Skip to main content
  • Signing verified against the worked example; clock on NTP.
  • Every POST sends an Idempotency-Key and reuses it on retry.
  • KYB approved; live keys stored in a secrets manager, never in code or logs.
  • Webhook receiver verifies signatures on the raw body, deduplicates on id, answers 2xx fast; POST /webhooks/{id}/test passes on the live endpoint.
  • A reconciliation job sums GET /transactions per currency and compares it with GET /wallets.
  • Your order flow handles pending_fulfilment and acts on order.completed, order.failed and order.cancelled rather than polling.
  • Your funding flow handles succeeded, failed and expired, and amount_received differing from amount.
  • If you use direct debit: the mandate is active and your signatory knows the activation step.
  • Optional: your egress IPs are on the organisation allowlist.
  • A named technical contact is on file with Ladder.