Skip to content

Documentation

How to use Elysta, and why it behaves the way it does.

Start here for a first session, the trading guide and the markets. The methodology, API and event references each have their own page.

Getting started

A first session on Elysium mainnet: connect, claim test collateral, deposit, place an order. Every step is a transaction your wallet signs, and every page shows the transaction it sent.

  1. Connect a wallet on the right network. Any EVM wallet works. Elysta asks only to connect and to switch to chain 99901; it never asks for a seed phrase or a signature that is not a transaction you can read. You need the network’s gas asset (HYPE on Elysium mainnet, bridged from HyperEVM with the Elysium Bridge) for fees; Elysta does not distribute gas.
  2. Claim test collateral. The settlement token is Elysta Test USD (tUSD), a 6-decimal token with no value. Its faucet() mints 10,000 tUSD to the caller once every 24 hours. The Vault page has the button; the call is public if you prefer a script.
  3. Deposit. Approve the vault for the amount you choose (the terminal never asks for an unlimited approval), then deposit. The vault records 1,000.000000 tUSD as 1,000 × 1018 in its ledger, and the balance you see afterwards is a contract read, not a projection.
  4. Choose a market. The market directory shows every listed contract with its status, validated index, mark, tick, lot and leverage. A market that is not tradable right now (closed session, paused, halted) says so and why.
  5. Place a first order. In the terminal, pick limit, enter a price within the band around the index and a quantity that is a lot multiple. The estimated margin and fee you see are the contract’s own formulas; on signing, the order reserves exactly that. It rests in the book or fills against resting orders in the same transaction. Cancel it any time; the reservation returns at once.

What the terminal shows you before you sign

Estimated margin (qty × price × IMF, rounded up), the taker fee (notional × takerFee, rounded up) and, for market orders, the worst price the engine will accept. The transaction is simulated first; a revert is explained in words (see the error dictionary) before the wallet ever opens.

Trading guide

Two order kinds, four times in force, one flag. Everything below is enforced by the order book and the risk engine, not by the interface.

Order types

OrderBehaviourRests in the book
Limit · GTCExecutes against resting orders that cross its price, then rests at its limit until filled, cancelled or expired.Yes
Limit · IOCExecutes what crosses immediately; the remainder is cancelled in the same transaction.No
Limit · FOKExecutes only if the whole quantity can fill at or better than the limit; otherwise the transaction reverts and nothing happens.No
Limit · Post-onlyRests without executing. If it would cross the book the transaction reverts (PostOnlyWouldCross). Pays the maker fee when filled.Yes
Market · IOCAn immediate limit at the mark moved by the market’s maximum impact (1% at launch), tightened by your protection price. Executes what it can; the rest is cancelled.No
Market · FOKThe same protective limit, but all-or-nothing.No

Reduce-only

A reduce-only order may only shrink the position you already hold in that market: it must be on the opposite side, no larger than the position, and the risk engine caps every fill at what is left to close. It reserves no collateral. When a market is in ReduceOnly status, only reduce-only orders are accepted. Use it to close without any risk of flipping.

Replace, cancel, expiry

  • Cancel works in every market status, including paused and halted, and releases the reservation at once. Several orders can be cancelled in one transaction.
  • Replace is a cancel and a new placement in one transaction: the new order has a new id and a new time priority, as a price change or a size increase should. Only resting limit orders can be replaced; side, time in force, reduce-only and expiry carry over.
  • Expiry is optional. An expired order can no longer execute: the book cancels it the moment it is touched by matching, and anyone may clear expired orders with cancelExpired, returning the collateral to its owner.

Limits you will meet

  • At most 64 open orders per account and 32 open positions per account.
  • Per market: a minimum and maximum order quantity, a maximum position per account, and a maximum open interest per side. A fill that would breach them is rejected or capped.
  • Matching stops after 24 fills or 12 price levels in one transaction. An order that still crosses at that point is cancelled rather than rested, and the terminal tells you to resubmit.

Fees

Makers pay 0.02% (0.0002) and takers 0.05% (0.0005) of the filled notional at launch, charged from available collateral at the fill and split half to the insurance fund, half to protocol fees. The estimate shown before you sign uses the same rounding as the contract.

Positions and margin

A fill on the same side increases your position and averages the entry price; a fill on the opposite side reduces it, realizing PnL at the fill price and releasing margin in proportion, and any excess opens the other way. You can add margin to a position at any time and remove it while the position stays above its initial requirement. Funding is settled whenever the position is touched. The methodology gives every formula with worked examples.

Markets and sessions

Thirteen launch markets in four asset classes, each with its own tick, lot, leverage and session. The live registry on the markets page is authoritative; this is the catalogue they were listed from.

MarketClassMax leverageTickLotMax orderSessionFeed
BTC-USDBitcoinCrypto20x0.10.000110Continuoushypercore:BTC
ETH-USDEtherCrypto20x0.010.001200Continuoushypercore:ETH
SOL-USDSolanaCrypto20x0.0010.015,000Continuoushypercore:SOL
HYPE-USDHyperliquidCrypto10x0.0010.110,000Continuoushypercore:HYPE
AAPL-USDApple Inc. (synthetic reference)Equities10x0.010.012,000Mon–Fri, UTChypercore:xyz:AAPL
TSLA-USDTesla Inc. (synthetic reference)Equities10x0.010.012,000Mon–Fri, UTChypercore:xyz:TSLA
NVDA-USDNVIDIA Corp. (synthetic reference)Equities10x0.010.015,000Mon–Fri, UTChypercore:xyz:NVDA
XAU-USDGold, troy ounceCommodities10x0.10.001100Mon–Fri, UTChypercore:xyz:GOLD
XAG-USDSilver, troy ounceCommodities10x0.0010.110,000Mon–Fri, UTChypercore:xyz:SILVER
WTI-USDWTI crude oil, barrelCommodities10x0.010.015,000Mon–Fri, UTChypercore:xyz:CL
NG-USDHenry Hub natural gas, MMBtuCommodities5x0.0011100,000Mon–Fri, UTChypercore:xyz:NATGAS
SPX-USDS&P 500 indexIndices20x0.10.001100Mon–Fri, UTChypercore:xyz:SP500
XYZ100-USDXYZ100 index (HyperCore xyz composite)Indices20x10.00150Mon–Fri, UTChypercore:xyz:XYZ100

Asset classes

Crypto
Continuous markets on HyperCore’s published oracle prices. 20x leverage (10x for HYPE), 5% price band, 90-second heartbeat.
Equities
Synthetic exposure to equity references. No share, dividend or voting right is involved; the market tracks a reference price. 10x, 3% band, 180-second heartbeat, weekday sessions. Corporate actions are handled by the reference feed, not by the contract.
Commodities
Gold and silver per troy ounce, WTI crude per barrel, Henry Hub natural gas per MMBtu. 10x (5x for natural gas), 3% band, weekday sessions.
Indices
The S&P 500 and HyperCore’s XYZ100 composite. 20x, 3% band, weekday sessions.

Parameter policy

Every launch market shares one policy: initial margin fraction = 1 / max leverage, maintenance = half of that; 60-minute funding capped at 0.0375% per interval (0.000375); a 1% liquidation fee split 50% to the liquidator; maker 0.02% (0.0002) and taker 0.05% (0.0005) with 50% of fees to the insurance fund; a 1% market-order impact cap and a 1% mark band; oracle deviation 2%, widening to 20% after a 2-hour gap, with 120 seconds to confirm a deviation. These are launch values, not a claim about production risk limits. Changes are permissioned and event-logged (RiskParamsUpdated, FeeParamsUpdated, ExecutionParamsUpdated).

Sessions and holidays

Crypto markets are continuous. Scheduled markets are open Monday to Friday, 00:00 to 24:00 UTC, closed Saturday and Sunday; holidays are set per market and per UTC day by a market manager (HolidaySet). Outside the session no order can be placed or matched, but cancellation works, positions stay open with their margin, funding keeps accruing while the index is valid, and liquidation remains possible while the index is valid. If the feed stops publishing outside the session, the index goes stale after the heartbeat and the market halts, which also suspends liquidation and funding until a fresh price arrives; the reopening gap rule then allows a larger first move.

Market status is one of Inactive (listed, never traded), Active, ReduceOnly, Paused (by an administrator) and Halted (by the oracle or by bad debt). The market directory and the status page show it live.

Methodology

Every calculation the protocol performs, with its formula, precision, rounding and worked examples.

API reference

REST and WebSocket, generated from the published contract between the API and this application.

Fourteen REST endpoints under /api/v1 for markets, order books, trades, candles, funding, accounts, history, protocol status, the insurance fund, liquidations and the leaderboard; one WebSocket with five channels. Every response says where its figures came from and at which block.

Events

Every event of the four contracts, from the compiled ABIs, with what emits it and where the indexer puts it.

The chain is the record. If you want to verify a balance, a fill or a liquidation without trusting Elysta’s indexer, the event specification tells you which logs to read and how to interpret every field.

Glossary

Available
Free collateral in the vault: deposits land here, withdrawals leave from here, and orders reserve from here.
Reserved
Collateral set aside for resting orders (initial margin plus taker fee for the full quantity). Returned on cancel or expiry; converted to margin and fee as the order fills.
Locked
Isolated margin held by open positions. The only collateral a position can lose.
WAD
An 18-decimal fixed-point integer. Every price, quantity and amount on chain is one; the API serves them as decimal strings.
Index price
The validated reference price from the registry: an adapter observation that passed the heartbeat and deviation rules.
Mark price
The book mid clamped to ±markBandBps around the index; the index alone without a two-sided book. What PnL, liquidation and funding read.
Last price
The price of the most recent fill. Used by charts and nowhere else.
Initial margin fraction (IMF)
The fraction of notional locked when a position opens or grows: 1 / maximum leverage.
Maintenance margin fraction (MMF)
The fraction of notional below which a position may be liquidated; half the IMF at launch.
Equity (of a position)
Margin plus unrealized PnL at the mark.
Notional
Quantity × price, rounded down.
Reduce-only
An order or market mode that may only shrink an existing position, never increase or reverse it. Enforced by the risk engine at every fill.
Time in force
GTC (good till cancelled), IOC (immediate or cancel), FOK (fill or kill), post-only.
Tick and lot
The price step and the quantity step of a market. Prices must be tick multiples; quantities lot multiples.
Price band
How far a limit price may sit from the index (priceBandBps). A price outside it is rejected at placement.
Funding
The periodic payment between longs and shorts, computed from the time-weighted premium of mark over index, prorated from 8 hours to the market’s interval and capped.
Cumulative funding index
The running sum of rate × mark per settlement. A position pays or receives its quantity times the change in this index since its last touch.
Liquidation
Permissionless takeover, at the mark, of enough of an under-margined position to restore its initial margin ratio, or all of it when that is impossible.
Insurance fund
The protocol’s own collateral, fed by fee shares and penalties, that pays losses a position’s margin cannot. It cannot be withdrawn in this version.
Bad debt
A loss the insurance fund could not cover. Recorded on chain and halts the market.
Halted
The safe state of a market: no orders, no matching, no liquidation, no funding settlement. Entered automatically when the index is invalid or bad debt is recorded.
Session
The weekly UTC schedule of a scheduled market (equities, commodities, indices). Outside it orders cannot be placed.
Provenance
How an API value reached you: read from chain, indexed from events, computed from verified inputs, estimated, or unavailable.
Keeper
Elysta’s off-chain service that posts prices to the keeper adapter and calls settleFunding on time. It decides nothing; the contracts validate everything it sends.

Questions traders ask

Short answers; each points at the rule that decides it.

Why was my order rejected with PriceOutOfBand?

Limit prices must sit within the market’s price band of the index (5% for crypto, 3% for scheduled markets at launch). A limit far from the index is almost always a typo, and a resting order far from the market would reserve collateral for nothing.

I placed a GTC order and it was cancelled with reason Remainder. Why?

The matching budget (24 fills or 12 price levels per transaction) ran out while your order still crossed the book. Resting it would have left the book crossed, so the engine cancelled the remainder and released its reservation. Resubmit for the remaining quantity.

Can my position be liquidated while the market is closed for the session?

Yes, if the index is still valid. Liquidation checks the market status (not halted or inactive) and the index, not the session. Scheduled markets whose feed goes quiet outside the session become stale after the heartbeat and halt, in which case nothing can be liquidated until a fresh price arrives.

What does the vault page mean by Vault balanced?

The vault’s token balance equals the sum of every account’s three buckets plus the insurance fund, protocol fees and the PnL pool. The status page reads solvency() on the vault and reports whether that equation holds at the block it was read.

Where does the mark price come from if nobody is quoting?

From the index. With a one-sided or empty book the mark is the index itself, and with a two-sided book it is the mid clamped to ±1% around the index. The last trade never sets the mark.

Is funding paid every hour even if I do nothing?

The rate is settled into the market’s cumulative index every interval, but your position only pays or receives when it is touched (a fill, a margin change, a liquidation). The amount is exactly what accrued in between, so timing changes nothing.

Can an administrator move my collateral?

No function allows it. The ledger is written only by the risk engine contract through documented settlements, and no role can edit a balance, force a fill or write a price. The one real power an administrator holds is role administration, which is why the roadmap puts a multisig and timelock in front of it before mainnet. The protocol page spells this out.

Is tUSD worth anything?

No. It is a test token with a public faucet, used so anyone can try the exchange without risking money. Elysta settles in it on every network it runs on today; gas on Elysium is paid in HYPE, which does have value.

Elysium mainnetTest collateral has no value. Mainnet has no calendar date.