TradeLayer

Demo

About

Gitbook Link: https://helix-5.gitbook.io/tradelayer PPT Link: https://drive.google.com/file/d/1B3c3GfzceXX_N0WlIDR1r_Dim4UsEvAJ/view?usp=drive_link vimeo Link for hedera video: https://vimeo.com/1226332274?share=copy&fl=sv&fe=ci Institutional money doesn't trade in the open — and on-chain, right now, it has no choice. Every tokenized-stock platform that exists today writes a firm's entire position, order size, and identity onto a public ledger the moment they touch it. Front-running bots watch every mempool. Competitors reconstruct a strategy that took months to build within seconds of the first transaction. The only fix the industry has offered so far is a centralized middleman: hand your order to a company's server, let them execute it off-chain, and take their word that nobody looked. That's not privacy — it's a company asking to be trusted, with no way to check. TradeLayer is the confidential trading desk that lets institutions buy and sell real-world stocks with crypto without any of that exposure. An order is sealed the instant it's created and is only ever opened inside a Chainlink CRE Confidential Workflow — logic that runs inside a hardware-isolated enclave, not on a company server. This is the piece that makes the whole product possible: the enclave is the only place, anywhere in the system, where an order is ever readable, and Chainlink's network releases the keys to unlock it only after proving that enclave hasn't been tampered with. Nobody — not a bot, not a competitor, not even TradeLayer — ever sees the order in the clear. The stocks themselves are issued as real, compliant tokens through Hedera's Asset Tokenization Studio — which is what makes the privacy safe rather than reckless. KYC, wallet freezing, and transfer restrictions are enforced by the token itself, not by a policy someone has to trust. An institution can instantly lock a compromised wallet, guarantee that only verified accounts ever hold its shares, and prove every token is fully backed by a real share at a real broker — all without a single order, quantity, or trade ever being visible on-chain. Compliance and confidentiality aren't in tension here; ATS is what lets us give institutions both at once. That solves the other half of the problem too: institutions sitting on crypto-native capital are today locked out of markets that don't touch crypto at all. TradeLayer is the execution layer that bridges both worlds — real, regulated markets and on-chain liquidity — at blockchain speed, without asking institutions to give up the privacy or compliance they've always required to trade at size. As tokenized real-world assets move from experiment to infrastructure, privacy and enforceable compliance stop being separate asks — an institution needs both to actually show up on-chain. TradeLayer, built on Hedera's tokenization and compliance primitives, is designed to be that missing piece.

How it's made

TradeLayer is a full-stack confidential trading system spanning a Hedera settlement layer, a Chainlink CRE confidential compute layer, and a real brokerage for genuine market execution — wired together so that no single component ever sees a complete, plaintext trade. An order starts life sealed client-side, encrypted before it ever leaves the browser. It's picked up by our backend intake API and dispatched into a Chainlink CRE Confidential Workflow — TypeScript logic running inside an AWS Nitro hardware enclave. Three handlers do the real work there: one opens and validates a sealed order against an institution's encrypted trading rules, one reconciles fills as they come back from the broker, and one runs on a timer to net every institution's fills per stock symbol into a single batched settlement — the mechanism that keeps individual trades from being reconstructable on-chain. Chainlink's Vault DON releases the enclave's decryption keys only after remote attestation, so the keys that matter never exist outside a verified enclave. On the Hedera side, we issue tokenized equities through the Asset Tokenization Studio, so KYC, freezing, and transfer restrictions are enforced by the token itself rather than by our own policy layer. Our custom contracts — OrgWalletRegistry, ComplianceRouter, OrderEscrow, OmnibusVault, and ConfidentialLedger — handle mutual-consent onboarding, per-institution compliance isolation, and an encrypted balance/positions ledger that only the enclave can ever decrypt. Buy-side escrow uses Hedera's native HIP-1215 scheduled transactions so an abandoned order refunds itself automatically, with no off-chain keeper needed. The genuinely hacky part: the enclave never submits directly to Hedera. Instead it signs an EIP-712 struct, and a separate relayer submits that struct on-chain, where the contract recovers the signature. That split means the relayer can censor a transaction but can never read an order or forge a settlement — a small architectural trick that buys a meaningful trust boundary for free. We also built our order-sealing crypto so the exact same routines run in the browser and inside the enclave, letting us test both sides against a shared vector suite instead of trusting two independent implementations to agree.