Skip to content
Active development. APIs and on-chain layouts may change. Follow progress on GitHub →
M Moby Market
The stack

Seven primitives, one execution surface.

Every Moby Market feature exists because retail-grade DeFi loses money for whales. Each is a real Rust crate in the workspace — not a marketing bullet — and each is auditable under an MIT license.

Trustless OTC block clearing

On-chain escrow accounts let two desks settle nine-figure trades atomically without trusting a centralised matcher and without surrendering custody the way a CEX OTC desk demands. Partial fills, dark-pool mode, and RFQ flows are all native primitives — not bolt-ons. This is how a tokenized-RWA issuer or institution moves a block without printing it to the public price.

TWAP & VWAP with anti-detection randomness

Execution algorithms slice parent orders into hundreds of randomised child orders timed against natural market volume. A tunable randomness factor (0–100) defeats pattern detection by adversarial bots.

Zero-knowledge privacy + selective disclosure

Pedersen-committed amounts, stealth addresses, and a choice of Groth16, PLONK, STARKs, or Bulletproofs. Strategy stays private from competitors while compliance stays provable to auditors via selective disclosure — the exact combination a tokenized-RWA issuer or regulated fund needs to trade on-chain without doxxing positions.

Intent-based solver competition

Post a constrained trading intent — say what you want, not how to route it — and a network of solvers competes via commit-reveal to execute it. On-chain reputation rewards solvers who fill at the tightest price with the least leakage. This is the intent-native, atomically-composable execution model institutional flow is converging on in 2026.

Smart routing across Solana DEXs

Liquidity is aggregated across Serum, Raydium, Orca, Phoenix, Lifinity, and custom AMMs. Up to four-hop routes and dynamic split execution adapt mid-flight to liquidity shifts.

Cross-chain atomic settlement

CrossChainOrder primitives integrate Wormhole and LayerZero so a single order can settle across Solana, Ethereum, Arbitrum, and Base with target sub-five-minute finality. Today the bridge primitives live inside moby-trading; they graduate to their own crate before mainnet.

Formally verified, audit-ready Rust

Anchor 0.29 on solana-program 1.16, with release builds enforcing overflow checks, LTO, and single-codegen-unit determinism. Critical paths target formal verification rather than bug bounties alone.

See how the crates fit together.

A controller program plus five specialised crates. Read the architecture, or see who it's for.