Team reviewing protocol launch plans at a modern WeWork hot desk, rolled blueprints, laptops, and coffee cups scattered around, casual startup planning moment.
Protocols

Marketplace Listing and Order Schema Standard

A technical specification defining a standardized, off-chain order book schema that uses Partially Signed Bitcoin Transactions (PSBTs) to enable trustless listings, bids, and acceptances for Ordinals and Runes.
introduction
STANDARDIZING TRUSTLESS ORDER BOOKS

Introduction

A proposed technical specification for a standardized off-chain order book schema using Partially Signed Bitcoin Transactions (PSBTs) to enable trustless listings, bids, and acceptances for Ordinals and Runes.

The Marketplace Listing and Order Schema Standard addresses a critical fragmentation point in the Bitcoin Ordinals and Runes ecosystem: the lack of a unified, trustless mechanism for creating and sharing orders across different marketplaces. Currently, each marketplace operates its own proprietary order book, forcing users to trust the platform's backend and fragmenting liquidity. This proposed standard defines a common schema for constructing off-chain listing and bid messages using PSBTs, allowing any compliant marketplace, wallet, or aggregator to create, share, and fulfill orders without requiring a central intermediary to hold assets or manage a private database.

At its core, the standard leverages the PSBT format (BIP-174) to encode the terms of a trade—such as the specific Ordinal inscription or Rune being offered, the requested price in Bitcoin, and the seller's signature—into a portable, partially signed transaction. A seller can create a signed listing PSBT that authorizes the transfer of their asset upon receipt of the specified payment, while a buyer can create a signed bid PSBT committing funds for a desired asset. A third party, such as a marketplace or an atomic swap coordinator, can then match these complementary PSBTs and finalize the transaction on-chain. This architecture removes the need for marketplaces to take custody of user assets for listing purposes, significantly reducing counterparty risk and the attack surface for exchange hacks.

For builders and operators, the operational impact is substantial. Marketplace developers must implement PSBT construction and parsing logic that correctly handles the unique constraints of Ordinals (inscription envelopes, satpoint selection) and Runes (UTXO-based balances, cenotaph risks). A flawed implementation could lead to race conditions where an asset is double-sold, or to cenotaph triggers that destroy rune balances. Indexer operators need to ensure their APIs can validate the state of assets referenced in a PSBT order. Chainscore Labs can provide a critical audit of this integration layer, reviewing PSBT construction logic, order-matching engines, and UTXO selection algorithms to prevent asset-loss vulnerabilities and ensure cross-platform compatibility.

MARKETPLACE LISTING AND ORDER SCHEMA STANDARD

Quick Facts

Key technical and operational facts about the proposed standard for trustless off-chain order books using PSBTs for Ordinals and Runes marketplaces.

FieldValueWhy it matters

Standard Type

Off-chain order book schema using Partially Signed Bitcoin Transactions (PSBTs)

Defines a common language for listings, bids, and acceptances, enabling shared liquidity and composability between marketplaces.

Core Mechanism

Trustless listings and bids via PSBTs with cryptographic commitments

Eliminates the need for users to trust a marketplace's internal database. Orders are self-contained and verifiable, reducing counterparty risk.

Affected Assets

Ordinals inscriptions and Runes tokens

A unified schema must correctly handle the distinct UTXO management requirements of both non-fungible inscriptions and fungible rune balances to prevent asset loss.

Key Vulnerability

Race conditions in order matching and acceptance

Without atomic execution, a seller could accept multiple bids for the same asset. The standard's design for order finality is critical to marketplace integrity.

Primary Integrators

Marketplace backends, wallet software, and shared-liquidity aggregators

All parties must implement the PSBT construction and parsing logic identically to avoid state divergence and failed transactions.

Reference Implementation

Not yet standardized; proposals exist within the OIP/RIP process

The absence of a ratified standard creates fragmentation risk. Teams should verify the current status against the canonical ord repository and active OIP discussions.

Chainscore Service

PSBT construction and order-matching logic audit

Chainscore can review implementations to prevent race conditions, validate cryptographic commitments, and ensure correct UTXO handling for both Ordinals and Runes.

technical-context
OFF-CHAIN ORDER BOOK ARCHITECTURE

Technical Mechanism: PSBT-Based Order Schema

How Partially Signed Bitcoin Transactions (PSBTs) are used to construct trustless, off-chain listings and bids for Ordinals and Runes, enabling shared liquidity without custodial risk.

The Marketplace Listing and Order Schema Standard defines a mechanism for creating off-chain order books for Bitcoin-native assets, including Ordinals and Runes, using Partially Signed Bitcoin Transactions (PSBTs). A seller constructs a PSBT that spends a specific UTXO containing an inscription or rune balance, setting the desired output and price, but without signing the input. This unsigned PSBT represents a verifiable listing that can be broadcast across marketplaces. A buyer can then complete the transaction by adding their own inputs to fund the purchase, signing their portion, and finalizing the PSBT for broadcast to the Bitcoin network. This schema shifts the trust model from a centralized marketplace escrow to the cryptographic validity of the Bitcoin transaction itself.

Operationally, this standard requires precise PSBT construction to prevent asset loss. A listing PSBT must correctly identify the asset-bearing UTXO, set appropriate outputs for the buyer and any marketplace fee, and crucially, leave the seller's input unsigned. The PSBT_GLOBAL_UNSIGNED_TX field contains the skeleton transaction, while PSBT_IN_SELLER roles and proprietary key-value pairs may be used to communicate listing metadata. The primary risk is a race condition where a seller signs a listing PSBT, allowing a malicious relayer to broadcast it without the buyer's payment, effectively stealing the asset. Therefore, the standard mandates that the seller's signature is only applied by the buyer's wallet software as the final step of a valid acceptance, or that the listing PSBT is constructed in a way that is invalid until the buyer's inputs are added.

For marketplace developers and shared-liquidity infrastructure, this schema introduces a new class of off-chain state management. Indexers must be capable of parsing these PSBTs to display active listings, and wallet software must implement robust PSBT finalization logic that validates the entire transaction graph before signing. The cenotaph model of Runes adds a critical dimension: a malformed final transaction can destroy all input runes. Chainscore Labs can audit the PSBT construction and order-matching logic in marketplace and wallet implementations to verify that race conditions are impossible, fee outputs are correctly structured, and that Runes transfers are constructed with valid edicts to prevent catastrophic cenotaph-triggered loss.

IMPACT BY ROLE

Affected Actors

Marketplace Developers

Marketplace teams are the primary implementers of this standard. They must refactor their listing, bidding, and acceptance engines to construct and interpret PSBTs according to the new schema.

Key actions:

  • Update order-book databases to store and index the standardized PSBT fields.
  • Implement validation logic that rejects malformed PSBTs before they enter the order book.
  • Ensure the order-matching engine correctly combines buyer and seller PSBTs without introducing race conditions or double-spend vectors.
  • Audit the signature verification flow to confirm that partial signatures do not leak authority.

Chainscore can audit the PSBT construction and order-matching logic to prevent race conditions and asset-loss vulnerabilities.

implementation-impact
PSBT ORDER BOOK INTEGRATION

Implementation Impact

Adopting a standardized off-chain order book schema using Partially Signed Bitcoin Transactions (PSBTs) fundamentally changes how marketplaces, wallets, and indexers coordinate listings and trades. Teams must re-architect order validation, state management, and transaction finalization to prevent race conditions and asset loss.

01

PSBT Construction and Validation Logic

Marketplace backends must generate and validate PSBTs that correctly encode the intent to transfer a specific Ordinal or Rune in exchange for Bitcoin. A malformed PSBT can lead to a cenotaph event, permanently destroying Runes, or to an inscription being sent as a miner fee. Implementations must strictly validate input UTXOs, output scripts, and the inclusion of all required partial signatures before broadcasting. Chainscore can audit the PSBT assembly and signing pipeline to ensure it is immune to malleability and edge-case failures.

02

Race Condition Prevention in Shared Order Books

A shared liquidity model where multiple marketplaces display the same off-chain listing creates a critical race condition. If two buyers accept the same PSBT-based order simultaneously, only one transaction can confirm, leaving the other buyer with a failed trade and potential capital lockup. The order schema must include a robust, indexer-agnostic mechanism for atomic order cancellation or reservation. Integration architects need to design idempotent acceptance flows and real-time state invalidation to prevent double-spend attempts on the same listing.

03

Indexer State Consistency and Order Matching

The order book standard relies on off-chain indexers to confirm asset ownership and validity. A listing for an Ordinal is only as trustworthy as the indexer data it's based on. Discrepancies between indexer providers—such as a cursed inscription being treated as valid by one and invalid by another—can lead to a marketplace accepting a bid for an asset that doesn't exist in the canonical state. Matching engines must implement cross-indexer reconciliation or accept the risk of state divergence. Chainscore can assess your dependency on a single indexer's view of truth.

04

Wallet Integration and UTXO Management

Wallets must evolve from simple signing devices to active PSBT interpreters. They need to parse a complex PSBT, clearly display the exact Ordinal or Rune being sold and the precise Bitcoin amount being received, and prevent users from accidentally spending a listed UTXO in another transaction. This requires a fundamental shift in UTXO locking and coin selection logic. A wallet that fails to lock a listed UTXO will cause the PSBT to become invalid, breaking the seller's intent and potentially damaging their reputation on the order book.

05

Cenotaph Risk in Rune Order Fulfillment

For Runes, any error in the final transaction that fulfills an order—such as an incorrect OP_RETURN edict or an unbalanced rune transfer—will trigger the cenotaph model, resulting in the total destruction of the input runes. The PSBT standard must enforce strict correctness of the Runes protocol messages within the transaction. Order-matching logic must simulate the rune transfer before finalizing the PSBT to guarantee it does not create a cenotaph. A single bug in this simulation can lead to irreversible, high-value asset loss.

06

Fee Market Dynamics and Order Expiry

A PSBT-based listing that sits off-chain for an extended period is vulnerable to Bitcoin's volatile fee market. The transaction's pre-signed fee rate may become uneconomical for miners, causing the trade to stall indefinitely. The order schema must define a clear expiry and fee-bumping strategy, such as Child-Pays-For-Parent (CPFP) or Replace-By-Fee (RBF) signaling, without breaking the trustless nature of the PSBT. Marketplace operators need automated systems to manage order lifecycle in response to mempool congestion.

PSBT-BASED ORDER SCHEMA

Risk & Compatibility Matrix

Evaluates the operational risks, trust assumptions, and integration impacts of standardizing off-chain order books using Partially Signed Bitcoin Transactions for Ordinals and Runes marketplaces.

AreaWhat changesWho is affectedAction

PSBT Construction

Standardized templates for listing, bid, and acceptance PSBTs replace proprietary marketplace formats.

Marketplace developers, wallet teams, indexer operators

Audit PSBT serialization and signing logic against the canonical schema to prevent transaction malleability.

Order Matching

Off-chain order books must match PSBTs without exposing users to race conditions or double-fill attacks.

Marketplace backends, shared-liquidity aggregators

Review order-matching engine logic for atomicity and idempotency; simulate concurrent acceptance scenarios.

UTXO Management

Standardized orders require precise UTXO selection to avoid accidentally spending inscribed satoshis or rune-bearing outputs as fees.

Wallet developers, exchange custody teams

Implement UTXO locking and coin control that respects the schema's input/output specification.

Cenotaph Risk

Malformed Runes transfer edicts within a PSBT can trigger the cenotaph model, destroying input runes irreversibly.

Wallet developers, marketplace signing interfaces

Validate all Runes edict construction against the protocol specification before PSBT finalization.

Indexer Dependency

Order validity often depends on off-chain indexer data for inscription or rune balance verification.

Marketplace operators, DeFi protocols integrating orders

Design fallback logic for indexer divergence; verify balance states against multiple indexer providers.

Delegated Inscriptions

PSBTs involving delegated inscriptions require correct validation of the delegation chain within the order schema.

Marketplace validation logic, collection management tools

Audit delegation-check functions to prevent unauthorized listing or transfer of delegated assets.

Cross-Client Compatibility

Differences in PSBT finalization or sighash flags between wallet implementations can break standardized orders.

Wallet teams, hardware signing device vendors

Test PSBT workflows across a matrix of target signers and coordinators to ensure deterministic finalization.

PSBT-BASED ORDER BOOK READINESS

Integration & Operator Checklist

A standardized off-chain order book using Partially Signed Bitcoin Transactions (PSBTs) for trustless listings, bids, and acceptances introduces new integration requirements for marketplace developers, wallet teams, and shared-liquidity infrastructure. Use this checklist to verify your implementation against the canonical specification and prevent race conditions, asset loss, and cenotaph triggers.

Verify that your system constructs PSBTs conforming to BIP-174, with correct handling of the global transaction, input, and output maps. Each PSBT role (Creator, Updater, Signer, Combiner, Finalizer) must be strictly separated in your order-flow logic.

  • What to check: Confirm that listing PSBTs include the correct UTXO inputs for the listed Ordinal or Rune, and that bid PSBTs include the correct payment UTXOs. Validate that all PSBT_IN_* fields for witness UTXOs are populated to allow signers to verify transaction details.
  • Why it matters: A missing or malformed witness UTXO field can prevent a counterparty from validating the transaction they are signing, leading to blind-signing risks and potential asset theft.
  • Readiness signal: Your test suite successfully round-trips a PSBT through all roles using a reference implementation and a hardware wallet, with no PSBT_GLOBAL_UNSIGNED_TX parsing errors.
Chains We Build On

Looking to build on a specific blockchain?

We build smart contracts, DeFi applications, wallets, tokenization platforms, and blockchain infrastructure across the major ecosystems teams choose today. That includes Ethereum, Arbitrum, Optimism, Polygon, Avalanche, Solana, Sui, Aptos, Hedera, Stellar, and NEAR, with support for additional EVM and non-EVM networks based on your product requirements.

EVM ecosystems

  • Ethereum logo
    Ethereum
  • Arbitrum logo
    Arbitrum
  • Optimism logo
    Optimism
  • Polygon logo
    Polygon
  • Avalanche logo
    Avalanche
  • Cronos logo
    Cronos

Non-EVM ecosystems

  • Solana logo
    Solana
  • Sui logo
    Sui
  • Aptos logo
    Aptos
  • Hedera logo
    Hedera
  • Stellar logo
    Stellar
  • NEAR logo
    NEAR

Additional ecosystems

  • Polkadot logo
    Polkadot
  • Cosmos logo
    Cosmos
  • TON logo
    TON
  • Cardano logo
    Cardano
  • Algorand logo
    Algorand
  • Tempo logo
    Tempo

Also available for Base, appchains, custom EVM networks, and cross-chain product architecture.

PSBT-BASED ORDER STANDARD FAQ

Frequently Asked Questions

Common questions from marketplace developers and integration engineers evaluating the standardized off-chain order book schema for trustless Ordinals and Runes listings, bids, and acceptances.

Without a shared standard, each marketplace implements proprietary listing and order-matching logic, fragmenting liquidity and forcing users to trust individual platforms with asset custody or order execution. A standardized schema using Partially Signed Bitcoin Transactions (PSBTs) allows:

  • Trustless listings: Sellers can create signed, off-chain listings that commit to a specific price and asset without depositing the item into a marketplace escrow.
  • Cross-platform liquidity: A single signed listing can be discovered and filled across multiple marketplaces that implement the standard.
  • Atomic execution: The final transaction, once completed by a buyer and broadcaster, atomically swaps the payment for the Ordinal or Runes, reducing counterparty risk.

This shifts the trust model from the marketplace operator to the Bitcoin network itself.

Trusted by Industry Leaders

Delivering blockchain solutions for 5+ years.

We have partnered with 50+ leading DeFi protocols, NFT ecosystems, and fintech innovators to build secure, scalable, and capital-efficient blockchain products.

Selected Partners & Clients

ChainVote logo
Reax logo
Sokail logo
Swapsicle logo
SyntheX logo
Tekika logo
Telos logo
Zexe logo
ChainVote logo
Reax logo
Sokail logo
Swapsicle logo
SyntheX logo
Tekika logo
Telos logo
Zexe logo
ChainVote logo
Reax logo
Sokail logo
Swapsicle logo
SyntheX logo
Tekika logo
Telos logo
Zexe logo
ChainVote logo
Reax logo
Sokail logo
Swapsicle logo
SyntheX logo
Tekika logo
Telos logo
Zexe logo
I've been working with Chainscore Labs for last 3+ years, they've consistently delivered with strong ownership across multiple projects. The team is reliable and detail-oriented.
L
Lee Erswell
CEO, Telos Foundation
how to get started

How to get started?

If you're looking for blockchain integration, ChainScore Labs has 5+ years of experience helping teams build and integrate exchanges, wallets, smart contracts, tokenization solutions, and protocol-connected products, we can help you choose the right path, integrate securely, and get to production faster. Our team consists of experienced blockchain developers and architects who can help you with your blockchain integration needs.

01

Exploration & Strategy

Define your product goals and choose the right blockchain architecture for your use case.

02

Architecture & Design

Design the smart contracts, tokenomics, and security parameters of your system.

03

Development & Integration

Build and integrate with wallets, oracles, and front-end dApps for a seamless experience.

04

Security & Launch

Comprehensive audits followed by a risk-managed mainnet deployment to protect your users.

Start a build

Need a blockchain engineering team?

Send the project context and we will respond with next steps, scope questions, and a practical path to delivery.