Archives

UpsideOnly Explained: How a “You Never Lose” Trading Platform Actually Works

What if you could make trading predictions without risking a single dollar of your own money? That’s the bold promise behind UpsideOnly, a new platform from the former CEO of FTX Europe. Patrick Gruhn sold his company to Sam Bankman-Fried’s empire for about $400 million—then bought it back for roughly $32.7 million after FTX collapsed. Now he’s launching an AI-powered platform that claims to eliminate the biggest problem retail traders face: losing their own capital. This guide explains how UpsideOnly works, why its “risk-free” model has raised eyebrows, and what crypto traders should understand before getting involved.

Read time: 8-10 minutes

Understanding the “You Never Lose” Trading Model for Beginners

UpsideOnly is a prediction platform where users make trading calls using the company’s money, not their own, and split the profits 50/50 if they’re right—but lose nothing if they’re wrong. Think of it like this: imagine a friend who says “Give me your stock tip, and if it goes up, we split the profit. If it goes down, I eat the loss.” That’s the basic structure.

Why was this created? The crypto trading industry has a well-known problem: roughly 95% of retail traders lose money on leveraged derivatives platforms. Traditional exchanges profit when users lose, creating a system where the platform’s incentives are misaligned with its customers. Gruhn argues that leverage trading platforms “sell desperate people the dream of escaping financial pressure overnight” and then leave them “structurally doomed against market makers and professional liquidity providers.”

A real-world example: on UpsideOnly, you might predict that Bitcoin will reach $100,000 by next month. You don’t deposit any money. The platform’s AI engine—called BayesShield—evaluates your prediction alongside millions of others, then decides whether to execute the trade using company funds. If your prediction is correct, you get half the profit. If it’s wrong, you simply walk away.

The Technical Details: How UpsideOnly Actually Works

The platform operates under the Nasdaq-listed Perpetuals.com umbrella. Here’s how the system is structured:

1. User Predictions, No Capital Required: Users submit directional calls on assets like Bitcoin, Ethereum, stocks, commodities, or forex. You never deposit or risk your own money. The platform handles all the financial exposure.

2. BayesShield AI Engine: This proprietary system is trained on “more than 22 billion retail trades.” It combines historical trading data with real-time crowd signals to identify which user predictions have the highest probability of success.

3. Company-Funded Execution: Perpetuals trades exclusively with its own capital. If the AI decides a prediction has merit, the company executes the trade. If the trade wins, users whose predictions contributed share 50% of the profits. If it loses, the company absorbs the loss.

4. Human-Machine Division of Labor: Gruhn argues that “humans are actually much better at identifying entry points than exit points, which is where AI takes over.” The idea is that humans spot opportunities, while AI handles timing and risk management, solving the common trader problem of “locking in tiny wins but refusing to accept losses until they get wiped out.”

Why this structure matters: The platform claims to flip the traditional exchange model on its head. Instead of profiting from user losses, UpsideOnly aims to profit from user insights—and only when those insights are correct. The company bears all the downside risk.

Current Market Context: Why This Matters Now

The launch comes at a time when trust in crypto exchanges is at a historic low. The collapse of FTX in November 2022 wiped out billions in user funds and exposed widespread mismanagement and alleged fraud. Regulators worldwide have since cracked down on leveraged trading platforms, with the EU’s Markets in Crypto-Assets (MiCA) regulation imposing stricter capital requirements and investor protections.

Gruhn’s personal history adds significant context. Court filings describe FTX’s purchase of his company as part of a roughly $376 million spending spree to secure a European license. After FTX’s bankruptcy, the estate sued to claw back hundreds of millions from various parties. The February 2024 settlement allowed Gruhn and co-founder Robin Matzke to repurchase FTX Europe’s assets for $32.7 million—a fraction of the original sale price.

As of 2025, the crypto derivatives market continues to grow, with daily trading volumes often exceeding $100 billion. However, retail traders remain vulnerable. Gruhn’s interview with Mario Nawfal highlighted that “casinos actually give people far better odds than crypto leverage trading platforms,” a claim that resonates with many who have experienced the volatility and structural disadvantages of margin trading.

Competitive Landscape: How UpsideOnly Compares

Feature	UpsideOnly	Traditional Crypto Exchanges (e.g., Binance, Bybit)	Prediction Markets (e.g., Polymarket)
User Capital at Risk	None. Company funds all trades.	Yes. Users deposit and risk their own money.	Yes. Users wager cryptocurrency on outcomes.
Revenue Model	50/50 profit split on winning predictions	Trading fees, spreads, and liquidation fees	Platform fees on winning bets
AI Integration	BayesShield trained on 22 billion trades	Varies. Some use AI for risk management, not prediction.	Minimal. Primarily user-driven markets.
Target Audience	Casual traders seeking “risk-free” participation	Active traders comfortable with leverage and risk	Speculators betting on news events and outcomes
Key Risk	Company solvency. If trading losses accumulate, the platform may fail.	User losses from leverage, liquidation, or platform hacks	Market manipulation, smart contract bugs, regulatory risks

Why this matters: UpsideOnly’s key differentiator is eliminating user capital risk. However, this comes with a critical trade-off: users must trust that Perpetuals has enough capital and risk management to survive inevitable losing streaks. Unlike decentralized prediction markets where outcomes are enforced by smart contracts, UpsideOnly relies on a centralized company’s balance sheet.

Practical Applications: Real-World Use Cases

Who might benefit from a platform like UpsideOnly—and how would they use it?

• Learning Market Analysis Without Financial Risk: New traders can practice making directional calls and see how their predictions perform without the fear of losing money. This turns the platform into a live educational tool.
• Supplementing Passive Income: Experienced traders who can identify market movements but lack capital to trade large positions can earn profit shares by contributing their insights to the AI engine.
• Testing Trading Strategies: Users can experiment with different approaches (e.g., momentum trading, mean reversion) and get real-time feedback on success rates, using the AI’s execution as a proxy for their skill.
• Crowdsourced Market Intelligence: The platform aggregates millions of predictions, potentially offering a unique real-time sentiment indicator that reflects not just what people say, but what they bet on—with their predictions, not their money.

Who benefits most: Beginners who want to learn by doing, and experienced traders who want to monetize their insights without committing capital.

Risk Analysis: Expert Perspective

While UpsideOnly’s “you never lose” pitch sounds revolutionary, several critical risks deserve attention:

Primary Risks:

1. Model Risk: The BayesShield AI is trained on 22 billion retail trades—but retail traders, as a group, have a terrible track record. Training an AI to learn from losing traders could amplify bad patterns rather than correct them.

2. Capital Sustainability: The company absorbs all losses. What happens during a prolonged losing streak? If the AI gets it wrong repeatedly, Perpetuals’ capital could be depleted. At that point, the platform might be forced to change its rules, halt withdrawals, or shut down entirely.

3. Regulatory Uncertainty: The platform’s “company capital” model sits in a gray area. Regulators may view it as a form of gambling, a securities offering, or an unlicensed investment product. Perpetuals’ own disclaimer acknowledges concerns about regulatory treatment.

4. Concentration of Risk: Unlike decentralized platforms where risk is distributed across users, UpsideOnly concentrates all trading risk on a single entity. If Perpetuals faces a liquidity crisis—similar to what happened to FTX—users have no claim on underlying assets because they never deposited any.

Historical Precedent: The crypto industry is filled with platforms that promised users safety only to fail during extreme market events. The 2022 collapse showed that even the largest exchanges could become insolvent if they mismanaged risk. A platform that deliberately takes on losses is essentially running a sophisticated hedge fund—and funds can fail.
Expert Perspective: Gruhn’s critique of traditional trading platforms is valid: most retail traders lose money on leverage. However, UpsideOnly’s solution—using AI to underwrite those same losing patterns—may simply be betting that the AI can outperform the crowd. As one analyst put it, the platform doesn’t abolish the house; it “moves it off-screen, asking traders to trust a balance sheet, an AI stack, and a risk committee.”
Mitigation Strategies:

• Start small and observe the platform’s performance over several months before committing significant prediction volume.
• Diversify your insights across different assets and timeframes to reduce correlation with the AI’s blind spots.
• Maintain skepticism about any platform that claims to have eliminated risk. Risk doesn’t disappear—it shifts to someone else.

Future Outlook: What’s Next

UpsideOnly is still in its early stages, and its long-term viability depends on several factors:

1. Proof of Concept: The platform needs to demonstrate that its AI can generate consistent positive returns over multiple market cycles—not just in favorable conditions. A severe market downturn or a prolonged bear market will be the true test.

2. Regulatory Clarity: As European regulators implement MiCA, Perpetuals will need to navigate licensing requirements. The platform’s “risk-free” marketing may attract scrutiny, particularly if regulators view it as encouraging speculative behavior.

3. Scaling Challenges: Managing losses on millions of user predictions requires massive capital reserves. The company must prove it has the financial backing to survive sustained volatility.

4. Competitive Response: If UpsideOnly proves successful, expect copycats from traditional exchanges and fintech companies. The “company capital” model could become a new competitive battleground.

What to watch: The first time a major market crash occurs, UpsideOnly’s response will reveal its true risk tolerance. If it suspends predictions, changes profit splits, or restricts user activity during a crash, the “you never lose” promise may prove conditional.

Key Takeaways

• UpsideOnly allows users to make trading predictions using company funds, promising 50/50 profit splits on winning trades and zero loss on wrong predictions.
• The platform’s AI, BayesShield, is trained on 22 billion retail trades and aims to combine human pattern recognition with machine-based execution.
• The model shifts risk from users to the company’s balance sheet, meaning the platform’s financial health is the ultimate backstop for its “risk-free” claims.
• Key risks include AI model failure, capital depletion during losing streaks, and regulatory uncertainty in a rapidly evolving compliance landscape.

Polymarket UMA Exploit: What Happened and Are User Funds Safe?

A suspected exploit on a Polymarket contract on the Polygon network has created confusion and concern in the crypto community. Security researchers reported losses exceeding $520,000, with attackers rapidly draining funds. However, a Polymarket contributor quickly clarified that user funds and market resolutions remain safe. This guide explains the incident, what caused it, and what it means for prediction market users in 2025.

Read time: 8-10 minutes

Understanding Smart Contract Exploits for Beginners

A smart contract exploit occurs when an attacker finds and uses a weakness in a blockchain’s automated code to steal funds or manipulate outcomes. Think of it like finding a hidden backdoor in a bank’s security system that was never meant to be there.

Smart contracts are self-executing programs that run on blockchains like Polygon or Ethereum. They automatically execute agreements when conditions are met—no middleman required. But like any software, they can contain bugs or vulnerabilities.

Why do these exploits happen? The fundamental challenge is that blockchain code is public and immutable. Once deployed, it cannot be easily changed. This transparency is great for trust but also means attackers can study the code for weaknesses. The rise of decentralized finance (DeFi) has made smart contracts prime targets, with hundreds of millions of dollars stolen in 2024 alone.

A real-world crypto example is the 2024 KyberSwap exploit, where a sophisticated attacker manipulated contract logic to drain $50 million from liquidity pools. Most major DeFi protocols have experienced some form of security incident.

The Technical Details: How This Polymarket Incident Unfolded

The Polymarket UMA CTF Adapter contract on Polygon was the focus of a suspected exploit flagged by onchain analyst ZachXBT. Here’s what security researchers found:

1. Initial Detection: ZachXBT alerted the community that the Polymarket UMA CTF Adapter contract had “potentially been exploited,” with losses above $520,000. The attacker’s wallet address was identified as `0x8F98075db5d6C620e8D420A8c516E2F2059d9B91`.

2. Funds Drained: Security firm PeckShield confirmed two addresses—`0x871D…9082` and `0xf61e…4805`—were drained of approximately $520,000. Some stolen funds were already deposited into ChangeNOW, a cryptocurrency exchange.

3. Rapid Withdrawal Pattern: Blockchain analytics firm Bubblemaps warned that attackers were removing 5,000 POL (Polygon’s native token) every 30 seconds, with losses quickly rising to an estimated $600,000.

4. PolygonScan Verification: Data from PolygonScan showed repeated outgoing transfers of 5,000 POL from the drained address to a wallet tagged as Polymarket’s UMA CTF Adapter Admin, matching the pattern Bubblemaps identified.

Why this structure matters for you: Understanding the attack pattern helps users recognize warning signs. Rapid, automated withdrawals from a contract are a red flag that something is wrong. The real-time monitoring by security firms like PeckShield and Bubblemaps demonstrates why onchain analytics are essential for crypto safety.

Current Market Context: Why This Matters Now

The Polymarket incident arrives as prediction markets have exploded in popularity. According to recent reports, platforms like Polymarket and Kalshi have grown into one of finance’s fastest-moving sectors, with billions of dollars wagered on events from elections to sports and economic outcomes.

As of May 2026, Polymarket processes millions of dollars in weekly trading volume. The platform’s reliance on the UMA (Universal Market Access) protocol for dispute resolution makes this contract vulnerability particularly significant. The UMA CTF Adapter is responsible for connecting markets to UMA’s Optimistic Oracle, which provides resolution data for prediction markets.

This incident also comes amid increased regulatory scrutiny. Wisconsin recently filed a lawsuit against Polymarket, Kalshi, Coinbase, Robinhood, and entities linked to Crypto.com, arguing that some prediction markets function as unlicensed gambling products. A technical security incident adds another layer of concern for users and regulators alike.

The broader DeFi security landscape is concerning. Recent weeks saw Echo Protocol pause its bridge after unauthorized eBTC minting, while the Verus Ethereum bridge faced an $11.5 million forged-transfer attack (though the exploiter later returned 4,052 ETH).

Competitive Landscape: How Polymarket Compares

Polymarket operates in a growing prediction market ecosystem. Here’s how it compares to key competitors:

Feature	Polymarket	Kalshi	Augur
Blockchain	Polygon	None (regulated CFTC)	Ethereum
Key Technology	UMA for dispute resolution	Centralized order book	REP token for reporting
Regulatory Status	Unregulated (US scrutiny)	CFTC-regulated	Unregulated
User Experience	Web3 wallet required	Traditional fiat on-ramp	Complex metamask flow
Security History	Multiple UMA-related controversies	No major exploits	Less active user base
Market Types	Crypto-native, politics, sports	US-focused (elections, economics)	Crypto-native, niche events

Why this matters: Polymarket’s decentralized, crypto-native approach offers global access and censorship resistance but introduces smart contract risks. Kalshi’s regulated model provides legal clarity but limits market types and requires KYC. Augur, while pioneering, failed to achieve meaningful adoption due to complexity and liquidity issues.

Practical Applications: Real-World Use Cases for Prediction Markets

Despite security concerns, prediction markets serve valuable functions in the crypto ecosystem:

• Hedging Uncertainty: Users can hedge real-world risks by betting on political outcomes, economic events, or regulatory decisions. A crypto miner might bet against a bill that could ban mining.
• Information Aggregation: Prediction markets often forecast events more accurately than polls or experts. The “wisdom of the crowd” principle makes them powerful forecasting tools.
• Speculation: Traders can profit from accurately predicting outcomes, similar to sports betting but with broader event types.
• Testing Beliefs: Users can put money behind their convictions, creating accountability for their predictions about politics, technology, or economics.

Risk Analysis: Expert Perspective

Primary Risks:

1. Smart Contract Risk: As this incident shows, vulnerable contracts can lead to fund loss. Even audited code may contain undiscovered bugs.

2. Private Key Compromise: Polymarket contributor Shantikiran Chanal stated the exploit stemmed from “a private key compromise of a wallet used for internal operations, not contracts or core infrastructure.” This highlights how internal security practices can create vulnerabilities.

3. Regulatory Risk: US authorities increasingly view prediction markets as unlicensed gambling, creating potential legal exposure for users.

4. Resolution Manipulation: Earlier reports noted that a large UMA whale allegedly influenced a Polymarket market outcome, raising questions about oracle voting power.

Historical Precedent: This isn’t Polymarket’s first controversy. Earlier UMA-related incidents raised questions about market resolution trust. The platform has faced repeated questions about its regulatory compliance and market integrity.
Mitigation Strategies:

• Use hardware wallets and strong key management practices
• Research platforms’ security history and audit records
• Only risk funds you can afford to lose
• Monitor official communication channels for alerts

Expert Consensus: The immediate situation appears contained to internal operations, not core smart contracts. However, the incident reinforces that no DeFi platform is immune to security events. Users should always practice good security hygiene.

Beginner’s Corner: Quick Start Guide to Protecting Your Crypto

If you use DeFi platforms, here’s how to stay safer:

Step 1: Use a hardware wallet like Ledger or Trezor for significant holdings. Never store large amounts on exchange wallets or hot wallets.
Step 2: Before using any DeFi protocol, check its security history on platforms like DeFiLlama or Rekt.news for past exploits.
Step 3: Monitor official social media channels and Discord servers for security announcements. Follow reputable onchain analysts like ZachXBT.
Step 4: Never share your private keys or seed phrase with anyone. No legitimate platform will ever ask for them.
Step 5: Consider using separate wallets for different activities—one for daily DeFi interactions and another for long-term storage.
Common mistakes to avoid: Clicking links from unknown sources, approving unlimited token allowances for contracts, and ignoring security warnings from blockchain explorers.

Future Outlook: What’s Next for Polymarket

Following this incident, several developments are expected:

1. Improved Security Audits: Polymarket will likely accelerate security reviews of all contracts and internal wallet management practices.

2. Community Trust Rebuilding: The platform must transparently communicate about the incident and its resolution to maintain user confidence.

3. Regulatory Implications: Regulators may use this incident to argue that prediction markets require stronger oversight and security standards.

4. DeFi Security Evolution: Expect more platforms to implement real-time monitoring systems and automated pause mechanisms for suspicious activities.

The suspected exploit highlights the tension between decentralization and security. While Polymarket’s team acted quickly to reassure users that funds were safe, the incident demonstrates that even established platforms face ongoing security challenges.

Key Takeaways

• User funds and market resolutions on Polymarket remain safe following a suspected exploit limited to internal operations, not core smart contracts.
• The exploit involved the UMA CTF Adapter contract on Polygon, with attackers draining over $520,000 by compromising a private key used for internal operations.
• Security researchers tracked rapid fund movement of 5,000 POL every 30 seconds, demonstrating the importance of onchain monitoring.
• Prediction markets face ongoing security and regulatory risks, even as they grow in popularity and market influence.

---

,

“datePublished”: “2026-05-22T06:02:10.564-04:00”,

“dateModified”: “2026-05-22T06:02:10.564-04:00”,

“mainEntity”: {

“@type”: “Thing”,

“name”: “Polymarket UMA Exploit”

}

}