Technology

Ondo Perps runs as a decentralized offchain exchange powered by secure enclave technology, a hardware-based trusted execution environment (TEE) that isolates trading operations from external access or tampering, including by the platform itself. The result is execution speed comparable to a centralized exchange, with custody and integrity guarantees that no single party, including the operators, can override.

​

The Three Building Blocks

​

How It Works

​

Secure Enclave Execution

At the core of the architecture is Intel SGX (Software Guard Extensions), which runs the exchange’s critical components, order matching, margin calculations, wallet management, and liquidations, inside an encrypted, hardware-isolated environment. Code running inside the enclave cannot be accessed or modified by:

• The operating system on the host machine.
• The infrastructure provider hosting the machine.
• The exchange operators themselves.

All orders are processed in fully encrypted form. Trade history is only revealed after an order is fully processed, so no actor, including the platform, can observe or interfere with the order flow in transit.

​

Decentralized Attestor Network

Integrity is enforced by a decentralized network of independent third-party attestors. Their job is to continuously verify that the enclave is running the correct, unmodified codebase on genuine SGX-enabled hardware.

• Distributed key shares: Secret key material (including any key authorized to move user funds) is split across the attestor network. No single party can reconstruct the master secret or move funds unilaterally.
• Quorum-gated upgrades: Any modification to the codebase requires an independent majority of attestors to audit and approve before it takes effect.

​

Onchain Custody

User deposits do not live inside the enclave. The flow is:

1. Per-account deposit address: Each account provisions a permanent onchain deposit address. Any transfer of a supported asset to that address is credited to the account.
2. Sweep into the hot wallet: Deposited funds are swept from deposit addresses into the exchange hot wallet.
3. Withdrawals: When you request a withdrawal, the hot wallet initiates the onchain transfer back to your wallet.

Because every deposit and every withdrawal moves through an onchain transfer, the full flow of funds is publicly observable on the underlying blockchain, no operator-controlled internal sub-ledgers in between. See Funding your account for the supported networks and the deposit-address provisioning flow.

​

Performance

Because critical operations execute inside the enclave rather than on-chain, the system does not carry the latency overhead typically associated with on-chain settlement. Order routing, margin updates, and liquidations are processed in real time, with execution speed comparable to a centralized exchange, including during periods of high volatility.

​

What This Gives You

Compared with a traditional centralized exchange:

• No operator front-running: Operators cannot read your orders before they match.
• No silent code changes: Codebase upgrades require independent attestor approval.
• Publicly observable custody: Every deposit and withdrawal moves through an onchain transfer, no hidden internal sub-ledgers.

Compared with a fully onchain DEX:

• CEX-level latency: Matching, margin, and liquidations are real-time, not bound by block times.
• Richer order types: Limit, TP/SL, TWAP, reduce-only, and post-only are all native (Order types).
• Lower fees with the same trust: Offchain execution removes per-trade gas costs while preserving on-chain custody.

For users trading tokenized real-world assets, where accurate pricing, fair execution, and reliable collateral handling are foundational, this is the combination the platform is built for.

​

Learn More