Matching engine
An order book with price-time priority, limit, market and stop orders, self-trade prevention and deterministic replay from an event log, so any trade can be reconstructed exactly.
Service · Blockchain
Commission us to build a centralised trading venue where your users deposit assets, place orders and withdraw. The engagement covers matching, balances, custody, compliance tooling and liquidity, built so that each part can be audited separately.
Deterministic matching engine
Double-entry internal ledger
Custody split by hot and cold tiers
Deliverables
An order book with price-time priority, limit, market and stop orders, self-trade prevention and deterministic replay from an event log, so any trade can be reconstructed exactly.
Double-entry accounting for every deposit, trade, fee and withdrawal, reconciled continuously against on-chain balances and custody statements.
Deposit address generation, a small hot wallet with withdrawal limits, cold or MPC-based storage for the bulk of funds, and approval workflows for moving between them.
Hooks for your chosen KYC, sanctions screening and blockchain analytics providers, plus Travel Rule messaging where your jurisdiction requires it.
Web and mobile trading screens, plus REST and WebSocket APIs for market makers, with rate limits and API key scopes.
Early decisions
Self-custody with HSM or MPC signing, a regulated third-party custodian, or a mix. This decision affects licensing, insurance options and the size of your operations team.
A single-threaded, in-memory engine per market with an append-only event log is the usual starting point; sharding comes later if volume demands it.
Onboarding market makers through APIs, connecting to external venues for hedging, or both, and how quotes from external sources are kept from distorting your own book.
Which markets you will serve and which regimes apply there shapes onboarding, reporting and product limits. Your legal advisers set this; we build to it.
Velocity limits, address allowlists, cooling-off periods for new addresses and manual review thresholds, balancing user experience against theft risk.
Engagement
With your compliance and legal advisers, we capture the obligations the platform must support, the providers you will use and the operational roles who will run it.
We build the ledger and matching engine first and test them with replayed order flow, checking that balances reconcile after every event and that replays produce identical results.
Deposit detection, confirmation thresholds per asset, withdrawal signing and reconciliation are added chain by chain, starting with the assets you will list at launch.
A closed beta with limited users and assets, penetration testing, surveillance rules switched on, and gradual expansion as reconciliation and support processes prove reliable.
Fit
You have or are pursuing the relevant authorisation and need a platform built around those obligations.
You need control over the ledger, custody and risk rules that packaged exchange software does not expose.
Proof of reserves, financial audits or regulator reviews will require traceable records from day one.
Alternatives
If speed matters more than a bespoke engine, a pre-built exchange script can be adapted to your brand and markets.
Open registerIf users should trade from their own wallets without depositing, an on-chain AMM or order book is the better design.
Open registerWhen trading is a minor feature and holding assets is the main need, a wallet product fits better.
Open registerExchanges rarely fail because orders match slowly. They fail because balances drift from what is actually held, through double-credited deposits, race conditions on withdrawals or fees booked in the wrong place. A double-entry ledger with continuous reconciliation catches drift within minutes.
Keeping most funds cold and only a small float hot limits what a breach can take. The harder part is the process: who approves a top-up from cold storage, how many signers are needed, and what happens when one of them is unreachable at a weekend.
We design those workflows with your operations staff, because they will run them long after launch.
Identity verification, sanctions checks, transaction monitoring and, in many places, Travel Rule data exchange are delivered by specialist providers. Our job is wiring them into onboarding, deposits and withdrawals, and keeping records that let your compliance team answer a regulator’s question quickly.
An engine that processes an ordered log of events can be replayed to show exactly why a trade happened at a given price. That replay is invaluable for customer complaints, surveillance investigations and testing changes before release.
FAQ
No software does that on its own. Compliance depends on your licences, policies and people. We build the tooling your obligations require, such as screening, record keeping and reporting hooks, to a specification agreed with your advisers.
No. We build the APIs and connectors that market makers and external venues use, but liquidity agreements are between you and those firms.
Yes. Many exchanges use a regulated custodian for cold storage and run only a small hot wallet themselves. We integrate their APIs and keep your ledger reconciled with their statements.
The ledger is built so you can produce a liability snapshot and match it against wallet holdings, which is the basis of proof-of-reserves reports. An independent firm should attest to them.
Related services
Penetration testing, access control reviews and incident playbooks for a system that attackers will target constantly.
Open registerGo is a common choice for low-latency engines and chain connectors that must run for months without restarts.
Open registerTrade, ledger and surveillance data pipelines for reporting, reconciliation and regulator requests.
Open registerPrimary sources
Dated official documentation, standards, and research that support the factual claims on this page.
How to read this page
Scope, cost and timeline figures are planning guidance until confirmed in a written proposal. Diagrams and screens are illustrations, not client deliverables, and source-code rights and handover follow the signed agreement. See the delivery process and the full disclaimer.
Next decision
Define outcomes, constraints, evidence, rights and handover before delivery begins.
Commercial rights, repositories, environments, documentation, acceptance and handover remain contract-defined.