The questions clients and search engines actually ask about exchanges, tokenization, stablecoins, custody and licensing. Open a card: a straight answer, the expert who owns it, and the artifact where the full method lives.
How much does it cost to build a crypto exchange in 2026?
Honest corridors, not price lists: $50–150K for an MVP on a vendor core, $150–500K for a composable venue you own, $300K–1.5M+ fully custom — plus the market layer for your jurisdiction.
White-label crypto exchange vs custom build — which is right?
The box covers the order book, not your market: local rails, reporting and tax mechanics are custom on every route. The real choice is between three routes — and the composable one keeps your exit open.
Can a white-label exchange list our own token?
Often not on your terms: exchange-as-a-service models bar your token from your own order books, and white-label listing policies vary. It is the first contract clause we check on any shortlist.
Should you build your own matching engine?
Almost never first: proven engines exist as adapters and licences, and the engine is roughly a tenth of the scope. Build it only when derivatives mechanics or exotic market structure demand it.
How long does it take to launch an exchange?
Months to first trade on a vendor core (3–5), near-vendor speed for a composable build (4–7), 9–18 for fully custom — and licence sequencing, not engineering, is often the critical path.
Who keeps the DEX data layer fast?
The indexing layer: subgraphs turning raw chain events into the millisecond answers a trading UI needs. Unglamorous, critical, and a named workstream in our delivery cadence.
Do you even need a blockchain for tokenization?
Sometimes a database wins — and we say so. The structural test: multiple writers, mutual distrust, no acceptable single operator. Fail a leg and the chain is decoration.
How do you tokenize real estate?
Backwards from liquidity: venue and redemption path first, legal wrapper second, mint mechanics last. Equity-replacement framing beats “cheaper than banks” — the economics have to be honest.
What is ERC-3643 and when do you need it?
A permissioned-transfer token standard for regulated distribution: identity-gated transfers baked into the contract. You need it when your investors are KYC-bound and your regulator asks who can hold the asset.
Security token vs utility token — what is the difference?
The regulator’s answer, not the marketer’s: if it represents an investment claim, it is a security wherever you sell it — and the venue, custody and disclosure obligations follow from that.
Will a tokenized asset actually trade?
Tokenization is not minting — it is where the asset trades. Liquidity design — venue, market-makers, redemption — decides whether the token is an instrument or a souvenir.
Does the tokenomics model actually hold?
Stress it before mainnet: emission, sinks, incentive loops and failure modes, modelled the way securities analysts model instruments. Several hundred concepts in, the failure patterns are depressingly regular.
How do you issue a stablecoin — and do you need a licence?
Issuance is a balance-sheet business: reserves, attestation, redemption and — in the EU and US — a licence regime that now has explicit rulebooks. The contract is the easy tenth of the project.
What does MiCA mean for stablecoin issuers?
E-money-token rules with teeth: authorisation, reserve and redemption obligations, and the 2026 transition closed — unlicensed EU operation is over.
Build on existing stablecoin rails or issue your own?
Riding a rail means owning only the integration; issuing means owning the treasury loop and the licence posture. It is a balance-sheet decision, not a technical one.
How does a stablecoin treasury loop work?
Mint against reserves, invest the float under mandate, attest on schedule, redeem on demand — four loops that must reconcile continuously. The engineering is a reconciliation system wearing a token costume.
Where does blockchain actually make money for a bank?
In the boring, expensive, multi-party problems: settlement legs, trapped collateral, reconciliations. We map a desk’s real frictions to 120+ applied use cases — honestly labelled, including where a database wins.
How fast can a bank run a credible blockchain pilot?
Weeks on rented rails with an honest measurement plan. The expensive mistake in 2026 is not a failed pilot — it is two quarters in committee deciding whether to run one.
Tokenized deposits or stablecoins — what should a bank issue?
Defence or offence: a tokenized deposit defends the deposit base inside the regulatory perimeter; a stablecoin competes outside it. The new rulebooks made both paths legible — the choice is strategic.
Permissioned or public chain for a bank build?
Follow the writer set: closed consortium with known members — permissioned; open distribution or composability with public liquidity — public rails with controls. Dogma in either direction is expensive.
What is the EU Digital Product Passport deadline?
The central EU DPP registry went live July 2026 under ESPR, with batteries mandatory from February 2027 and more categories queued. The minimum viable spine: serialized GS1 Digital Link + verifiable credentials + a registry hook.
Can suppliers prove claims without revealing recipes?
Yes — zero-knowledge selective disclosure: prove “20% recycled” to a regulator without revealing the formulation. It is the unlock for supplier adoption, not a research toy.
Does a Digital Product Passport need a blockchain?
Not necessarily — the registry does not require one. A chain layer earns its place where the trail must be tamper-evident across parties who do not trust each other; otherwise it is optional.
MPC vs multisig custody — which is safer?
Different failure modes: MPC removes single-key theft but concentrates vendor risk; multisig is transparent but operationally heavier. Licensed venues increasingly pair MPC with governance controls.
What is proof of reserves and how do you implement it?
A recurring, auditable attestation that assets cover liabilities — a pipeline, not a tweet: address attestation, liability Merkle proofs, third-party review, on a schedule regulators are starting to mandate.
Hot vs cold wallet architecture for an exchange?
A float policy, not a binary: minimal hot float for withdrawals, threshold-triggered cold sweeps, segregation of client and operational funds — the discipline whose absence explains the largest losses.
What did the biggest exchange hacks teach?
That the largest losses were custody-operations failures, not engine failures. Segregation, proof-of-reserves and incident playbooks belong in the architecture review, not the post-mortem.
Which country is fastest to license a crypto exchange?
Depends on ambition: Bahrain is the fast GCC route, El Salvador is quick but scrutinized, VARA is the most active hub, MiCA is slower but passports to 30 states. Sequencing beats picking one.
What does a MiCA CASP authorisation involve?
A full-dress authorisation — governance, capital, safeguarding, conduct — rewarded with passporting across the EEA. The transition ended mid-2026: it is now the licence, not a licence.
VARA licensing in Dubai — what is actually required?
A rulebook-per-activity regime under an active regulator: custody, market conduct and now a derivatives rulebook. The most licence-active hub of 2026 — and custody choice shapes the application.
US crypto licensing — how bad is the patchwork?
Structurally expensive: FinCEN MSB plus state-by-state money-transmitter licences plus the New York BitLicense, with securities/commodities jurisdiction still settling. Budget the patchwork or pick your states.
Can one licence cover all of Europe?
Yes — that is MiCA’s point: one CASP authorisation passports across the EEA, Norway included via the EEA route. The UK is separate and mid-transition to its own full regime.
How do you estimate a blockchain project without a spec?
Against the library: module-level decompositions of comparable builds with min–max hour bands. Discovery maps your requirements onto a proven map — the corridor becomes a number you can defend.
How do you compare crypto vendors properly?
Gap analysis: your target scope, module by module, against each vendor — covered, partial, missing, with a number attached. In one real institutional run the box covered about 11% of the modules.
Fixed price or time-and-materials for a blockchain build?
Phased T&M with gates usually wins: fixed price on an unstable spec buys padding, not certainty. Gates give you the stop-points a fixed bid pretends to.
What actually happens in a discovery phase?
Two-to-three weeks that turn a corridor into a plan: requirements onto module maps, vendors onto gap matrices, assumptions written down, phase gates defined. The deliverable is a number and its defence.
Why interactive workspaces instead of proposals?
Because a tool is evidence and a slide is a claim. Our finders, configurators and anatomy demos let you operate the answer before the first call — three of them are public.