This week on Nexus 07.08.26 — This week on Nexus

Isometric circuit-breakers-and-safety motif

This edition brings market-wide circuit breakers, more accurate margin and liquidation accounting, and a broad pass on safety and reliability. Here is what changed for traders.

Isometric towers of merged pull requests by area this window: 39 in orders and accounts, 22 in API and data, 6 in the engine, 2 in oracle, and 1 in frontend

Trading

Circuit breakers on every market. Each market now enforces price bands and a per-move ceiling, pausing trading when a price moves beyond safe bounds. This protects you from erroneous prints and runaway volatility.
More accurate margin and liquidations. Realized PnL from liquidation fills now settles directly into collateral, liquidation penalties apply on the live path, and bankruptcy and bad-debt cases settle cleanly. Your margin balance reflects what actually happened.
Clearer order errors. Trigger and trailing-stop orders now return specific, dedicated error messages when a parameter is invalid, instead of a generic rejection.

On every market, a price within its bands and per-move ceiling keeps trading normal, while a move beyond those bounds pauses trading to stop an erroneous print

Account history and market data

Look up a single order. You can now fetch an individual order by its ID.
Complete funding history. Funding settlements are now folded into your funding history, so the record is complete.
Stable API paths. Public market-data endpoints and authenticated account and trading endpoints are now served under a consistent /api/v1 prefix.

Price feeds

Safer funding calculations. The funding-rate sampler now skips any sample taken against a non-positive oracle price, keeping funding rates clean when a feed misbehaves.

Safety and reliability

Authentication on per-account endpoints. Per-account endpoints now require authentication, and order lookups enforce ownership — you can only see your own orders.
Fail-closed protections. Geo-blocking now fails fast when its database is missing or malformed, and rate limiting fails closed when a client IP cannot be resolved.
Durable, graceful restarts. Services now drain in-flight work on shutdown, write a final checkpoint, and fsync snapshots to disk, so no state is lost across restarts and deploys.
Consistent error responses. Access-denied responses now use a single {code, message} format across the API.

Behind the scenes

Readiness and liveness signals, richer metrics and timing histograms, and new operational dashboards give the team faster insight into the health of the Exchange.
Expanded automated test coverage, load and stress harnesses, and hardening across deployment and infrastructure.