A hybrid exchange combines the speed and order types of a centralized venue with the self-custody of a decentralized one. Most designs match orders off-chain and settle trades on-chain.
Vendors use the word "hybrid" loosely, so this page explains the three models sold under that name, the parts of a hybrid crypto exchange that users must trust, and the questions to ask a vendor. For the step-by-step build plan, see the hybrid crypto exchange development guide.
Three models vendors call a hybrid exchange
| Model | How it works | Who holds the funds | Assessment |
|---|---|---|---|
| Off-chain matching, on-chain settlement | Users sign orders. An operator matches them, and a smart contract settles each trade against user balances or vaults. | Users, through smart contracts | The core hybrid design. The operator can censor or reorder orders but cannot take funds if the contracts are sound. |
| Validity rollup exchange | Matching runs off-chain. The operator commits the new state to Ethereum with a validity proof, and users have a forced-withdrawal path. | Users, protected by the proofs | Strong guarantees. dYdX v3 used this model on StarkEx before dYdX moved to its own chain in 2023. |
| Centralized exchange with a DEX tab | A custodial exchange also offers swaps through on-chain liquidity or a connected wallet. | The operator, for most balances | A useful product, but the trust model is a centralized exchange with extra features. |
A platform that holds user deposits in its own wallets carries the custody risk and the legal duties of a centralized exchange, and marketing that calls the platform hybrid does not change those duties. The guide to crypto exchange software covers the centralized exchange model.
Parts of a hybrid exchange
Signed orders
Traders sign orders off-chain, and on EVM chains the order is usually EIP-712 typed data with the pair, side, price, amount, expiry and a nonce. The signature authorizes settlement, but no funds move yet. The 0x protocol used this pattern in its early versions, where relayers kept order books and a contract settled trades.
Cancellation is the difficult part, because an off-chain cancel is only a promise from the operator. Sound designs also let a user cancel on-chain by raising the order nonce, so the contract rejects any older order.
The matching service
An operator runs a standard order book and matching engine, which gives limit orders, low latency and no gas fee for each new order. The matching service is the component users must trust, because the operator can delay or reorder orders, so careful designs publish their sequencing rules and keep logs that others can audit.
Settlement contracts
The operator sends matched trades in batches to a settlement contract, which checks both signatures, the balances and the nonces, and then swaps the assets. In a rollup design, the operator submits a state update with a validity proof instead. In both designs, the contract is the security core and needs a thorough audit.
The escape hatch
A sound hybrid exchange lets users withdraw directly from the contract after a timeout, without help from the operator, which protects users if the operator disappears. Without a forced-withdrawal path, users depend on the operator, and the system works like a custodial one.
Questions to ask a hybrid crypto exchange vendor
- Can a user withdraw while the vendor's servers are offline? Ask the vendor to show this on a testnet.
- Who can upgrade the settlement contracts? Check for a timelock that gives users time to exit before an upgrade takes effect.
- How does the operator sequence orders? Check whether the operator could trade against users with knowledge of incoming orders.
- What does settlement cost per batch on the target chain? Confirm who pays the gas.
- Which audits cover the current version of the settlement contracts?
- How does price data for margin features reach the chain? Ask what happens when the price oracle fails.
Hybrid exchange trade-offs
| Compared with | What a hybrid exchange gains | What it gives up |
|---|---|---|
| Centralized exchange | Lower custody risk and easier proof of solvency | Direct bank payment rails, simple account recovery, and order types that rely on credit inside the exchange |
| AMM DEX | Better limit-order execution for professional traders | Needs market makers and an operator that is always online. A pure decentralized exchange works with no operator. |
| Order book on an app chain | No need to run or join a specialized network | A chain built for trading, such as Hyperliquid's, puts the order book on-chain and removes the trusted matcher |
Cost and effort drivers
- Settlement method. A batch settlement contract costs far less to build and audit than a rollup with validity proofs.
- Number of chains. Each chain needs its own contracts, audits and monitoring.
- Margin or perpetual futures. These products add a risk engine, price oracles and liquidations.
- Licensed components. Licensing a matching engine or proving system reduces build time and adds vendor fees.
As a rough estimate, a spot-only hybrid exchange with contract settlement on one EVM chain takes several months for a team of five to eight engineers. Audits of the settlement contracts are a separate cost. A rollup design usually relies on licensed proving infrastructure, not cryptography built in-house.
If users mainly trade with each other at agreed prices, a P2P exchange with escrow may be simpler than any order book design.
Frequently asked questions
Is a hybrid exchange non-custodial?
A hybrid exchange is non-custodial only if users can always withdraw from the settlement contract without the operator's permission, so check for a forced-withdrawal path and for who controls contract upgrades.
Why not put the whole order book on-chain?
On most general-purpose chains, every new order and every cancel would cost gas and add delay. Fast chains and chains built for trading make an on-chain order book possible, but on other chains off-chain matching is the usual compromise.
Can a hybrid exchange operator front-run its users?
The operator sees orders before they settle, so front-running is technically possible. Published sequencing rules, logs and contract terms reduce the risk but do not remove it.
Does a hybrid crypto exchange support fiat money?
Fiat needs a regulated on-ramp, usually from a third-party provider, because the on-chain settlement layer handles only crypto assets, including stablecoins.