← All postsEngineering

Building a global settlement layer on Base

We rebuilt the mint and redeem path on Coinbase's L2 to get sub-2-second confirmation across 170 markets. Without sacrificing the broker-dealer guarantees underneath.

Manibabu Pippalla
CTO
5 min read
Building a global settlement layer on Base

Two years ago our mint path took eleven seconds. Six of those were a broker confirmation we couldn't move. The other five were us. We rebuilt the on-chain leg on Base last quarter and got the user-visible part down under 1.8 seconds. Across every market we support. Here's the architecture, and the trade-offs that made it work.

What we couldn't change. The broker leg still settles T+1 with the exchange. Not a problem we get to solve. What we DO solve is the user-facing part: from "call mint" to "token in wallet, contractually backed." The SPV absorbs the broker-leg lag at the issuer level so the integrator's user sees instant. We're not replacing T+1. We're wearing it for them.

Why Base. Three things mattered. Block time, cost, and Coinbase's distribution. Base's 2-second block time is fast enough that the on-chain confirmation isn't the bottleneck. The broker fill is. Gas is cheap enough that we can sponsor it on the consumer side without burning unit economics. And every Coinbase customer is one click from a Base wallet, so integrator UX is shorter.

The mint path, end to end:

  1. Integrator calls /v1/mint with asset, quantity, settlement currency, chain.
  2. We instruct the broker (IBKR primary, Alpaca secondary) to acquire the underlying.
  3. Broker confirms fill via webhook. SPV takes legal title under Rule 15c3-3 segregation.
  4. Smart contract on Base mints the token to the integrator's specified wallet.
  5. We emit a signed attestation linking the on-chain token to the off-chain custody record.

Steps 2 and 3 take six seconds end to end. We don't make the user wait. The contract mints the moment the broker fill confirms. The SPV legal title transfer happens in the background and reconciles every block.

Reconciliation. Proof-of-reserves snapshot every block. The hash of all broker-side positions is committed on-chain. An independent attestor diffs it against the contract's total supply. If the diff drifts past two basis points, new mints halt automatically until the SPV operator reconciles. We've tripped this twice. Both were broker-side reporting lag, not actual divergence.

We're not replacing T+1. We're wearing it for them.

What we'd do differently. We over-engineered the cross-chain bridging on day one. LayerZero wired to Arbitrum and Ethereum before we had a single integrator who needed it. If we did this again, Base-only for the first ninety days, then add chains based on actual integrator demand. Build for the user you have, not the user you think you'll have.

Written by Manibabu Pippalla, CTO
More posts →