Why this dispatch exists
This is the ninth Phase 3 dispatch and the third in the per-pillar deep-dive sub-series. The earlier per-pillar dispatches covered payments and the EU banking regime and RegTech post-MiCAR. This one covers Chapter X crypto exchange white-label and traces what has happened in the segment since the Phase 2 research window.
Two distinct procurement signals warrant coverage. First, the Phase 2 chapter surfaced two LIMITED verdicts (Match-Trade Crypto and ETNA Software) that the CASP archetype dispatch carried through as procurement disqualifiers for MiCAR-authorised operators; the broader procurement-stage implications of those LIMITED verdicts deserve explicit framing. Second, the institutional crypto-native segment has continued consolidating through 2025-2026 with M&A activity and product positioning shifts that reshape the procurement landscape for both VARA-authorised UAE operators and MiCAR-authorised EU CASPs.
The dispatch covers the procurement landscape state in 2026, the Phase 2 LIMITED verdicts revisited, the broker-stack-bundled platform layer maturity (B2BX, Soft-FX crypto, Quadcode crypto, Match-Trade crypto, Leverate crypto), the institutional crypto-native segment activity (ChainUp, AlphaPoint), the high-throughput matching engine layer (Modulus, ETNA), the open-source platforms (HollaEx, Openware), the custody-WL procurement boundary that the CASP dispatch identified, three procurement implications for 2026 operators, and the per-pillar roadmap update.
The crypto exchange WL procurement landscape state in 2026
Four developments shape the segment through 2026:
MiCAR full force from December 2024 reshaping the WL vendor positioning. MiCAR Article 60’s eight regulated service categories shape what a CASP can do; the WL vendor must support the specific category set the operator is authorised for. Vendors whose product set was originally calibrated for unregulated or lightly-regulated VASP operations have had to extend product capability to support the MiCAR authorisation category structure. Some vendors completed the extension cleanly through 2025; others remain in transition. The procurement-relevant 2026 question is which vendors have demonstrably MiCAR-aligned product offerings versus which remain in transitional positioning.
VARA full rulebook from February 2023 plus continuing licence category activation. Dubai’s Virtual Assets Regulatory Authority continued activating licence categories through 2024-2025, with the broker-dealer, exchange, lending, and custody licence categories now operationally active. WL vendors serving VARA-authorised operators face equivalent product capability extension as for MiCAR; the VARA framework is more granular per category than MiCAR but the underlying procurement question is similar.
The custody-WL boundary becoming the most consequential decision. As the CASP archetype dispatch and the RegTech post-MiCAR dispatch both surfaced, custody is now a distinct regulated procurement decision separate from the trading venue procurement. The Phase 2 chapter treated custody as a venue feature; the operational reality has shifted such that custody and the WL venue are increasingly procured separately even when operators use bundled offerings. The procurement-relevant 2026 question is whether the operator’s WL vendor’s bundled custody capability meets MiCAR Article 75 or VARA-equivalent requirements, or whether external custody (Fireblocks, Komainu, BitGo Trust, Anchorage Digital, Hex Trust, Copper) is appropriate.
Institutional crypto-native segment consolidation through 2025-2026. ChainUp and AlphaPoint have continued evolving through M&A activity, product positioning shifts, and client segment refinement. The institutional crypto-native segment was always smaller than the broker-stack-bundled segment but has been disproportionately active in M&A and partnership announcements through 2025-2026. The procurement-relevant 2026 question is whether the institutional segment remains procurement-appropriate for tier-1 CASPs and VARA operators or whether the broker-stack-bundled segment has matured enough to displace institutional procurement at the upper mid-market scale.
Phase 2 LIMITED verdicts revisited
The Phase 2 chapter surfaced two LIMITED verdicts that the CASP archetype dispatch and the cross-archetype matrix dispatch both carried through. The 2026 status:
Match-Trade Crypto remains LIMITED. The Phase 2 research surfaced that Match-Trade explicitly disclaims crypto services on its public product positioning. Through 2025-2026 the positioning has not materially shifted; Match-Trade’s primary product offering remains CFD-focused with crypto-asset support as a tradeable instrument inside the CFD platform rather than as a regulated crypto trading venue. The LIMITED verdict carries through to 2026 procurement: Match-Trade Crypto is not procurement-eligible for MiCAR CASP authorisation or VARA crypto-asset service licence operations. Operators considering Match-Trader as their primary CFD platform plus a separate crypto exchange WL should procure the crypto venue from a different vendor.
ETNA Software remains LIMITED. The Phase 2 research surfaced zero crypto-asset documentation on ETNA’s public materials. Through 2025-2026 the positioning has not shifted. The LIMITED verdict carries through. Operators considering ETNA for matching engine procurement on the CFD side should not extend the relationship to crypto-asset venue procurement; separate vendor procurement is appropriate.
The LIMITED verdicts in this chapter are structural rather than transitional. Both vendors could in principle extend product capability to meet MiCAR or VARA requirements, but neither has signalled the investment intent through 2025-2026 to do so. The procurement implication is that the LIMITED verdicts should be treated as durable rather than provisional; operators should not anticipate vendor positioning shifts that would change the procurement eligibility.
Broker-stack-bundled platform layer maturity
The broker-stack-bundled segment is the largest and most mature in the Phase 2 chapter. Through 2025-2026 the vendors have continued differentiating along MiCAR-compliance and product-breadth axes:
B2BX (B2Broker) continues as the strongest broker-stack-bundled procurement for operators with combined CFD plus crypto-asset operations. The Phase 2 STRONG PICK verdict for combined CFD and CASP procurement holds. Through 2025-2026 B2BX has continued expanding institutional crypto liquidity (B2Prime crypto), payment integrations (B2BinPay with EU regulated stablecoin issuer relationships), and CRM integration (B2Core’s crypto-native positioning). The procurement-relevant 2026 question for mid-market operators is whether the bundled commercial proposition delivers the integration value that justifies the procurement consolidation versus unbundled best-of-breed across the same product surface.
Soft-FX crypto continues as the strongest specialist alternative for operators wanting depth on the crypto venue specifically rather than as one component of a broader B2Broker stack. The Phase 2 SOLID verdict held; through 2025-2026 the positioning has not materially shifted but Soft-FX has expanded MiCAR-aligned product features (audit trail granularity for Title VI surveillance, segregation reporting for Article 75 custody, Travel Rule integration hooks). Operators evaluating between B2BX and Soft-FX crypto should weight whether the broader B2Broker product stack adjacency is procurement-relevant or whether specialist crypto venue procurement is the better path.
Quadcode crypto continues as the third broker-stack-bundled option with positioning between B2BX and Soft-FX. The Phase 2 SOLID verdict held; Quadcode has continued expanding crypto-asset product capability but has not surfaced as a STRONG PICK for any specific archetype combination. The procurement-relevant 2026 question for operators considering Quadcode is whether the crypto venue product fits cleanly within the broader Quadcode CFD platform that the operator may already be using.
Match-Trade Crypto remains LIMITED as covered above.
Leverate crypto continues with a similar PARTIAL FIT positioning to Phase 2 framing, with Sirix-exclusive lock-in remaining the primary procurement caveat. Operators considering Leverate as their primary CFD stack who want crypto-asset extension face a procurement question about whether to use Leverate crypto (operationally simpler but locked-in) or to procure a separate crypto venue (more flexible but more complex). The 2026 procurement reality is that most regulated CFD plus CASP operators have moved toward separate crypto venue procurement; the Leverate crypto path is increasingly a niche procurement for operators with strong existing Sirix relationships.
Institutional crypto-native segment
The institutional segment has continued activity through 2025-2026 with two vendors carrying the Phase 2 chapter coverage:
ChainUp continues as the strongest institutional crypto-native procurement for operators with regional market-making ambitions or institutional client segments. The Phase 2 STRONG PICK verdict for the CASP archetype held. Through 2025-2026 ChainUp has continued expanding product capability across the institutional exchange, custody, and market-making layers. The procurement-relevant 2026 question for tier-1 operators is whether ChainUp’s institutional positioning delivers procurement value over the broker-stack-bundled alternative; the answer depends on the operator’s institutional client segment depth.
AlphaPoint continues as the second institutional crypto-native option with positioning aligned to operators wanting matching engine depth plus venue operation. The Phase 2 SOLID verdict held; AlphaPoint has continued expanding through 2025-2026 with notable partnership announcements with regional financial institutions. The procurement-relevant 2026 question is whether AlphaPoint’s matching engine depth is procurement-relevant for the operator’s expected venue throughput; for mid-market operators the broker-stack-bundled alternatives are typically sufficient.
The institutional segment is not consolidating into the broker-stack-bundled segment; the two segments serve different procurement profiles. Tier-1 CASPs and VARA operators with institutional client segments continue procuring from ChainUp or AlphaPoint. Mid-market operators continue procuring from B2BX or Soft-FX. The segment boundary remains stable through 2025-2026 even as individual vendor positioning shifts within each segment.
High-throughput matching engine and open-source layers
The remaining Phase 2 chapter coverage continues with limited 2025-2026 shift:
Modulus continues as the high-throughput matching engine option with PARTIAL FIT verdict for the CASP archetype. The Phase 2 framing noted that Modulus’s matching engine depth is procurement-relevant only for operators with explicit throughput requirements that broker-stack-bundled alternatives do not satisfy. Through 2025-2026 the positioning has not materially shifted. Tier-1 operators with quant-driven venue requirements may procure Modulus; mid-market operators continue selecting broker-stack-bundled or institutional crypto-native alternatives.
ETNA Software remains LIMITED as covered above.
HollaEx continues as the leading open-source crypto exchange platform with PARTIAL FIT verdict reflecting the operational reality that open-source procurement requires in-house engineering capability that most regulated CFD plus CASP operators do not maintain. Through 2025-2026 the HollaEx codebase has continued evolving with community contributions and the commercial side has continued offering managed deployment. Operators considering HollaEx procurement should evaluate whether the in-house engineering capability requirement is realistic versus whether managed deployment is procurement-appropriate.
Openware continues with similar PARTIAL FIT positioning to HollaEx. The 2026 procurement reality for both open-source options is that they are niche procurement appropriate only for operators with explicit engineering preferences or specific regulatory positioning advantages from running open-source infrastructure.
The custody-WL procurement boundary
The most consequential 2026 shift in this chapter is structural rather than vendor-specific. The CASP archetype dispatch surfaced custody as a separate regulated procurement decision under MiCAR Article 75; the RegTech post-MiCAR dispatch reinforced this with Travel Rule infrastructure as a separate procurement category. Through 2025-2026 the custody-WL boundary has become the most consequential decision in the segment:
Bundled custody from WL vendors is operationally simpler but procurement-stage diligence is elevated. B2BX’s bundled custody, Soft-FX’s bundled custody, ChainUp’s bundled custody, and AlphaPoint’s bundled custody each present different procurement diligence questions. For MiCAR CASP authorisation, the question is whether the bundled custody meets MiCAR Article 75 segregation requirements, has appropriate insurance, and presents an audit trail that satisfies supervisory expectations. Some bundled offerings meet these requirements cleanly; others require explicit confirmation through procurement-stage briefings.
External custody (Fireblocks, Komainu, BitGo Trust, Anchorage Digital, Hex Trust, Copper) is procurement-relevant for operators wanting separation of duties. The procurement decision shape is that the WL vendor provides the trading venue infrastructure while the external custody vendor provides the asset custody under separate contracts. This produces cleaner separation of duties (which some MiCAR supervisors increasingly expect for tier-1 CASPs) but introduces integration complexity and dual-vendor relationship management.
In-house custody at tier-1 scale remains procurement-relevant for the largest CASPs. Tier-1 CASPs with sufficient internal engineering capability and capital allocation may procure in-house custody alongside the WL trading venue. The procurement decision is increasingly the tier-1-specific choice that the CASP archetype dispatch framed in its tier-1 stack section.
The procurement-relevant 2026 implication is that custody procurement should be explicitly separated from WL procurement at the decision stage even when operators ultimately select bundled offerings. The two procurements have different evaluation criteria, different supervisory expectations, and different risk profiles; treating them as a single procurement obscures the analytical work that should happen.
Three procurement implications for 2026 operators
The above produces three concrete procurement implications:
Implication 1: Treat the LIMITED Phase 2 verdicts (Match-Trade Crypto, ETNA Software) as durable rather than provisional. Neither vendor has signalled investment intent to extend product capability for MiCAR or VARA compliance through 2025-2026. Operators considering either vendor as part of a regulated crypto venue procurement should procure the crypto venue from a different vendor entirely rather than waiting for vendor positioning to shift. The LIMITED verdicts are structural.
Implication 2: Separate custody procurement from WL procurement at the decision stage. The CASP archetype dispatch surfaced custody as a distinct regulated decision; through 2025-2026 the procurement-relevant implication has crystallised. Operators procuring crypto exchange WL in 2026 should explicitly evaluate custody as a separate procurement track even when ultimately selecting bundled offerings. The evaluation criteria, supervisory expectations, and risk profiles differ enough that single-procurement framing obscures the analytical work that should happen.
Implication 3: The broker-stack-bundled versus institutional crypto-native segment boundary is stable and is unlikely to consolidate further. Operators evaluating between the two segments should not anticipate that broker-stack-bundled vendors will displace institutional crypto-native vendors at tier-1 scale, or that institutional crypto-native vendors will displace broker-stack-bundled vendors at mid-market scale. The segments serve different procurement profiles and the boundary will remain stable through 2026-2027 absent material vendor M&A. Procurement decisions should select within the appropriate segment rather than waiting for cross-segment displacement.
What comes next in the per-pillar series
Three per-pillar dispatches shipped (payments, RegTech, crypto exchange WL). The remaining per-pillar candidates with built-up editorial signal:
- KYC and AML segment consolidation. Several pending KYC vendor mergers are expected to close in 2026 H2. A per-pillar dispatch covering the consolidated landscape will be appropriate once the M&A activity has settled.
- Liquidity provider procurement deep dive. Phase 2 covered the chapter at category level; a per-pillar dispatch covering specific LP relationship procurement (tier-1 prime broker access for mid-market operators, regional MENA LP procurement for DMCC operators, crypto LP procurement under MiCAR for CASPs) would deliver operator-actionable depth.
- Risk management procurement deep dive. The Phase 2 chapter framed risk management at category level; the hybrid archetype dispatch surfaced broker-ID-level segmentation as a specific procurement requirement and the CASP archetype dispatch surfaced crypto-asset risk dimensions as structurally different from CFD broker risk. A per-pillar dispatch would extend this framing.
Beyond per-pillar dispatches, the Phase 3 roadmap also includes the M&A and positioning refresh sub-series (the first refresh dispatch covered six events) and new operator archetype dispatches (CASP plus CFD broker hybrid under EU regulation, ADGM FSRA institutional broker, LATAM or APAC CFD broker if procurement-relevant signal accumulates).
If you operate a crypto exchange WL stack and the consolidation framing above does not match your direct procurement reality, that is the editorial signal we are looking for. The corpus improves through ground-truth from operators.