Crypto Products Where
Mistakes Are Permanent

In most software a bad deploy is a rollback. Here it is somebody else's money, on a public ledger, with no undo. Ten years of building exchanges, wallets and settlement systems is mostly ten years of respecting that.

Crypto work in progress
The Sector

Regulated Money On A Public Ledger

A crypto product is two systems wearing one interface. On one side an exchange or wallet with balances, risk and compliance obligations. On the other, an irreversible chain where a signing error is final and every mistake is publicly readable.

Teams that treat it as a normal web build get the interface right and the custody model wrong. We start at the opposite end — keys, ledger and reconciliation first, product surface after — because that order is the difference between a launch and an incident.

  • Custody and key management designed before the first screen
  • A double-entry internal ledger that reconciles against chain state
  • Compliance built in from scoping, not bolted on before an audit

What We Build In Crypto

The products behind our blockchain, exchange and wallet work.

Exchanges (CEX)

Matching engine, order types, wallet infrastructure, risk controls and the admin tooling an exchange is actually run from.

DEX & DeFi Protocols

AMMs, liquidity pools, staking and lending contracts, with the front end and indexing layer that makes them usable.

Wallets

Custodial and non-custodial wallets — multi-chain, MPC or seed-based — with recovery flows that ordinary users survive.

Crypto Payments

Merchant gateways, invoicing, settlement to fiat and crypto cards, with the reconciliation finance teams need.

Token & Launch Platforms

Token contracts, vesting, launchpads and distribution, written to be audited rather than to be launched fast.

Trading Systems

Trading bots, market making, copy trading and API layers built for latency and for surviving a volatile hour.

What Decides Whether It Holds

None of this is visible in a demo. All of it is visible in an incident.

Custody & key management

Hot, warm and cold separation, MPC or HSM signing, withdrawal policy and quorum — decided before anything is built.

Matching engine performance

Deterministic order matching that keeps its guarantees when volume spikes, with a replayable event log behind it.

KYC, AML & travel rule

Onboarding, screening, sanctions and reporting wired to your jurisdiction rather than a generic template.

Audit-ready contracts

Contracts written for review — tests, invariants and documentation prepared for an external auditor, not after one.

On-chain monitoring

Reorg handling, confirmation policy, stuck transactions and address screening watched continuously, not on request.

Ledger & reconciliation

A double-entry internal ledger reconciled against chain and bank state daily, so a discrepancy is caught the same day.

Chains And Infrastructure We Work On

Chain choice follows liquidity, fees and where your users already are. We build across the major ecosystems and will argue against one if it is wrong for the product.

Talk to our team
Bitcoin & Lightning
Ethereum & L2s
Solana
BNB Chain & Polygon
MPC & HSM custody
KYC & AML providers
Market data & charting
Fiat on/off ramps
Indexers & node infrastructure

How We Deliver

The security work happens first, because retrofitting it is how projects get exploited.

Scope and jurisdiction

Product, custody model and regulatory footprint pinned down together — they constrain each other.

Custody and ledger

Key management and the internal accounting layer built and tested before a single user-facing screen.

Product and chain layer

Trading, contracts or payments built on top, with monitoring and admin tooling delivered alongside, not later.

Audit, then launch

Internal review, external contract audit and a staged rollout with limits that lift as the system proves itself.

Bring Us The Hard Part

Custody model, compliance scope, matching engine, or the contract nobody wants to sign off — those are the conversations we are useful in. Start there.

Talk to our team
FAQs

Crypto Questions

What founders and exchange operators ask us before starting.

It follows your users and your licence. Custodial means you hold keys, which buys a far easier user experience and takes on real security and regulatory obligations. Non-custodial removes that burden and moves the failure mode to lost recovery phrases. Most products end up hybrid, and that is a design decision worth making explicitly.

We write them to be audited and we recommend an external audit before mainnet with real value. Our own review comes first — tests, invariants, documented assumptions — because an audit spent finding basic issues is wasted money.

We are engineers, not your lawyers, and we will say so. What we do is build to the requirements your legal counsel sets — KYC tiers, screening, reporting, record keeping — and make sure the system can produce evidence when a regulator asks.

Confirmation policy per chain and per amount, reorg detection that reverses credited balances safely, and replacement or retry logic for stuck withdrawals — with an operator queue for anything the rules will not decide alone.