Peer-to-peer OTC, sealed on SuiWalrusSealTatum

Move size without
tipping your hand.

Post a quote with the price locked. It only opens once the other side puts up escrow — and the moment it does, both sides settle in a single Sui transaction. No desk to trust. Nothing to front-run.

Playable demo
Run a sealed trade yourself
The problem

Right now, a big trade means picking your poison.

Trade it on a DEX

Your order moves the price before it fills, and the mempool sees it coming. Slippage takes the rest.

Call an OTC desk

Now you’re trusting a middleman, paying the spread, and hoping they don’t walk halfway through. Settlement drags for days.

And afterwards?

Good luck proving to your DAO what you actually agreed to. The paper trail sits off-chain — if it exists at all.

How it works

How a sealed trade actually goes.

Same five steps, every time. Pip handles the cryptography — the only thing either side has to trust is the chain.

01

Seal

The maker encrypts the terms locally and posts the ciphertext to Walrus. The blobId is the commitment.

Walrus blobId
02

Discover

Sealed quotes hit the public RFQ board. Takers see only the size band — never the price.

RFQ board
03

Escrow

A taker funds a refundable good-faith deposit. That deposit is what satisfies the Seal policy.

Sui escrow
04

Reveal

Seal auto-releases the key the instant the policy is met. Terms decrypt for both parties — no ghosting.

Seal policy
05

Settle

One atomic PTB moves both legs at once. A receipt is minted — provable on-chain forever.

Atomic PTB
Why it wins

Nobody has built this on Sui.

We went through 599 Sui Overflow projects and the whole Walrus showcase. Plenty use one of these pieces. Not one puts commit-reveal, Seal, Walrus, and atomic settlement together for OTC. So we did.

Commit-revealSeal selective disclosureWalrus commitmentAtomic PTB settle
Threat model

Built for adversaries, not demos.

No ghosting

Seal auto-releases on policy match. A maker can go offline — the trade still completes without them.

No MEV window

Settlement is a single atomic PTB. There’s no public intent to front-run, no gap between legs.

Tamper-proof terms

The blobId is the hash of the ciphertext. Swap the terms and the commitment changes — provably.

Selective disclosure

Seal’s Move policy decides exactly who decrypts, and only after escrow. Eavesdroppers get useless bytes.

The stack

Four tools, doing one job.

Walrus

Content-addressed storage. The ciphertext lives here; its blobId is the cryptographic commitment.

Seal

Threshold encryption with Move-defined access policies. Releases keys only when conditions are met.

Sui PTB

Programmable Transaction Blocks settle both legs of the trade atomically, with sub-3s finality.

Tatum

RPC for every on-chain call and Data API for the live audit dashboard and volume analytics.

Stop trusting the desk.

Seal a quote, fund the escrow, and watch the price crack open on-chain. The whole thing runs in your browser — go break it.