This week on Nexus 07.08.26

This edition brings market-wide circuit breakers, more accurate margin and liquidation accounting, and a broad pass on safety and reliability. Here is what changed for traders.

Merged pull requests by area this window: 39 in orders and accounts, 22 in API and data, 6 in the engine, 2 in oracle, and 1 in frontend.

Trading

• Circuit breakers on every market. Each market now enforces price bands and a per-move ceiling, pausing trading when a price moves beyond safe bounds. This protects you from erroneous prints and runaway volatility.
• More accurate margin and liquidations. Realized PnL from liquidation fills now settles directly into collateral, liquidation penalties apply on the live path, and bankruptcy and bad-debt cases settle cleanly. Your margin balance reflects what actually happened.
• Clearer order errors. Trigger and trailing-stop orders now return specific, dedicated error messages when a parameter is invalid, instead of a generic rejection.

Account history and market data

• Look up a single order. You can now fetch an individual order by its ID.
• Complete funding history. Funding settlements are now folded into your funding history, so the record is complete.
• Stable API paths. Public market-data endpoints and authenticated account and trading endpoints are now served under a consistent /api/v1 prefix.

Price feeds

• Safer funding calculations. The funding-rate sampler now skips any sample taken against a non-positive oracle price, keeping funding rates clean when a feed misbehaves.

Safety and reliability

• Authentication on per-account endpoints. Per-account endpoints now require authentication, and order lookups enforce ownership — you can only see your own orders.
• Fail-closed protections. Geo-blocking now fails fast when its database is missing or malformed, and rate limiting fails closed when a client IP cannot be resolved.
• Durable, graceful restarts. Services now drain in-flight work on shutdown, write a final checkpoint, and fsync snapshots to disk, so no state is lost across restarts and deploys.
• Consistent error responses. Access-denied responses now use a single {code, message} format across the API.

Behind the scenes

• Readiness and liveness signals, richer metrics and timing histograms, and new operational dashboards give the team faster insight into the health of the Exchange.
• Expanded automated test coverage, load and stress harnesses, and hardening across deployment and infrastructure.