Copper.co ClearLoop: Custody, Off-Exchange Settlement & API

We design and develop full-cycle blockchain solutions: from smart contract architecture to launching DeFi protocols, NFT marketplaces and crypto exchanges. Security audits, tokenomics, integration with existing infrastructure.
Showing 1 of 1All 1305 services
Copper.co ClearLoop: Custody, Off-Exchange Settlement & API
Medium
~3-5 days
Frequently Asked Questions

Blockchain Development Services

Blockchain Development Stages

Latest works

  • image_website-b2b-advance_0.webp
    B2B ADVANCE company website development
    1349
  • image_web-applications_feedme_466_0.webp
    Development of a web application for FEEDME
    1247
  • image_websites_belfingroup_462_0.webp
    Website development for BELFINGROUP
    949
  • image_ecommerce_furnoro_435_0.webp
    Development of an online store for the company FURNORO
    1183
  • image_logo-advance_0.webp
    B2B Advance company logo design
    642
  • image_crm_enviok_479_0.webp
    Development of a web application for Enviok
    921

The collapse of FTX and other exchanges showed: assets on a trading platform are not your assets. Institutional investors now demand zero counterparty risk. Copper.co solves this with ClearLoop — an off-exchange settlement network where funds are stored in MPC wallets under full client control, and trading happens without transferring assets to the exchange. We have completed 15+ custody integration projects, including ClearLoop for funds with portfolios from $50M.

What Integration Delivers

Without ClearLoop: a trader transfers $10M to Binance—assets are on the exchange. Risk: hack or bankruptcy. With ClearLoop: assets stay in Copper custody; only a credit line is on the exchange. Settlement occurs within ClearLoop several times per day (intraday netting). Result: zero counterparty risk. ClearLoop is 6 times faster than blockchain settlement and saves up to 60% on withdrawal fees compared to standard transfers.

For products: the custody API provides programmatic access to institutional-grade wallets with MPC, a policy engine for multi-level approval, and an audit trail for compliance. All in a single integration. According to Copper reports, clients save up to 60% on fees.

How ClearLoop Works

ClearLoop is a network where each trade is recorded in an off-chain ledger, and final settlement happens internally without blockchain transactions. This means even at massive volumes (typical clients manage portfolios from $10M), gas costs are zero. Per Copper documentation, ClearLoop supports intraday netting with settlement frequencies up to 6 times daily, reducing operational risk.

Copper API: Key Endpoints

Copper provides a REST API plus WebSocket for real-time events. Authentication: API Key + HMAC-SHA256 request signing. Below is a full client example and calls—note error handling and signing.

import crypto from 'crypto';
import axios from 'axios';

class CopperClient {
  private baseUrl = 'https://api.copper.co';

  private signRequest(
    method: string,
    path: string,
    timestamp: number,
    body: string,
  ): string {
    const message = `${timestamp}${method.toUpperCase()}${path}${body}`;
    return crypto
      .createHmac('sha256', process.env.COPPER_API_SECRET!)
      .update(message)
      .digest('hex');
  }

  async request<T>(method: string, path: string, data?: unknown): Promise<T> {
    const timestamp = Date.now();
    const body = data ? JSON.stringify(data) : '';
    const signature = this.signRequest(method, path, timestamp, body);

    const response = await axios({
      method,
      url: `${this.baseUrl}${path}`,
      data: data || undefined,
      headers: {
        'Authorization': `ApiKey ${process.env.COPPER_API_KEY}`,
        'X-Signature': signature,
        'X-Timestamp': timestamp.toString(),
        'Content-Type': 'application/json',
      },
    });
    return response.data;
  }

  // Portfolio & wallets
  async getPortfolios() {
    return this.request('GET', '/platform/portfolios');
  }

  async getWallets(portfolioId: string) {
    return this.request('GET', `/platform/portfolios/${portfolioId}/wallets`);
  }

  async createWallet(portfolioId: string, name: string, currency: string, type: 'hot' | 'cold') {
    return this.request('POST', '/platform/wallets', {
      portfolioId,
      name,
      mainCurrency: currency,
      type,
    });
  }

  // Transactions & approval
  async createTransaction(portfolioId: string, currency: string, amount: string, toAddress: string, network: string, memo?: string) {
    return this.request('POST', '/platform/transactions', {
      type: 'withdrawal',
      portfolioId,
      currency,
      amount,
      toAddress,
      network,
      memo,
    });
  }

  // ClearLoop
  async transferToClearloop(fromPortfolioId: string, toExchangeAccountId: string, currency: string, amount: string) {
    return this.request('POST', '/clearloop/transfers', {
      fromPortfolioId,
      toExchangeAccountId,
      currency,
      amount,
    });
  }

  async getClearloopPositions(exchangeAccountId: string) {
    return this.request('GET', `/clearloop/positions/${exchangeAccountId}`);
  }
}

WebSocket: Real-Time Updates

import WebSocket from 'ws';

const ws = new WebSocket('wss://ws.copper.co/platform');

ws.on('open', () => {
  ws.send(JSON.stringify({
    type: 'auth',
    apiKey: process.env.COPPER_API_KEY,
    signature: generateWsSignature(),
    timestamp: Date.now(),
  }));

  ws.send(JSON.stringify({
    type: 'subscribe',
    channels: ['transactions', 'portfolio_balances'],
    portfolioIds: [portfolioId],
  }));
});

ws.on('message', (data) => {
  const event = JSON.parse(data.toString());
  if (event.type === 'transaction_update') {
    handleTransactionUpdate(event.payload);
  }
  if (event.type === 'balance_update') {
    handleBalanceUpdate(event.payload);
  }
});

Compliance and Reporting

Copper provides audit-ready data: all transactions with timestamps, approver logs, and blockchain confirmations. Exporting transaction history for any period is a single API call. Each record includes initiator, approvers, timestamps, txHash. For regulatory reporting, connect a SIEM system via WebSocket. For an accurate cost and timeline estimate, contact us—we'll audit your infrastructure and propose the optimal solution.

Integration Process: Typical Stages

Stage Duration What Happens
KYB onboarding 2–4 weeks Document submission, company verification, API key issuance
Basic API integration 2–3 weeks SDK development, webhook handling, deposit/withdrawal implementation
ClearLoop integration 2–4 weeks Exchange account setup, off-exchange settlement configuration
Approval workflow 1–2 weeks Policy engine setup, multi-signature approval integration
Compliance reporting 1–2 weeks Transaction export, audit trail, SIEM connection
QA and testing 1–2 weeks Sandbox testing, load testing, security audit

ClearLoop vs Standard Settlement

Parameter ClearLoop Standard Settlement
Counterparty risk Zero (assets in custody) High (assets on exchange)
Settlement speed Intraday netting (up to 6x/day) Depends on blockchain
Transaction cost Minimal (internal netting) Gas + exchange fees
Audit transparency Full audit trail Limited
Exchange support 10+ (Binance, Deribit, Kraken) Single exchange

Common Integration Mistakes

  1. Incorrect HMAC signing order. Timestamp and method must be in exact order. One second off—request rejected.
  2. Ignoring webhooks. Transaction status changes asynchronously—relying only on API response is insufficient. Handle WSS events.
  3. Skipping policy engine setup. Without proper limits and whitelists, transactions may stall in approval.
  4. Starting without KYB. API access is granted only after full verification—beginning integration without KYB is futile.

Case Study: ClearLoop for a Hedge Fund. One of our clients—a hedge fund with $50M monthly volume—faced high withdrawal fees (up to 0.5% on Ethereum). We integrated ClearLoop in 8 weeks, configuring off-exchange settlement with Binance and Deribit. Result: zero counterparty risk, $120K annual savings on fees due to intraday netting. The entire audit trail is automatically exported to their SIEM.

What's Included

  • Integration documentation (architecture, data schemas, sequence diagrams)
  • SDK/adapter source code (TypeScript or Python on request)
  • Access to Copper test sandbox
  • Webhook integration for transaction status updates
  • Load testing of ClearLoop channels
  • One month of post-deployment support

Contact us for a preliminary project assessment. We'll help plan the architecture, prepare documentation, and get through KYB with minimal delays. Get a consultation—our engineers will review your current architecture and provide an integration roadmap.

We develop crypto wallets turnkey — from custodial solutions for fintech to smart contract accounts on EIP-4337. 5+ years in blockchain development, 40+ projects implemented. Let's examine which architecture to choose for your task and why MPC or Account Abstraction solve the private key problem that MetaMask and classic HD wallets could not close.

Why are classic wallets dangerous for business?

A seed phrase in a browser extension is the only way to restore access. For retail users, this is a barrier to entry (lost phrase = lost money). For corporate treasuries, it is incompatible with compliance (KYC/AML, role model, multisignature). Any single key leak compromises all funds. These risks are built into the architecture, not poor UX.

We eliminate them at the protocol level: MPC wallets (key never fully assembled), smart contract wallets (authorization logic in code), hardware HSM for institutional storage. Details below.

What is the real difference between custodial and non-custodial?

Custodial — the provider stores the private key. User authenticates via email/password/OAuth. Recovery is trivial, KYC/AML built-in. For centralized financial applications, often the only regulatory acceptable option. Risk: single point of failure (e.g., Bitfinex hack — $72M, FTX — $600M+ client funds).

Non-custodial — keys are with the user. Provider has no access to funds. Storage responsibility falls on the user. For 99% of people, this model is unworkable without additional protection — hence MPC.

MPC wallets: the key that doesn't exist

Multi-Party Computation (MPC) is a cryptographic protocol that allows multiple parties to jointly sign a transaction without revealing their partial secrets. The private key never exists in its assembled form.

Standard scheme: 2-of-3 MPC between user (share on device), provider server, and backup cloud storage. Transaction is signed by any two of three parties. Lost phone — recovery via server + cloud. Server compromised — attacker holds only one share, signing impossible.

TSS (Threshold Signature Scheme) is a concrete implementation of MPC for ECDSA/EdDSA. Algorithms: GG18, GG20, CGGMP21 (the latter is faster and has better security proofs). Libraries: tss-lib (Go, from Binance), multi-party-sig (Go, from Coinbase), ZenGo-X/multi-party-ecdsa (Rust).

MPC requires no on-chain changes — to the blockchain, the signature looks like a normal single-key signature. This saves gas and keeps the key management scheme confidential (not published in chain) — unlike multisig.

Account Abstraction (EIP-4337): smart contract as wallet

EIP-4337 completely changes the model: instead of EOA (Externally Owned Account), a smart contract Account is used. Authorization logic is in contract code, not in protocol cryptography. This opens up arbitrary signing logic, social recovery, session keys, sponsored transactions, and batch operations.

How the EIP-4337 stack works:

User → UserOperation → Bundler → EntryPoint contract → Account contract
                                          ↑
                                    Paymaster (optional, pays gas)

UserOperation — a new type of object (not an L1 transaction). Bundler collects UserOps from an alternative mempool, packs them into one transaction, and sends to EntryPoint. EntryPoint calls validateUserOp on the Account contract — Account decides if the signature is valid.

Practical capabilities:

Social recovery. The contract stores a list of guardians (other addresses or a service). Lost key — guardians vote for replacement. Argent has used this scheme since 2020.

Session keys. A temporary key with limited rights: interaction only with a specific contract, until a certain date, up to a certain amount. For GameFi and dApps — user does not sign every micro-transaction.

Paymaster. A third-party contract pays gas for the user. Onboarding pattern: user does not hold ETH, gas is sponsored by dApp or taken from ERC-20 tokens.

Implementations: Safe{Core} Protocol, Biconomy SDK (Stackup), ZeroDev (Kernel), Alchemy (Rundler bundler). EntryPoint v0.6/v0.7 is deployed and active on Ethereum mainnet, Polygon, Arbitrum, Optimism. We guarantee compatibility with the latest contract versions.

What is a Hardware Security Module for corporate wallets?

For treasuries and institutional storage: HSM (Hardware Security Module). The key is generated and never leaves the secure chip. Signing happens inside the HSM. Hardware attestation is supported. Solutions used: AWS CloudHSM, Azure Dedicated HSM, Thales Luna, YubiHSM 2 (for small volumes). Integration via PKCS#11 or cloud-specific API.

A combination of HSM + MPC is optimal for institutional use: key shares are stored in HSMs on different servers/jurisdictions, signing via TSS. This ensures compliance with regulatory requirements (e.g., for crypto custodians).

Integration with dApps: WalletConnect and standards

Any wallet must be able to interact with dApps. Standard: WalletConnect v2 (Sign API): QR code or deep link, peer-to-peer encrypted channel via relay server. For browser extensions: EIP-1193 (Ethereum Provider API).

On the frontend, we use wagmi + viem — one interface for MetaMask, WalletConnect, Coinbase Wallet, injected providers. For Account Abstraction: EIP-5792 (wallet capabilities) and EIP-7677 (paymaster service).

Development process

  1. Threat model — who is the user (B2C, B2B, institutional), what operations, what is the acceptable risk model. Architecture depends on this.
  2. Selection and design of key storage scheme — MPC, HSM, multisig, or a combination.
  3. Development of Account contract (if EIP-4337) or integration of MPC library.
  4. Backend — MPC coordination, session management, paymaster service (if needed).
  5. Mobile/browser application — UI with WalletConnect integration, biometrics, QR.
  6. Integration with dApps — EIP-1193, WalletConnect v2.
  7. Audit of contracts and cryptographic implementations — mandatory step. MPC libraries have known vulnerabilities (GG18 susceptible to attack with malicious participant without abort protocol). We use libraries with up-to-date security reviews (CGGMP21). Experience passing audits with Certik, Hacken, Trail of Bits — we have certificates.

What is included in the work (deliverables)

  • Source code of smart contracts (Solidity/Rust) with documentation
  • Backend MPC coordination service (Go or Rust) with API
  • Mobile application (iOS/Android) or browser extension
  • Integration with WalletConnect, Ledger/Trezor (if required)
  • Preparation for security audit (vulnerability report)
  • Administrator and user documentation
  • Access to repository, CI/CD, monitoring (Tenderly, Etherscan API)
  • Training of your team (2-3 sessions)
  • Post-launch support — 1 month

Timeline and cost

Solution type Timeline (working weeks)
Custodial with basic UI 4–8
Non-custodial with MPC integration 8–16
EIP-4337 Account with paymaster 6–12
Institutional (HSM + MPC + compliance) from 16

Cost is calculated individually for your project. We will estimate within one day — contact us by email or Telegram. We provide a guarantee on code and timeline.

Typical mistakes in crypto wallet development (and how to avoid them)

  • Using outdated MPC libraries — GG18 without abort protocol. Choose CGGMP21 or tss-lib with up-to-date audit reports.
  • Tight coupling to a single blockchain — not abstracting for L2/sidechains. Use viem/wagmi for cross-chain.
  • Ignoring MEV attacks — when using multisig without timelocks. Add tx simulation (Tenderly) and sandwiching protection.
  • Lack of fallback recovery mechanism — for Account Abstraction, not setting up social recovery. Include from the first release.

We eliminate these pitfalls at the design stage — for each project, we create a threat model and security checklist.

Need a reliable wallet with no compromises? Get a consultation from our architect — we will analyze your task and propose an architecture with a precise estimate. Leave a request — we will respond within a day.