Lighter: With server breach alone, users find it difficult to withdraw their balances… Analysis of four perpetual

Lighter is the only one of four perpetual futures decentralized exchanges (Lighter, Hyperliquid, Aster, and EdgeX/Variable) whose architecture would prevent an attacker who compromised its operational servers from unilaterally withdrawing user balances, according to an on-chain contract analysis published October 31 by researcher 0xJaetherys. The comparison examined three criteria: where custody of assets sits, who holds withdrawal approval rights, and whether users can directly recover funds if the operating team halts. The analysis was prompted by the Binance hot wallet breach on October 29, though the researcher noted it replicates no actual exploit and is not an audit or vulnerability search—rather, it maps the asset-movement paths contracts permit if operational systems or keys are compromised. The findings matter because server-side compromises, not contract exploits, have become a leading vector for exchange losses, making operational-key containment a key differentiator among perp DEXs. Watch for whether the other three venues—Hyperliquid, Aster, and Variable—publish responses or architectural changes, and for further contract-level comparisons as the sector's custody models come under scrutiny.