TL;DR:
- The Trade.xyz platform restored the previous version of its documentation on GitBook at around 9:15 a.m. ET on November 2, 2026.
- The company maintains an active warning advising users not to click internal links while the technical investigation is underway.
- The incident occurs following the announcement of a strategic partnership with Intercontinental Exchange (ICE) to operate regulated perpetual contracts in the U.S.
After detecting unauthorized activity on the morning of Monday, November 2, the derivatives platform Trade.xyz restored access to its technical documentation on GitBook. The company issued a security notice requesting users to refrain from interacting with links contained within those pages while internal investigations continue.
We identified unauthorized activity affecting our GitBook documentation earlier this morning. The documentation was fully restored to its previous state as of 9:15 AM ET.
As a precaution, we advise users not to click on any links within the documentation while our investigation…
— trade.xyz (@tradexyz) November 2, 2026
Trade.xyz reported that the documentary material returned to its previous operational state at exactly 9:15 a.m. ET. The technical team explained that the anomaly was limited to public documentation hosted on the external tool GitBook, with no reports of breaches to the trading infrastructure or underlying smart contracts of the protocol built on Hyperliquid.
“As a precautionary measure, we advise users not to click on any links within the documentation while our investigation remains ongoing,” the company stated in its public announcement.
The incident report does not specify the exact time the unauthorized access began or the duration during which the altered pages remained visible to the public. Additionally, the notice did not clarify whether the breach stemmed from compromised credentials, an attack on administrative accounts, or an issue with the GitBook provider.
At the time the security notice was published, the entity reported no loss of user funds, affected wallets, or attacker addresses associated with the event.
Security context and recent frontend compromises across the sector
The incident within Trade.xyz’s environment coincides with a series of security alerts issued on October 31 by the cybersecurity firm Blockaid. These warnings pointed out compromises in the user interfaces of at least twelve decentralized finance projects, including Flap, Kintsu, StonkFun, Pickle Finance, Echelon, Origami Finance, and FluxBeam.
Market technical data indicates that several of these websites suffered redirections to malicious pages linked to the wallet drainer kit known as Step Drainer. The Flap team confirmed that a Domain Name System (DNS) hijacking redirected visitors to an unauthorized portal, prompting them to urge users to avoid signing transactions.
For its part, Trade.xyz did not directly link the GitBook anomaly to the Step Drainer campaign, nor did it release a list of fraudulent web addresses.
The protocol operates perpetual contract markets backed by traditional assets via the Hyperliquid network, amassing more than $650 billion in cumulative volume in just over a year of activity, according to figures provided by the platform itself.
Derivatives expansion and integration with Intercontinental Exchange
The technical incident takes place four days after Trade.xyz formalized a strategic alliance with Intercontinental Exchange (ICE), the operator of the New York Stock Exchange. The goal of the agreement is to develop a separate perpetual futures market regulated under United States jurisdiction.
ICE’s October 29 statement notes that implementing the new service will require prior regulatory approvals to offer leverage to retail traders. The planned structure encompasses derivatives on cryptocurrencies, traditional equities, commodities, and foreign exchange, operated under a dedicated clearing house separate from ICE’s institutional division.
The proposed access for U.S. clients will function through registered futures commission merchants, enforcing identity verification and anti-money laundering protocols. The framework agreement does not modify the access restrictions that Trade.xyz’s current markets maintain for United States residents.
On the product side, Trade.xyz added perpetual contracts pegged to the Indian NIFTY 50 index on October 27, 2026, offering up to 20x leverage and settlement in USDC. This contract trades continuously without prior currency conversion or a predetermined expiration date.
The Trade.xyz security team stated that it will proceed with the forensic review of the GitBook documentation and will publish additional technical updates once the access log analysis is completed.
