Venue security
Audit, multisig and governance facts for every venue EdgeVault routes through. Solana data streams live from SolGov. Non-Solana venues link out to their own docs. You decide what bar to set.
Phoenix
- Chain
- Solana mainnet
- Order Book
- on-chain order book
- Multisig
- 3 of 9 signers
- Withdrawals
- Settled on Solana mainnet. The program's upgrade authority is a 2-of-3 Squads multisig with no timelock (SolGov); an upgrade could change withdrawal behaviour.
- Operator
- Solana mainnet validator set (~1,900 active validators).
- Recent alert
- 6 open SolGov alerts
Bulk
GUM Perps
Not routed
- Chain
- Jupnet (Jupiter's chain, team validators)
- Order Book
- on-chain order book
- Multisig
- See venue docs
- Withdrawals
- Non-custodial signing (Solana/ETH keys, passkeys or OpenID-ZK) via GUM Universal Accounts, but settlement is on Jupnet, Jupiter's own chain, where Phase 1 validators are all team-operated, so finality and exits currently depend on the operator set. Bridged deposits from Solana/Base/Arbitrum.
- Operator
- Jupiter-operated on-chain CLOB on Jupnet (mainnet beta, unveiled 2026-07-06). 4 markets (BTC/ETH/SOL/JUP), 0.5 bps maker / 3.5 bps taker. Trading is invite-gated private beta; the market-data read tier is public.
Jupiter Perps
GMTrade
Hyperliquid
- Chain
- Hyperliquid L1
- Order Book
- off-chain matching
- Multisig
- See venue docs
- Withdrawals
- Native bridge; withdrawals require 2/3 validator staking-power signatures plus a dispute window. Agent/API keys cannot withdraw; a separate user-wallet signature is required.
- Operator
- Hyperliquid L1 (HyperBFT consensus) validator set. No standalone insurance fund; the HLP / liquidator vault backstops liquidations, with ADL as the final solvency backstop.
Pacifica
Aster
- Chain
- Multi-chain
- Order Book
- off-chain matching
- Multisig
- See venue docs
- Withdrawals
- Aster-run 4-node validator bridge (3/4 to credit a deposit, 2/3 to release a withdrawal); no permissionless forced-exit documented. Multi-chain (BNB / Ethereum / Arbitrum / Solana), USDT-settled, which carries bridge-dependency risk.
- Operator
- Aster-operated matching engine; privileged roles can pause trading, adjust fees/limits, change price sources, and force liquidations. Backed by the Aster Liquidity Pool (ALP); a dedicated insurance fund is NOT documented.
Ondo Perps
Not routed
- Chain
- Off-chain (custodial)
- Order Book
- off-chain matching
- Multisig
- See venue docs
- Withdrawals
- Custodial: funds are deposited to the venue and held off-chain (Enclave matching engine); withdrawals go through the venue. API keys are limited by scope on the server, so a trade-only key cannot withdraw. Operated by a Panama entity.
- Operator
- Ondo-operated off-chain CLOB (Enclave engine). Tokenised-stock collateral; 28 markets including 18 equities plus indices, metals and BTC/ETH, 24/7. Launched 2026-07-07.
TxFlow
Not routed
- Chain
- TxFlow L1 (the venue's own chain)
- Order Book
- on-chain order book
- Multisig
- See venue docs
- Withdrawals
- The published trading SDK describes an agent-wallet model: the user's wallet approves an agent key once, the agent signs trades, and the user's own wallet is required for withdrawals and transfers.
- Operator
- TxFlow-operated CLOB on TxFlow's own L1 (mainnet launched Mar 2026). 160 perp markets (crypto, tokenised equities, commodities) plus 9 USDC spot pairs.
Lighter
Not routed
- Chain
- Ethereum L2
- Order Book
- off-chain matching
- Multisig
- See venue docs
- Withdrawals
- Ethereum zk-rollup: validity proofs verified on L1, data on Ethereum blobs. Withdrawals go to an L1 priority queue; if unprocessed for 14 days, users exit via a "desert mode" ZK proof (escape hatch). The centralised single sequencer can delay/censor short of that window.
- Operator
- Lighter-operated single sequencer (L2BEAT Stage 0). Backed by the Lighter Liquidity Pool (LLP) + ADL as the final solvency backstop.
Variational
Not routed
Binance
Not routed
Bybit
Not routed
OKX
Not routed
Bitstamp
Not routed
- Chain
- Off-chain (custodial)
- Order Book
- off-chain matching
- Multisig
- See venue docs
- Withdrawals
- Centralised custody; withdrawals gated by exchange operator.
- Operator
- Centralised exchange operator, majority-owned by Robinhood since Jun 2025. Regulated as a MiFID II Multilateral Trading Facility (Slovenian licence) as of 9 Apr 2026, and its 20 perpetuals (13 crypto, gold/silver/WTI/Brent, QQQ/EWY equity-ETF perps, EUR) are listed instruments carrying an ISIN each, not bespoke CEX contracts. The BTC perp settles off the Kaiko BTC Benchmark Reference Rate. Longest BTC spot history of any exchange (daily bars back to 2011).
Coinbase
Not routed
- Chain
- Off-chain (custodial)
- Order Book
- off-chain matching
- Multisig
- See venue docs
- Withdrawals
- Centralised custody; withdrawals gated by exchange operator.
- Operator
- Coinbase Inc. (NASDAQ: COIN), US-based, state money-transmitter licensed. Spot depth only; perp/derivatives are a separate product, not covered here. Chart data only.
Kraken
Not routed
- Chain
- Off-chain (custodial)
- Order Book
- off-chain matching
- Multisig
- See venue docs
- Withdrawals
- Centralised custody; withdrawals gated by exchange operator.
- Operator
- Payward Inc, US-founded, multi-jurisdiction licensed exchange. Spot depth only; Kraken Futures is a separate product, not covered here. Chart data only.
Solana multisig and governance state refresh once a minute from SolGov. Curated fields (chain, orderbook type, withdrawal control, operator surface) are sourced from each venue's own documentation and refreshed manually.