account. An open must fit the initial margin; liquidation starts when equity is at or below the maintenance margin. Bought options count as collateral at their mark, and a sold vertical is margined at its width. Makers and takers use the same formula: an EARN account's sold rows are margined at the maker's own mark, exactly as an OPTIONS account's are.

The covered wing is exempt in PROTECT: the perp covers the sold option up to its quantity (a long perp covers calls, a short perp puts), and only the excess is margined. Perps keep their own margin at the leverage you choose. The contract runs this formula on chain; the keeper pushes the marks it reads.

What happens when equity reaches the maintenance margin — the close, the fee, the insurance fund and why a later deposit is never charged for an old loss — is in section 6.

PROTECT: buy a floor, solved for you#

Choose PROTECT on CREATE PERP and the perp opens straight into its own PROTECT account, on a long or a short. You type three numbers, all pre-filled: a FLOOR in dollars, a TARGET ROE as the return on equity you are playing for, and PROTECTION LASTS in days (30 unless you change it). The venue buys a put near the floor and sells a call at or beyond the target (the other way round on a short), picking each strike and decay itself.

The solver is one fixed problem. It looks for the structure that beats a less-levered perp with the same liquidation floor by the most, in points of your return at the target, and still lasts at least the days you asked (30 unless you change it) (the ticket's headline, for example "Keeps 72% of your upside · liquidation −18% → −30% · protection holds 30 days") subject to these rules: the liquidation floor lands at the one you typed, or at most one point of the price further away, never nearer; the two legs are worth the same at their fill prices, so no premium changes hands; neither leg is larger than the perp; every leg is something the makers will actually quote right now; and the protection lasts as many days as you asked, so the very short, bleed-heavy puts are out: if the price falls to where the bare perp would have been liquidated and stays there, the account's cushion covers the structure's net running cost for that long. Among near-equal answers it takes the floor closest to yours, then the lowest peak funding. If no structure lasts the default minimum, nothing opens and the refusal names the longest one that does; if you typed the days, you get the longest one and a line saying so. If none can hold the floor, nothing opens, and the refusal names the nearest floor that can be held. The floor you type stays as you typed it, and one line under it says where the structure really liquidates.

The perp and its options open as one request. You sign once; the venue fills the perp on HyperCore and the contract opens every option leg in the same transaction inside the price limit you signed. If any part fails, everything is cancelled and your margin goes back: you are never left with a perp and no protection, or protection and no perp. The ticket shows FUNDING / YR, what the two legs cost or earn over a year, with the rate now and the worst rate near the floor. The PAYOFF tab draws the structure against a plain perp on the same floor (section 8).

PORTFOLIO#

PORTFOLIO lists every account with its figures in the asset's own coin; the one place that sums across assets, the wallet total, is in dollars. The perp rows carry size, entry, mark, P/L and perp equity. The option rows carry strike (in dollars, at entry as a % from the mark, and now), entry price, current price, P/L and equity. Closed legs are kept behind SHOW CLOSED POSITIONS.

FUNDING is its own figure: the wallet-wide sum paid (−) or received (+) on option legs, with each leg's yearly run rate in its hover. The strip also shows Perps P/L, Options P/L, Earn P/L, net perp exposure, the positions' equity and the MAINTENANCE LEVEL — the equity at which the account liquidates.

Money that reaches the venue with no act behind it (a transfer sent straight to the venue's wallet) is never shown as a balance. A banner offers two actions: MOVE INTO AN ACCOUNT, or SEND BACK to your HyperCore wallet. On a chain wallet, accounts that exist only in the venue's old test history are legacy (pre-ledger) accounts: they are counted in one muted line, not in the totals, because the ledger is the account of record.

Assets#

The venue trades BTC and HYPE. Each asset is its own book with its own marks, makers and positions, and a maker's curve quotes exactly one of them. Marks come from Hyperliquid. Two coins have no common unit, so anything summed across assets is in dollars.

Signing in#

Connect your own wallet; the venue asks for a signature and your accounts live under that address. This deployment is a TESTNET venue: no real money is at risk, so it also offers a throwaway testnet wallet, a key generated in your browser. You sign an intent for each act; the venue's own signer submits it and pays the gas, so a wallet never needs to hold the chain's gas coin. On testnet a wallet's own accounts may fill each other, which lets one person hold both sides of a test. Mainnet runs the same venue on real funds — see section 9.

Everything above is the short form. The canon — every ruling, every rejected alternative with the reason it was rejected, and the measurements behind each number — is the design spec, and the corroboration procedure is the audit protocol. Both live in the repository this venue is built from.