Technology

Ondo Perps runs as a decentralized offchain exchange powered by secure enclave technology, a hardware-based trusted execution environment (TEE) that isolates trading operations from external access or tampering, including by the platform itself. The result is execution speed comparable to a centralized exchange, with custody and integrity guarantees that no single party, including the operators, can override.

​

The Three Building Blocks

​

How It Works

​

Secure Enclave Execution

At the core of the architecture is Intel SGX (Software Guard Extensions), which runs the exchange’s critical components, order matching, margin calculations, wallet management, and liquidations, inside an encrypted, hardware-isolated environment. Code running inside the enclave cannot be accessed or modified by:

• The operating system on the host machine.
• The infrastructure provider hosting the machine.
• The exchange operators themselves.

All orders are processed in fully encrypted form. Trade history is only revealed after an order is fully processed, so no actor, including the platform, can observe or interfere with the order flow in transit.

​

Decentralized Attestor Network

Integrity is enforced by a decentralized network of independent third-party attestors. Their job is to continuously verify that the enclave is running the correct, unmodified codebase on genuine SGX-enabled hardware.

• Distributed key shares: Secret key material (including any key authorized to move user funds) is split across the attestor network. No single party can reconstruct the master secret or move funds unilaterally.
• Quorum-gated upgrades: Any modification to the codebase requires an independent majority of attestors to audit and approve before it takes effect.

​

Onchain Custody

Funding and withdrawals move tokens on-chain; the enclave processes trading and balance records.

1. Funding address: A supported transfer to the funding address is reflected in the user’s balance.
2. Operational wallet: Funded tokens are swept into an operational hot wallet.
3. Withdrawals: An approved withdrawal sends the corresponding asset from that wallet to the user’s external wallet.

On-chain funding and withdrawal transactions are publicly observable. Trading and transfers between the user’s Spot and Perps balances are reflected in off-chain records. See Funding Ondo Perps for the supported networks and the funding-address setup.

​

Performance

Because critical operations execute inside the enclave rather than on-chain, the system does not carry the latency overhead typically associated with on-chain settlement. Order routing, margin updates, and liquidations are processed in real time, with execution speed comparable to a centralized exchange, including during periods of high volatility.

​

What This Gives You

Compared with a traditional centralized exchange:

• No operator front-running: Operators cannot read your orders before they match.
• No silent code changes: Codebase upgrades require independent attestor approval.
• Publicly observable funding and withdrawals: Funding and withdrawal transactions are recorded on-chain.

Compared with a fully onchain DEX:

• CEX-level latency: Matching, margin, and liquidations are real-time, not bound by block times.
• Richer order types: Limit, TP/SL, TWAP, reduce-only, and post-only are all native (Order types).
• Lower fees with the same trust: Offchain execution removes per-trade gas costs while preserving on-chain custody.

For users trading tokenized real-world assets, where accurate pricing, fair execution, and reliable collateral handling are foundational, this is the combination the platform is built for.

​

Learn More