Senticore
A low-latency off-chain order book with on-chain self-custody and cryptographically verifiable settlement.
Choose your path
Not sure which route fits? Start with the five-minute lane chooser.
Orders match off-chain in a deterministic Rust engine built for low latency: a single deterministic primary, not a multi-node consensus you have to trust. Because matching is deterministic, the ledger is byte-for-byte reproducible: anyone can replay the published event log and arrive at the exact same state root committed on-chain. Balances, settlements, and withdrawals are anchored on-chain through periodic state-commitment roots. The result: a venue you do not have to trust - you can verify it.
Live verification update: 2026-09-14. The opt-in Dead Man Switch is live and was verified from outside on 2026-09-13: after heartbeats stop, the covered order is cancelled within the configured timeout. Ed25519 session keys, the private WebSocket, and market resolution cases are live as well. The Oracle V2 collector is running and the first short-dated V2 binary markets have been bound and resolved as internal canaries; existing V1 market terms remain unchanged. See Status for the dated verification scope; historical measurements elsewhere retain their original dates.
Senticore is a capped, whitelisted private beta with live contracts on Arbitrum One and real collateral. This is not public access or a public launch. Dynamic status, market, connectivity, and on-chain sources override copied values.
Why Senticore
Senticore is built so that a trader does not have to give up custody to get a fast order book:
- Execution: a fast off-chain central limit order book, matched by a single deterministic engine.
- Custody: self-custody in the on-chain
MultiCollateralVault; deposits credit the depositing wallet and tokens only ever leave against a Merkle proof. - Solvency: cryptographically provable, with protocol- and account-level solvency proofs exposed as API endpoints.
- Withdrawals: proof-backed and verifiable against roots published on-chain, with a permissionless exit path if checkpoints stop.
Solvency and withdrawals are not promises; they are Merkle proofs against roots published on-chain.
What's Real Today
Senticore is built end-to-end and has run the full lifecycle - deposit, match, settle, proof-backed withdrawal - on real collateral during internal beta. This is not a whitepaper; it is a working system:
- Deterministic matching, sequencing, and risk in Rust, validated by cross-engine differential replay and property tests across supported order types.
- On-chain custody and state-commitment contracts with invariant testing, adversarial signature paths, and settlement round-trip coverage.
- Verifiable by design: protocol and per-account solvency proofs, plus proof-backed withdrawals, exposed as API endpoints. Withdrawal execution ran end-to-end during internal beta and is currently gated in the capped private beta.
- Professional beta interfaces: HTTP REST, public/private WebSocket,
self-service FIX 4.4, FIXP/SBE, and the BSL Business Line API. Market makers should
start with the Live Verified Beta status
and FIX/BSL/FIXP Connectivity Bundle, then
the tested Market Maker Beta Quickstart;
generated
/institutional/*reference routes are not the quoting entry point. - Multiple products on one collateral layer: spot, binary options, and prediction markets.
- Typed SDKs: TypeScript on npm (
@sentico-labs/sdk0.3.0), plus Python and Rust repository previews, and a wallet-native web app. - A sandbox: a separate, fully off-chain deployment with an identical API on all five lanes at the same ports, self-service accounts, mock USDC from a faucet and a venue-operated market maker, so an integration can be built and certified without real collateral. Contracts and endpoints are published in Sandbox (launching — see Status).
Detailed load-test figures are shared with partners on request after the integration path and environment are fixed.
Operational Status
We build first, then open up. The roadmap is deliberately conservative:
| Phase | Status |
|---|---|
| Internal beta with team and close circle, real collateral | Completed |
| Private beta with whitelisted users and capped TVL | Live, capped |
| Public off-chain sandbox | Contracts published; deployment in progress |
| Broader external beta | Planning target; not announced |
| External tier-1 security audit | Q4 2026 to Q1 2027 planned |
| Public mainnet | H1 2027 target, post-audit |
Private-beta interfaces and parameters may change before public release.
Browse the documentation
| Section | What you will find |
|---|---|
| Overview | Product model, architecture, trust model, threat model |
| Trading | Order types, settlement, markets, fees |
| Building | Apps & Brokers and Launchpad scope |
| HFT Market-Maker Guide | Venue location, lanes with measured latency, ack semantics, capacity, inventory, risk controls, recovery, known gaps |
| Live MM Verification | Current live BSL/FIX conformance status and latest observed beta timings |
| FIX/BSL/FIXP Connectivity Bundle | Self-service direct endpoints, FIX/FIXP session data, CompIDs, and BSL route contract |
| Market Maker Beta Quickstart | Tested BSL/FIX entry path for professional clients |
| Integration | Choose an API surface, then follow the relevant implementation path |
| Contracts | Addresses, vault, state commitments, on-chain governance |
| Reference | Glossary, roadmap, status, legal context |