Stock and commodity perps on Hyperliquid

Trade stocks and oil around the clock.A guard on every position.

Bulwark watches your whole account’s margin and steps in before liquidation: it trims positions and tops up from your own idle balance, in stages you set. It only ever reduces risk.

  • Your funds stay in your Hyperliquid account
  • Reduce-only engine
  • Open-source guard

Illustration. Your lines and limits are numbers you set.

Markets

Stocks, indices, oil and metals. One account.

Trade.xyz perpetuals on Hyperliquid, open around the clock. Prices below are live from Hyperliquid.

CL
CLWTI crude
loading…
BR
BRENTOILBrent crude
loading…
AU
GOLDGold
loading…
AG
SILVERSilver
loading…
SPX
SP500S&P 500
loading…
100
XYZ100XYZ 100
loading…
NV
NVDANvidia
loading…
TS
TSLATesla
loading…
MU
MUMicron
loading…
SK
SKHXSK hynix
loading…
SK
SKHXSK hynix
loading…
MU
MUMicron
loading…
TS
TSLATesla
loading…
NV
NVDANvidia
loading…
100
XYZ100XYZ 100
loading…
SPX
SP500S&P 500
loading…
AG
SILVERSilver
loading…
AU
GOLDGold
loading…
BR
BRENTOILBrent crude
loading…
CL
CLWTI crude
loading…

Connecting to Hyperliquid…

How it works

You say the limit. The guard holds it.

Liquidation is decided by your whole account, not one chart. So the guard watches the account.

01

Say your limit

Type a rule in plain words, with your own numbers. You check the exact rule and sign it before it applies.

You write
“Over the weekend, if my account drops your number%, cut my biggest position by your share%.”
You confirm the exact rule
Fri US close → Mon US open: when account value is down your number% or more since the window opened, cut the position using the most margin by your share%.
numbers: you typed themwindow: fixed table
02

It watches your margin

Every price tick, across every market and dex you hold, computed the way Hyperliquid computes liquidation: per margin pool, not per chart.

CLGOLDNVDASP500BTC
xyz cross pool
buffer, every tick
main dex pool
buffer, every tick
03

It steps in, in stages

Trim, top up from your idle balance, trim harder. Reduce-only orders at your slippage limit, plus stops resting on the exchange in case we are down.

1
Below your first line
Trim the biggest position
2
Below your second line
Top up from your idle USDC
3
Below your last line
Trim harder, back to your target
Reduce-only, every time. Each stage fires once until the buffer recovers.

See it work

From one sentence to a guarded account

The real flow in the app, playing on its own. Your numbers appear as “your line”: the app never fills them in.

/app/rulesSay the rule in your own words
Guard rules · AI translator
TranslateOnly numbers you type. Only adds protection.

Hover to pause. Tap a step to jump to it.

What you get

A guard you can read, test and stop

Plain-language rules, a simulator on your own account, and a log of everything it does.

“Close gold if it falls your number% overnight”
US close → next US open: when GOLD moves down your number% or more, close the GOLD position.

Write limits in your own words

An AI turns your sentence into an exact rule. It only uses numbers you typed, and nothing applies until you sign it.

See the crash before it happens

Move any market by any amount and replay your rules on your real account, with and without the guard.
xyz cross
main dex
isolated CL
isolated MU

Every pool, every dex

Standard and unified accounts, cross and isolated. Each margin pool is watched on its own.
Buy CL · opens or addsrefused by I1
Sell CL · reduce-onlysigned

Checked again right before every signature, in open code.

Reduce-only

The engine refuses any order that would open, add or flip. That is our engine’s limit; Hyperliquid agents could trade more.
Guard actionTrimmed the biggest position · buffer back above your line
Held offPrice data stale · no action taken
Window openedWeekend baseline recorded
Policy signedYour signature stored with the rule
Draft refusedAI draft would have loosened a stage
BackstopReduce-only stop refreshed on Hyperliquid
CommandKill switch on · guard orders cancelled
Guard actionTrimmed the biggest position · buffer back above your line
Held offPrice data stale · no action taken
Window openedWeekend baseline recorded
Policy signedYour signature stored with the rule
Draft refusedAI draft would have loosened a stage
BackstopReduce-only stop refreshed on Hyperliquid
CommandKill switch on · guard orders cancelled

Every action logged

Why it acted, what it sent, how it filled. Hash-chained, so the log can’t be quietly edited.
Bulwark botYour xyz pool is near your first line.

Alerts on Telegram

Near a line, when the guard acts, and when something needs you.

Replayed on real crash days

What the guard did on real crash days, and what it didn’t

Replays on recorded mark prices with the guard’s own code. With the example settings it avoided every liquidation on three 2026 crash days, even with our server five minutes late, but it often kept little. Every result is here, including where it did badly.

Silver, 30 Jan 2026

−17.7% within an hour · −37.2% at the lowDeployer-submitted mark, one round every ~3 s
Lev.No guardOn time1 min late5 min late
3×Liq.2.0%2.0%1.5%
5×Liq.0.04%0.1%5.6%
10×Liq.<0.01%12.6%12.6%
20×Liq.<0.01%15.5%15.5%

No liquidation, but on time it kept almost nothing above 3×: it sold in steps all the way down. Late, the resting backstop closed in one go and kept more.

Oil, 23 Mar 2026

−15.4% within an hour · −8% in under 3 minutesAccepted mark, one round every ~3 s
Lev.No guardOn time1 min late5 min late
3×72.2%72.2%72.2%72.2%
5×53.7%53.7%53.7%53.7%
10×Liq.11.3%18.1%18.1%
20×Liq.8.4%22.0%22.0%

No liquidation where the account was otherwise liquidated. With our server late, the resting backstop sold in one go during the fall. At 3× and 5× no line was crossed.

SK hynix, 27 Jul 2026

−18.7% in about a minute, recovered two minutes laterAccepted mark, one round every ~3 s
Lev.No guardOn time1 min late5 min late
3×62.1%62.1%62.1%62.1%
5×Liq.24.8%21.1%21.1%
10×Liq.19.6%17.5%17.6%
20×————

The bad print reached the mark price, so liquidations were real. The guard kept 17.5% to 24.8% at 5× and 10×, on time or late.

Share of the 10,000 USDC kept at the end of each three-day window, with our server on time, 1 or 5 minutes late. Liq. = liquidated; — = above the market’s maximum leverage (SK hynix: 10×). Silver uses the mark its deployer submitted, because accepted marks for these markets are recorded only from 24 Feb 2026. Lines show the mark price for the 4 hours around each day’s sharpest fall. Corrected 5 Oct 2026: an earlier version left out the guard’s resting backstop and showed late orders failing.

What the replays show

  • With the example settings it avoided all 8 crash-day liquidations, on time and with our server 1 or 5 minutes late: its last line rests on the exchange.
  • It kept between $0.19 and $2,480 of $10,000. Avoiding liquidation is not keeping your money.
  • Other settings changed the outcome a lot (oil at 20×: 1.5% to 32.8% kept), and one was liquidated with our server 5 minutes late.
  • On six ordinary bad days it did nothing at 3× and 5×. At 20× it avoided three liquidations and cost 8.8 points on the fourth.

How each replay is set up

A cross long with 10,000 USDC of equity at 3×, 5×, 10× and 20× (up to each market’s maximum), with and without the guard. Example settings chosen for the test, not product defaults: below 2× trim back to 3×; below 1.5× trim back to 2.5×; below 1.2× close. Orders fill at the worst price a 1% slippage limit allows and pay 4.5 bps; the resting backstop at 1.2× fills at its limit only when the price is back within it.

What this does not prove

A replay is not a live cascade: our orders don’t move the recorded prices, depth isn’t checked, and our server being late is modelled only as a delay. A Hyperliquid outage would stop resting orders too. Nine days are nine days: the guard does not protect in every crash.

All results, the settings sweep and ordinary days
Mark-price history courtesy of Hydromancer. Margin tiers and market limits from Hyperliquid.

How it differs

Built around the account, not the position

Bulwark is the first trading front end for HIP-3 stock and commodity perps whose guard watches your whole account’s cross margin and acts in stages: it trims, tops up from your idle balance, then trims harder. Existing tools work per isolated position (DeFi Saver, Keel) or only alert.

ProductWhat it watchesWhat it does
BulwarkYour whole account’s margin, per pool: cross and isolated, every dex you holdIn stages you set: trims, tops up from your idle balance, then trims harder
DeFi SaverOne isolated position at a timeHolds a target leverage band (up to 10×) and de-leverages when it drifts
KeelIsolated HIP-3 positions; cross positions get an alert onlyAdds margin near liquidation, or closes 25% when there is no collateral

From their public pages and code as of October 2026. If we have this wrong, tell us and we will correct it.

Security

Your money never leaves your account

You approve a guard key on Hyperliquid. Hyperliquid lets such keys trade but never withdraw. Reduce-only is our engine’s limit, not Hyperliquid’s, so the checks run in open code before every signature. The key expires when you choose, and you can stop it at any time.

Hardware-backed guard keys

Each user gets their own guard key in AWS KMS, created inside its hardware security modules and never exported, not even to us. If our signing service were compromised, someone could have it sign trades while they controlled it, but could never copy the key or withdraw.

Backstop on the exchange

Reduce-only stop orders rest on Hyperliquid at your lowest line, so they still trigger if our servers are down.
one signed command

Kill switch

One signed command stops the guard and cancels everything it placed. Your own orders are left alone.

Fees

One small fee, the same on every market

Trading3 bps0.03% per order

Added to orders you place, through a Hyperliquid builder code. Shown before you confirm. You approve a cap and can lower it to zero.

GuardIncludedno subscription

Guard orders carry the same 3 bps as your own orders. Nothing else.

Your fundsOn Hyperliquidnever with us

No deposit to Bulwark. You withdraw on Hyperliquid whenever you like.

During the testnet preview no fee is charged.

FAQ

Questions

The short answers. The docs have the long ones.

TS
MU
SK
100
CL
AU
SPX
AG
SPX
NV
BR
CL
AU

Sleep through the open.

Set your limits once. The guard keeps watch, and you can read every move it makes.