Crypto and DeFi software with real controls
On-chain lending and swap consoles, institutional staking dashboards, real-world asset tokenisation, exchange operations, DEX aggregation and on-chain analytics. Built with approvals, limits and logs around every action that moves value.
What crypto and DeFi software has to get right
Crypto software moves value that cannot be pulled back. One wrong admin action, a missed sanctions check or a key held by one person can cost everything, and regulators now expect the same controls as in traditional finance.
The builds below put four-eyes approvals, withdrawal limits and cold storage controls around value, simulate changes before they go on-chain, and screen addresses and investors before they can transact.
Problems we are asked to fix
The problems teams bring to us, the system that fixes each one and the builds that did it.
DeFi operations console
Operators need one console to manage lending, borrowing and swaps across chains.
Lending, borrowing and swaps across chains managed from one console, taken from prototype to production.
Institutional staking dashboard
Validators and stakers lack clear rewards and slashing visibility.
Validators, rewards and slashing risk shown clearly, with approvals on every staking change.
Tokenisation platform
Tokenising real-world assets needs investor checks and transfer rules.
Funds, property and private credit tokenised with investor eligibility and transfer rules enforced on-chain.
Exchange operations console
Exchange ops teams handle withdrawals, KYC and limits in many tools.
Withdrawals, KYC reviews and limits in one console, with four-eyes approvals and cold storage controls.
MiCA-ready operations
Crypto firms must meet MiCA and travel rule obligations.
Investor checks, sanctions screening and an ops console built to the obligations of MiCA and the travel rule.
6 kinds of crypto and DeFi system we have built
Each one links the product build behind it, counted from our case studies.
Crypto and DeFi products we built
ChainFlow - On-Chain Lending, Borrowing and Swap Console from Prototype to Production
Unified supply, borrow, swap, vault staking and portfolio analytics into a single multi-chain console - shipped from clickable AI prototype to production in 8 weeks.
Bollard - Institutional Staking Dashboard for Validators, Rewards and Approvals
Designed and built a clickable client dashboard for a Singapore staking provider serving funds, family offices and corporate treasuries: positions across six chains, daily rewards split by type with SGD and USD values at receipt, unbonding dates per chain, and an approvals inbox that applies each institution's policy before stake moves.
Allmend - Tokenisation Platform for Funds, Property and Private Credit
Designed and built a clickable tokenisation platform for a Vaduz token issuer registered under the TVTG: permissioned tokens for fund units, real estate SPV shares and private credit notes, with every on-chain operation approved under a signing policy, every investor transfer checked before it settles, and the token ledger kept in step with the legal register.
Hakari - Exchange Operations Console with Four-Eyes Approvals and Cold Storage Controls
Designed and built a clickable operations console for an FSA-registered crypto-asset exchange in Tokyo: a dashboard of volume, flows and cold storage ratio, one inbox for every four-eyes request, a withdrawals queue that shows why each transfer was held, and hot and cold wallet controls that keep customer assets above the 95% cold storage floor.
Levada - Non-Custodial DEX Aggregator with Split Routing and an Ops Console
Designed and built a clickable non-custodial DEX aggregator for a Lisbon DeFi team: a swap app that splits trades across liquidity sources and shows every fee before the user signs, gasless limit orders, wallet history with approval revoking, transaction status, and an ops console that watches chain health, quote quality and failure clusters.
Portage - On-chain Analytics with Finality, Methodology and Labels Shown
Designed and built a clickable on-chain analytics product for a Toronto blockchain data company that sells to crypto funds, protocol teams and researchers: protocol and wallet pages over indexed chain data, alerts by email, webhook or Telegram, and a freshness and finality status on every number.
The rules involved
The rules this kind of software usually has to follow. Guidance, not legal advice.
- 01
Crypto licensing
MiCA in the EU, and national regimes elsewhere, such as Dubai's VARA, Singapore's MAS rules and Japan's Payment Services Act.
- 02
Travel rule and AML
Sender and receiver data on transfers, customer due diligence, and suspicious transaction reporting.
- 03
Sanctions
Addresses and counterparties screened against sanctions lists, including OFAC and EU lists.
- 04
Securities rules
Tokens that represent shares, funds or debt can be financial instruments under MiFID II and national securities laws.
- 05
Operational resilience
DORA in the EU covers crypto-asset service providers' ICT risk, incidents and testing.
Framework guides
Rules our crypto and DeFi builds cite most
- GDPR2
- MiCA2
- Travel rule2
- Act on Prevention of Transfer of Criminal Proceeds1
- AIFMD1
- AML/KYC1
- AODA1
- APPI1
- CASL1
Two ways to work with OceanLab
Project build
We design and build the system as one project. It starts with a clickable prototype your team tries before any production code is written. Pay per milestone (outcome-based) or hourly at $30-50/hr, depending on role and seniority.
Embedded engineers
Our engineers join your team on a flexible monthly retainer. Part-time is fine and it runs month to month, with hours that overlap the US, UK and Europe, the Middle East, and Australia and Asia. Outcome-based or $30-50/hr.
Guides and tools
Crypto and DeFi software questions
Do you write smart contracts?
We build the products around them: consoles, approvals, monitoring, indexing and the user apps. Contract changes go through review, simulation and multi-signature approval, and we recommend an independent audit for any contract that holds value.
Is DeFi covered by MiCA?
Services provided in a fully decentralised way without an intermediary are outside MiCA. Front ends, aggregators and teams with admin control over a protocol can still be in scope, so we review it with your legal team.
How do you protect admin actions?
With roles, four-eyes approval, limits, simulation before execution and a full log. No single person can move funds or change a contract alone.
