This week on Nexus 07.15.26

A steady week of work across trading, account history, price feeds, and the tools you build with. Here is what shipped.

Merged pull requests by area this window: 47 in orders and accounts, 26 in API and data, 11 in the engine, 5 in oracle, and 5 in frontend

Trading

• Trailing-limit orders. A new order type that tracks the market by a fixed offset, so your limit price follows favorable moves without manual re-pricing.
• Cancel-on-disconnect now persists. Opt in once and your resting orders are automatically cancelled if your connection drops — including on a per-account websocket drop. The preference is saved and survives reconnects.
• Clearer rate-limit responses. Every rate-limit reply now returns a consistent {code, message, tier} shape, and order placement gets its own limit bucket so a burst of other requests no longer slows down getting orders in.

Account history and market data

• Durable, settlement-exact funding history. Funding records are now stored durably and carry the exact fields used at settlement, so your funding history stays complete and reconciles to the cent.
• Authoritative account margin. Margin is now served straight from the engine’s source of truth, and stale open orders are reconciled against it — so what you see matches what the exchange acts on.

Price feeds

• Steadier feeds. Price sources now handle clock skew and reconnect with backoff, and stale ticks are detected and counted rather than trusted — keeping quotes closer to the live market.
• No trading against a dark market. If a market has no live price, orders that would increase risk are rejected rather than filled against a stale value.

Safety and reliability

• Verifiable execution, kept honest under load. The risk engine now reads only committed data, and the write-ahead log is grouped, sealed, and streamed to durable storage — so recovery is exact and every trade stays provable.
• Warm, single-writer engine. The matching engine stays warm and enforces a single writer, and an event-stream watchdog flags staleness early — fewer cold starts, no split-brain writes.

Availability

• US access. Visitors from the United States now see a clear block notice, enforced at the server.

Developer tools and SDKs

• Python. Tier-3 trading parity — order amend plus set leverage and margin — and a typed return value for batch order creation.
• TypeScript. Wallet sign-in (EIP-712 / EIP-191), session tokens, and API-key management; deposit, withdrawal, faucet, and margin-adjust operations; and cursor-based auto-paging helpers for list endpoints.
• CLI. Atomic credential-file writes for safer auth persistence, and runtime routing moved to /api/v1.
• MCP. Tool surface brought in line with the current API spec.

Behind the scenes

Work landed on network isolation and traffic filtering, and on how the platform holds up when more than one copy of a service is running. Groundwork you should not notice, in service of an exchange that behaves the same on a quiet day and a busy one.