What is Senticore?
Senticore is a hybrid crypto exchange: orders are matched off-chain by a single deterministic engine, while collateral stays in an on-chain vault and solvency and withdrawals are verifiable against roots published on-chain.
Senticore is operating a capped, whitelisted private beta with live contracts on Arbitrum One and real collateral. It is not a public launch. Future external access dates are planning targets until formally announced.
The problem we solve
A trader should not have to hand custody to an operator, or take that operator's solvency on faith, in order to trade on a fast order book. Senticore is built around four commitments:
- Custody stays in an on-chain vault. Deposits go to
MultiCollateralVaultunder the depositor's own wallet, and tokens only leave against a Merkle proof of a root published on-chain. The operator cannot fabricate balances or invent a payout. - Solvency is verifiable. Protocol- and account-level solvency proofs are API endpoints, anchored to the roots a publisher quorum commits on-chain.
- Matching is single-writer and deterministic. One primary orders and matches every action; the same accepted event log always reproduces the same state, so anyone can replay it and check the committed roots.
- Five order-entry lanes feed one sequencer. HTTP, FIX 4.4, FIXP/SBE, BSL Direct TCP, and BSL HTTPS compact order entry all converge on the same matching and risk path, so order entry, matching, and risk run off-chain while settlement is proven on-chain.
How it works
Senticore is built around three architectural pillars.
Off-chain matching
Users sign trading actions and route them to a Rust matching engine designed for low-latency execution. Matching runs on a single deterministic primary - there is no multi-node consensus to trust and no matching-layer fork risk. Because the same inputs always produce the same result, the off-chain engine is independently auditable: replay the accepted event log and you recompute the market-state root plus the separate financial roots the current checkpoint policy commits on-chain. The engine processes order entry, matching, risk checks, and fill generation before blockchain confirmation is needed.
On-chain commitments
The sequencer periodically publishes checkpoint roots to on-chain contracts. The current root set separates market/order-book state from solvency, exit entitlements, and withdrawal claims; each has its own verifier and proof semantics.
Multi-product collateral
Spot markets, binary options, and prediction markets share a unified collateral model. Users deposit supported assets once and trade across enabled markets subject to risk checks and market rules.
What makes Senticore different
| What it means for users / partners | |
|---|---|
| Verifiable solvency | Protocol- and account-level solvency proofs are first-class API endpoints - not a quarterly PDF. |
| Proof-backed withdrawals | Withdrawals settle against on-chain roots with Merkle proofs, not operator discretion. |
| One collateral layer, many products | Spot, binary options, and prediction markets on a single deposit and risk model. |
| Built for professionals | Five order-entry lanes (HTTP, FIX 4.4, FIXP/SBE, BSL Direct TCP, BSL HTTPS compact), public/private WebSocket streams, Ed25519 session keys, and an opt-in dead-man switch for delegated orders. |
| An ecosystem, not just a venue | Apps and brokers bring their own users and earn a surcharge on the flow; the Launchpad brings new assets to listing. |
| Engineered, then opened | The full deposit-to-withdrawal lifecycle already runs on real collateral in internal beta. |
Architecture at a glance
Who is Sentico Labs
Sentico Labs is an EU-based engineering team building Senticore. We have built the system end-to-end before presenting it as a public product - depth first, marketing second.
What is implemented today
- Matching, sequencing, and risk in Rust, validated with deterministic cross-engine differential replay and nightly property fuzzing across supported order types.
- Custody and state commitment contracts with CI coverage gating, invariant testing, adversarial signature paths, and full-stack settlement round-trip tests.
- Production-shape persistence with health-checked pooling, hash-versioned migrations, active Prometheus metrics, and tested recovery procedures.
- Full lifecycle validation from deposit to match to settle to proof-backed withdrawal during internal beta with real collateral.
- TypeScript SDK published on npm (
@sentico-labs/sdk0.3.0), plus Python and Rust repository previews, with typed HTTP and WebSocket clients. - Web application with wallet integration and trading flows.
- Delegated trading: Ed25519 session keys, an opt-in dead-man switch, and authenticated private WebSocket streams, verified end-to-end in production on 2026-09-13.
- Market resolution: economic-dispute resolution cases for expired prediction markets, with a bonded claim and a 24-hour challenge window.
- Apps & Brokers: any frontend can register as an app, attribute its users' orders and add a surcharge — operator-registered today, see Building.
- Launchpad intake, fee-gated admission, asset registry, orchestration worker, and listing wireup, with production chain automation still release-gated.
What is scheduled before public launch
| Milestone | Target |
|---|---|
| Broader external beta | Planning target; not announced |
| Public TypeScript SDK npm publication | Shipped (@sentico-labs/sdk 0.3.0) |
| External tier-1 security audit | Q4 2026 to Q1 2027 |
| Audit remediation and launch hardening | Q1 2027 |
| Public mainnet | H1 2027 target, post-audit |
Where to go next
- Read the architecture.
- Review the trust model.
- Explore order types.
- Review Building.
- Start integrating through Getting Started.