The matching engine is the product
An exchange lives or dies on its order matching engine. Ask the vendor about throughput, latency, how orders are persisted, and how the engine recovers after a crash without losing or duplicating a trade. A team that has only wrapped an open-source template will struggle once real volume arrives.
Ask to see load-test results and the design for the order types you need, such as limit, market and stop orders.
Custody and wallet architecture
The wallet layer holds user funds, so it is the largest security risk. A strong design separates hot wallets for daily withdrawals from cold or MPC-secured storage for the balance, with withdrawal limits, approval workflows and monitoring.
Ask how keys are generated and stored, who can approve a large withdrawal, and how the system detects an abnormal outflow.
Liquidity, KYC and compliance
A new exchange with an empty order book has no value. Discuss liquidity options early, including market-maker integrations and shared liquidity providers. Plan KYC, AML screening and transaction monitoring from the start, because retrofitting them is expensive.
The licensing path depends on your jurisdictions; your counsel decides that, and your development partner should make the controls enforceable in code.
Audits and testing
Insist on an external security audit of smart contracts, APIs and infrastructure before launch, and a bug-bounty or staged rollout afterwards. Ask for the vendor’s own testing practice too: unit tests on the ledger, simulated attacks and failure drills.
A scorecard for exchange vendors
Score vendors on matching engine depth, wallet and custody design, liquidity options, compliance tooling, security audit practice and operations tooling such as admin, support and reporting. Matching engine and custody should carry the most weight, since they are the hardest parts to change after launch.
Crypto exchange vendor comparison at a glance
| What to check | A strong answer | A warning sign |
|---|---|---|
| Matching engine | Persisted order state, recovery after a crash, load-test results | Wrapper around an open-source template |
| Custody | Tiered hot, warm and cold storage with approval workflows | All funds in one hot wallet |
| Liquidity | Market-maker or shared-liquidity plan before launch | Assumes users will arrive on their own |
| Compliance tooling | KYC, screening and transaction monitoring built in | Offered later as an add-on |
| Audit | Independent audit of contracts, APIs and infrastructure | Audit skipped to save time |
Questions to ask in the first call
Ask how the engine keeps order state after a crash, how funds move between hot and cold storage, and how a suspicious withdrawal is stopped. Ask which assets and networks they have integrated and how deposit confirmations are decided per chain.
Ask what they will not build for you in the first release. A vendor who proposes a phased launch with a clear minimum product is thinking about your runway as well as theirs.
- Ask how the engine keeps order state after a crash.
- Ask how funds move between hot and cold storage and who approves it.
- Ask how a suspicious withdrawal is stopped.
- Ask which chains they have integrated and how confirmations are decided.
- Ask what they will not build in the first release.
Phases of an exchange build
A typical build runs through requirements and architecture, the core matching and ledger services, wallet and custody integration, web and mobile front ends, admin and compliance tooling, security audit and load testing, and a staged launch with limits. Load and failure testing deserve their own phase, not a final afternoon.
Mistakes buyers make
Frequent mistakes include buying a white-label script without checking its architecture, launching without a liquidity plan, skipping an external audit to save time, and ignoring operations such as reconciliation and customer support tooling. Fixing any of these after launch is far more expensive than planning for them.
How NNT Software approaches exchange and wallet builds
We design exchange platforms with a recoverable matching engine, a double-entry ledger, tiered custody with approval workflows and monitoring, and screening hooks for KYC and AML. We respond to every enquiry within 10 minutes, set up a meeting to understand your requirements, share a demo within 24 hours of that meeting, and then send a proposal that matches your budget.
We start with a minimum product, such as spot trading with controlled withdrawals, and add features after launch. Releases pass quality gates, delivery ends with a documented handover, and the code and wallets stay under your control.
Example scenario: a spot exchange for one region
Illustrative scenario, not a client case: a team wants to launch a regulated spot exchange with ten trading pairs for one region. The sensible first step is deciding what must exist on day one: order matching, a ledger, KYC, hot and cold wallet separation and withdrawal approvals. Charts, advanced order types and a mobile app can follow.
The build is load-tested with replayed order traffic before any customer funds are held, withdrawals above a set size need a second approval, and the matching engine can rebuild its state from the event log after a crash. Listing more assets and adding liquidity partners comes only after the first pairs trade reliably.
Red flags to walk away from
Be careful with a vendor who sells a white-label exchange script as a finished product without explaining its limits, or who cannot say how deposits are confirmed on each chain.
Another warning sign is a launch plan with no liquidity strategy and no operations tooling. An exchange without reconciliation, support tools and withdrawal controls becomes expensive to run long before it becomes profitable.
Cost and timeline
Costs vary widely with scope: a spot exchange with a web app is far smaller than a derivatives platform with mobile apps. NNT Software’s rates are US$15–40 per hour, with the final estimate set after requirements are confirmed and based on your budget and the team size. Agree a phased plan so you can launch a core product first and add features once it is live.
Sources and further reading
More buyer guides
How NNT Software delivers projects like this
- Discovery — workshops, requirements and a written scope with a fixed estimate within days.
- Design — user flows, a clickable prototype and an architecture review before coding starts.
- Build — two-week sprints with demos, a shared backlog and code in your own repository.
- Test — dedicated QA, automated regression tests, performance and security checks.
- Launch — zero-downtime deployment, monitoring and user training.
- Support — SLA-backed maintenance and continuous improvement after go-live.