Hyperliquid Dead Man’s Switch: Designing Safe Automatic Order Cancellation

Exchange-side scheduled cancellation protects quotes when a process or network dies.

Model the failure correctly

Choose a deadline above normal refresh jitter but below maximum acceptable stale-quote exposure.

Collect evidence

Refresh from an independent supervisor only while market data, account state, signing, and reconciliation are healthy.

Build the control path

Coordinate timestamps and nonces through the same ownership policy used by other signed actions.

Handle edge cases

If cancellation triggers, reload open orders, fills, inventory, margin, and the order book before quoting again.

Recovery procedure

Use a new strategy generation so delayed acknowledgements cannot revive an obsolete quote set.

Production metrics

Combine scheduled cancellation with inventory limits, deviation checks, local kill switches, and alerts.

TierZero can help implement or review this architecture through our relevant engineering service.

Primary reference

See the official technical documentation and pin the exact API behavior used by your deployment.

Discuss your system with TierZero.