Sealed. Ordered. Settled.

Layer 01 · TEE Confidentiality

Your order leaves the browser already encrypted.

Before a single byte is sent, the app verifies it is talking to genuine sealed hardware — an AWS Nitro Enclave whose identity is signed by the silicon itself and pinned to our release key. Only then is the order sealed to a key that exists nowhere outside that enclave. The load balancer, the host machine, the operator: all of them relay ciphertext they cannot open.

What can't be read can't be traded against.

Nearly every form of MEV — sandwiching, front-running, selective delay — begins with the same advantage: someone sees your order before it executes. On a public mempool your intention is broadcast to the world; on a conventional exchange it's visible to the operator. Here that window never opens. Your order crosses the wire, the load balancer, and the operator's own machines as ciphertext, and becomes readable only inside attested hardware — at the moment it is already being sequenced.

Confidentiality closes the information edge. Fair ordering — one layer down — closes the positional one. Together they reduce to a simple guarantee: your order executes where it arrived.

{ "market": "BTC/USDC",
  "side":   "buy",
  "qty":    "0.250",
  "price":  "97,140.00",
  "tif":    "GTC" }

Layer 02 · Distributed Consensus

The network agrees — every thirty milliseconds.

Decrypted orders are sequenced by Byzantine fault-tolerant consensus. A block closes about every 30 ms, and it exists only once validators holding more than two-thirds of the voting power have signed it. Ordering is by arrival time — refined by deterministic protocol phases (cancels land first, resting quotes before takers), and never by fee. Every validator re-executes every block and must arrive at the same state root, bit for bit. Even the clock is consensus: a proposer that bends its timestamp is voted down.

The enclave keeps secrets. It doesn't get a vote.

Trusted hardware is easy to over-trust. Here, its authority ends at confidentiality: enclaves keep orders unreadable until they are sequenced — and nothing more. Fairness and correctness are enforced the old, hard way: independent machines checking each other's work. Every validator re-executes every block, and a single bit of disagreement in the state root means the block never existed. If every TEE on earth failed tomorrow, no balance could be forged, no trade rewritten, no funds moved. The failure would cost privacy — never correctness.

Layer 03 · Onchain Settlement

Settlement is mathematics, not trust.

Every order is signed on the STARK curve over Poseidon hashes — the native cryptography of Starknet. Funds enter and leave through the on-chain bridge, and keys never leave their owner. What consensus finalizes, the ledger records — and the contracts verify: every change to a user's on-chain state is validated by smart-contract logic and zero-knowledge proofs. A second, independent line of defense, beneath the validators themselves.

Defense in depth: even a rogue network can't reach your funds.

The validator set is layer two of your protection, not the last. On-chain, the smart contracts hold their own line: no state transition is accepted without the proofs that justify it. If every validator conspired tomorrow, the contracts would still refuse to move a single token without its owner's signature, still refuse any update that breaks solvency, and still honor your exit. Trust the network for speed — you don't have to trust it with custody.

order settled · final

Foundation · Open source from day one

Don't take our word for any of this.

Everything above is checkable only because the code is public — from day one, not after the audit, not once it's convenient. The enclave measurement your browser pins is just a hash; it means something because anyone can take the source, run the same reproducible build, and arrive at the same number. The contracts that hold custody are guarantees because anyone can read them. Closed source would collapse all three layers into promises. Open source turns them into checks — attestation without source is a black box with a serial number.

trust math you can read