EXU

1.1 Identity and business

The strongest retained company-specific evidence is a TechCrunch unicorn roundup that names EXU as a crypto trading platform, says it was founded in 2025, and reports a $120 million Series B at a $1.2 billion valuation. The same item attributes the funding and investor details to PitchBook rather than presenting a company filing or announcement. A separate consumer-finance explainer identifies a different, Hong Kong-incorporated EXU (HK) LIMITED associated with social-app trademarks; that source is a namesake warning, not confirmation that the fintech platform is the same legal entity. The evidence therefore supports a provisional identity and business description, while product scope, legal entity, headquarters, founders, and licensing remain unresolved.[CO001, CO002, CO003, CO004]

1.2 Leadership and governance

No assigned source names an EXU founder, chief executive, executive team, board, or governance arrangement. The absence is a limitation of this evidence pack, not proof that the company has no disclosed leadership. It matters because a crypto trading platform depends on accountable control over custody, market operations, compliance, and incident response, while IOSCO's policy framework treats crypto-asset service providers as operating across activities including trading, settlement, market surveillance, and custody. Until a primary company, registry, filing, or regulator source identifies the responsible people and legal entities, key-person dependence and governance quality cannot be scored with confidence.[CO005, CO006, CO007]

1.3 Capital, milestones, and diligence gaps

The reported financing is substantial but remains a third-party-reported figure: TechCrunch attributes the $120 million Series B, $1.2 billion valuation, Sequoia and The Goldman Sachs Group participation, and $160 million total funding to PitchBook. No retained source supplies revenue, trading volume, customer count, headcount, cash balance, debt, secondary-sale information, or a current valuation update. IOSCO's 2023 recommendations provide a regulatory context rather than evidence about EXU: they emphasize market integrity, investor protection, cross-border supervision, and conflicts across crypto-asset activities. The appropriate conclusion is that capital formation is evidenced, operating scale and regulatory posture are not.[CO008, CO009, CO010, CO011]

1.4 Investment implications

EXU's provisional profile combines a high reported financing mark with unusually thin company-specific disclosure in the assigned pool. Independent sector benchmarks show why that asymmetry matters: exchange diligence commonly examines regulatory compliance, liquidity, security, reputation, fees, asset visibility, and trading volume, while current enforcement reporting shows that safeguarding failures can carry financial consequences. Those sources do not establish an EXU deficiency or incident. Investors should verify the legal entity behind the platform, obtain the financing announcement and cap table, and request financial, licensing, custody, surveillance, client-asset, and incident evidence before relying on the $1.2 billion mark.[CO012, CO013, CO014, CO015, CO016]

1.5 Exhibits

2.1 Market boundary and competitive substitutes

This chapter defines the relevant market as crypto-asset trading infrastructure and exchange services: centralized order-book or brokerage execution, custody and settlement, institutional liquidity access, and adjacent derivatives or wallet services. It excludes the value of the underlying tokens, payments unrelated to trading, and broad blockchain software unless those activities directly support trading. The boundary matters because a crypto exchange is not a single product: IOSCO notes that a crypto-asset service provider may combine exchange trading, brokerage, market-making, margin, custody, and settlement. EXU's assigned evidence identifies it as a crypto trading platform but does not establish which of those functions it operates. Retail exchanges, institutional venues, brokers, decentralized protocols, and internal treasury or prime-broker workflows are therefore status-quo substitutes rather than interchangeable peers. Two net-new search results used “EXU” for an unrelated debit-card charge and a religious figure, demonstrating that namesake noise must be excluded rather than treated as company or market evidence.[CM001, CM002, CM003, CM004, CM015]

2.2 Sizing lenses and evidence limits

The available evidence supports a multi-lens sizing approach, not a single headline TAM. A top-down lens can use aggregate centralized-exchange assets, volumes, and flows, but the DefiLlama page is a live tracker and its extracted text does not provide a dated total or a methodology for summing the displayed exchange rows. A bottom-up lens would require EXU's target customer count, average balances, trading volume, take rate, and geographic scope; none is disclosed in the assigned pool. A valuation-adjacent lens is also incomplete: TechCrunch reports EXU's $1.2 billion valuation and $160 million raised, but those are financing facts, not market size or revenue. The defensible conclusion is that SAM and SOM remain unisolated. Any investment case should test volume, fee capture, liquidity costs, and compliance spend before treating the reported valuation as market-derived. Even the available exchange benchmark needs qualification: Investopedia's introduction says it analyzed 27 exchanges, while its methodology says 14, so the sample count is internally inconsistent and cannot be treated as a market census.[CM005, CM006, CM007, CM008, CM013, CM014]

2.3 Buyers, adoption drivers, and constraints

Buyer segmentation follows the workflow being purchased. Institutional traders and funds value deep liquidity, execution quality, custody, reporting, and operational controls; active retail users prioritize access, fees, product breadth, and usability; and decentralized users prioritize permissionless access and wallet control. Investopedia's 2026 comparison shows that regulatory compliance, liquidity, security, platform reputation, and fees are material exchange-selection criteria, while its reviewed platforms differentiate on maker-taker pricing, asset breadth, custody, and product expansion. IOSCO adds the adoption constraint that cross-border crypto activity creates regulatory-arbitrage, investor-protection, and market-integrity risks. CoinDesk's market headlines also show that hacks, litigation, and protocol security issues remain live category risks, including a report of $16 million in suspicious exchange outflows. EXU's buyer, payer, geography, and compliance posture are not disclosed, so timing and willingness to pay cannot be quantified.[CM009, CM010, CM011, CM012, CM016]

2.4 Exhibits

3.1 Competitive landscape and reference set

The evidence supports a broad reference set rather than a verified EXU-specific peer list. TechCrunch reports EXU as a crypto trading platform founded in 2025 that raised a $120 million Series B at a $1.2 billion valuation, but the same article provides no product, customer, fee, or market-share detail. Investopedia's October 2026 review evaluates 27 exchanges and identifies Kraken, Coinbase, Gemini, Crypto.com, Binance, and Uniswap as differentiated reference points. DefiLlama's exchange page exposes live comparative fields such as volume, assets, inflows/outflows, and volume-to-assets ratios, showing the dimensions on which an institutional venue is likely to be screened. EXU cannot be placed on those dimensions from the assigned evidence. The name also produces material search contamination: two retained pages use “Exu” for Afro-Brazilian religious traditions, not a financial company. That ambiguity is itself a discoverability and diligence constraint.[CP001, CP002, CP003, CP004]

3.2 Capability, pricing, and buyer trade-offs

Public competitor evidence is strongest on buyer criteria, not on EXU's implementation. Investopedia describes regulatory compliance, liquidity, security, platform reputation, and fees as important exchange-selection factors, and reports Kraken's 0%–0.38% maker fees and 0.05%–0.80% taker fees, Coinbase's 0%–0.4% maker fees and 0.4%–0.6% taker fees, and Kraken's coverage of more than 190 countries. Those are competitor list or review figures, not EXU pricing or realized economics. IOSCO's 2023 recommendations frame custody, order handling, market surveillance, operational risk, and retail disclosure as core crypto-asset-service-provider controls. EXU's assigned evidence does not establish whether it offers those controls, which customer segment it targets, or whether it competes on price, execution, custody, or access.[CP005, CP006, CP007, CP008]

3.3 Switching costs, moat durability, and displacement risk

Exchange competition is structurally exposed to multi-homing and incumbent response. A venue can differentiate through liquidity, security, asset breadth, institutional tools, compliance coverage, or distribution, but the retained sources do not show EXU's liquidity, uptime, licenses, customer concentration, custody model, integrations, or switching costs. IOSCO's principles-based framework emphasizes consistent outcomes across jurisdictions because cross-border activity creates regulatory-arbitrage and investor-protection risks. That raises the cost of a durable moat: any EXU claim to institutional advantage would need evidence of controls and regulatory permissions, not only financing. CoinDesk's market coverage also illustrates adverse operating signals in the sector, including a reported $3.6 million fine against Coinbase Ireland for fund-safeguarding failures and reports of exchange security events. These are sector comparables, not allegations about EXU, but they make trust and control evidence central to displacement risk.[CP009, CP010, CP011, CP012]

3.4 Evidence gaps and competitive verdict

The competitive verdict is research-more rather than a claim that EXU lacks differentiation. The assigned pool contains only one source directly naming EXU as a trading platform, while the stronger competitor sources describe established venues or regulatory expectations. No retained source verifies EXU's target customer, fee schedule, supported assets, custody arrangements, licenses, security certifications, liquidity, trading volumes, distribution partners, or customer references. Until those fields are disclosed or independently corroborated, EXU should be underwritten against the capabilities and trust standards of established exchanges and against the possibility that liquidity and compliance are difficult to replicate.[CP013, CP014, CP015, CP016]

3.5 Exhibits

4.1 Public capital signal, not operating traction

TechCrunch, citing PitchBook, reports that EXU was founded in 2025, operates as a crypto trading platform, raised a $120 million Series B, includes Sequoia and The Goldman Sachs Group among its investors, and has raised $160 million in funding to date. The same report places the company at a $1.2 billion valuation. These are financing and valuation signals, not revenue, ARR, GMV, cash, or profitability measures. The funding chronology belongs in Company Overview; this chapter uses the local capital facts only to frame capital adequacy and the information required for forward underwriting. A valuation multiple cannot be calculated without a revenue denominator.[CI001, CI002, CI003]

4.2 Monetization mechanics and unit-economics visibility

The assigned evidence does not disclose EXU's fee schedule, spread capture, custody or staking economics, institutional contract terms, realized take rate, customer acquisition cost, sales cycle, retention, or payback. A crypto trading platform may combine exchange, brokerage, market-making, custody, settlement, margin, or staking activities, but IOSCO explicitly notes that these functions can sit under one roof and should be disclosed by role and capacity. That regulatory framing makes the revenue bridge a diligence hypothesis rather than a measured model. List pricing, if later obtained, must remain separate from realized net revenue after rebates, liquidity incentives, payment costs, and compliance operations.[CI004, CI005, CI006]

4.3 Cost structure, liquidity, and financing dependency

No assigned source reports EXU cash on hand, monthly burn, gross margin, headcount cost, cloud or market-data expense, custody and compliance cost, working capital, capex, debt, credit facilities, or a next-round trigger. The $160 million raised is cumulative financing and must not be treated as cash available in 2026. Industry evidence shows that centralized crypto-asset businesses can combine multiple operational and control functions, which implies a potentially broad cost and governance perimeter, but it does not quantify EXU's spend. Capital adequacy therefore remains unresolved: an investor should require a current balance sheet, cash-flow bridge, runway calculation, debt schedule, and use-of-funds plan before underwriting.[CI007, CI008, CI009, CI010]

4.4 Financial verdict and diligence blockers

The strongest public financial conclusion is asymmetric: EXU has a reported institutional funding signal, but the operating inputs needed to test revenue quality and capital efficiency are private or unavailable in the assigned pool. Sector sources provide context, not corroboration of EXU performance. IOSCO documents repeated investor-protection and market-integrity concerns in crypto markets, while the SEC's Coinbase action illustrates how registration, disclosure, and function-separation issues can create financial and regulatory exposure for an exchange model; neither source establishes an EXU violation. The investable verdict is research-more: do not infer ARR, take rate, gross margin, burn, runway, or solvency from valuation, fundraising, or market-wide exchange volumes.[CI011, CI012, CI013, CI014, CI015, CI016]

4.5 Exhibits

5.1 Product surface and maturity

The strongest company-specific description in the assigned pool is a TechCrunch report that calls EXU “a crypto trading platform,” identifies a 2025 founding year, and reports a $120 million Series B and $1.2 billion valuation based on PitchBook. That establishes a product category and financing context, not a verified feature set, user workflow, or production maturity. No assigned source names EXU’s order types, supported assets, custody model, APIs, settlement rails, customer segments, service-level objectives, or deployment footprint. A useful maturity conclusion is therefore bounded: EXU has been externally categorized as a trading platform, while the product surface remains private for diligence purposes.[CE001, CE002, CE003, CE004]

5.2 Operating architecture and dependencies

A crypto trading venue normally depends on a connected workflow of client access, identity and permissions, order handling, execution and market data, asset custody, reconciliation, withdrawals, monitoring, and incident response. IOSCO’s 2023 recommendations explicitly cover order handling, trade disclosures, market surveillance, custody, client-asset reconciliation, and operational and technological risks. Those are control domains to test at EXU, not evidence that EXU has implemented them. Public exchange benchmarks show that market platforms expose measurable activity such as volume, liquidity, and confidence in reported volume, but the assigned pool contains no EXU-specific activity or reliability series. The architecture is consequently best represented as an underwriting map with unverified EXU implementation and third-party dependency questions.[CE005, CE006, CE007, CE008, CE009]

5.3 Trust, security, and technical diligence

NIST describes cybersecurity and privacy work in terms of risk management, identity and access management, privacy, and trusted networks and platforms; Hexatrust describes a cybersecurity and trusted-cloud association whose members include software publishers, solution providers, and service companies. Neither source verifies EXU’s controls. The assigned evidence also does not establish an EXU SOC 2 or ISO 27001 certification, proof-of-reserves process, insurance, penetration-test program, segregation of duties, withdrawal controls, outage history, incident disclosures, or public developer surface. These are material gaps for a crypto trading platform because a polished interface or financing round does not demonstrate safe custody or resilient execution.[CE010, CE011, CE012, CE013, CE014]

5.4 Exhibits

6.1 Customer identity remains unverified

The strongest company-specific source describes EXU as a crypto trading platform founded in 2025 and reports its financing and valuation, but it does not identify who pays, trades, integrates, or holds assets on the platform. Financing is therefore a capital-market signal, not customer validation. Across the retained evidence reviewed here, no source names an EXU customer, contract, pilot, account cohort, geography, channel partner, or production outcome. The analysis cannot responsibly classify EXU as institutional, retail, developer-facing, or multi-segment. Each is retained only as a diligence hypothesis. This evidence boundary also prevents translating the reported $120 million Series B or $160 million total funding into customer scale, revenue, liquidity, or retention.[CU001, CU002, CU003, CU004, CU005, CU006]

6.2 Peer segmentation clarifies the questions, not EXU's answers

Yahoo Finance describes Coinbase as serving consumers, institutions, and developers, with most revenue still generated from retail transaction fees, while adjacent expansion includes prime brokerage and data analytics. That peer pattern illustrates distinct buyer, user, payer, and expansion motions that should not be collapsed into a single customer count. It does not show that EXU serves any of those cohorts. The DefiLlama exchange snapshot also places customer acquisition against large incumbent venues, displaying Binance, OKX, and Bybit with first-listed seven-day volume figures of $171.676 billion, $30.631 billion, and $15.846 billion respectively. EXU has no comparable volume, account, or utilization metric in the retained evidence, so market presence and adoption trajectory remain unquantified.[CU006, CU007, CU008, CU009, CU015]

6.3 Trust and client protection are adoption prerequisites

Crypto-platform customer durability depends on more than acquisition. IOSCO says a crypto-asset service provider should clearly disclose the legal entity, role, capacity, execution model, conflicts, and custody arrangements presented to clients. It also calls for protection and accurate records of client assets. These expectations matter to both conversion and retention because the FTC warns that cryptocurrency accounts are not government-backed like insured bank deposits and that cryptocurrency payments are typically irreversible. IOSCO additionally cites a BIS sample of more than 200 trading apps across more than 95 countries in which a majority of users in nearly all economies experienced bitcoin losses during the studied period. None of these sources verifies EXU's controls; they define the proof customers and underwriters would need.[CU010, CU011, CU012, CU013, CU014]

6.4 Durability, expansion, and concentration cannot yet be scored

There is no retained evidence for EXU's gross or net revenue retention, logo churn, repeat trading, funded-account cohorts, contract duration, wallet balances, customer satisfaction, or customer concentration. The absence is bounded to this chapter's evidence set and is not proof that EXU has no customers. It means durability cannot be underwritten from public proof. Coinbase's expansion into prime brokerage and data analytics offers a peer example of adjacent monetization, but it is not evidence that EXU has a land-and-expand motion. Before attributing strategic value to EXU's customer base, investors need cohort-level activity, revenue by segment and geography, top-ten concentration, channel attribution, renewal or repeat-use data, and reference calls that distinguish pilots from production relationships.[CU006, CU007, CU008, CU009, CU016]

6.5 Exhibits

7.1 Regulatory and legal exposure

Crypto trading platforms operate across a fragmented and changing regulatory perimeter. IOSCO's recommendations cover offering, admission to trading, ongoing trading, settlement, market surveillance, custody, and retail distribution, and explicitly emphasize cross-border cooperation, regulatory arbitrage, and investor-protection risks. Treasury's sanctions docket shows that sanctions designations and general-license changes are active and frequent in October 2026. For EXU, the investment-relevant issue is not whether crypto regulation exists, but whether the company has mapped each jurisdiction, asset, customer type, and operating activity to a license and control owner. The public pool does not verify EXU's U.S. money-transmission, MSB, MiCA, sanctions-screening, market-abuse, or custody status. A licensing gap, weak asset listing controls, or a sanctions-screening failure could interrupt market access, trigger enforcement, or strand customer assets. Until management supplies licenses, regulatory opinions, and recent examinations, residual legal exposure should be treated as high rather than inferred from the company's institutional positioning.[CR001, CR002, CR003, CR004]

7.2 Operational, cyber, and market-integrity risk

The operating model combines exchange connectivity, automated execution, custody or custody dependencies, identity and transaction controls, and availability during volatile markets. IC3 maintains dedicated cryptocurrency crime reporting and publishes annual reports, while its annual-report page links a 2025 report and cryptocurrency-specific reports; this establishes an active threat and complaint environment, not an EXU incident. Public descriptions of algorithmic trading note that automated systems can react faster than humans, may contribute to volatility, and create accountability questions when failures occur. IOSCO separately calls for management and disclosure of operational and technological risks. EXU has no publicly verified SOC 2 or ISO 27001 evidence, proof-of-reserves result, insurance terms, outage history, recovery-time objective, or independent penetration-test result in the assigned sources. The practical kill criteria are a material outage during stressed markets, an unreconciled customer-asset balance, a security incident without timely containment, or execution defects that create unhedged exposure.[CR005, CR006, CR007, CR008, CR009]

7.3 Dependency, financial, and execution risk

EXU's public financing signal is not a liquidity statement. TechCrunch reports that EXU raised a $120 million Series B at a $1.2 billion valuation and had raised $160 million in total funding, but the article does not disclose cash balance, burn, runway, revenue, trading volume, take rate, customer concentration, or the terms and restrictions attached to that capital. The broader market context is also competitive: DefiLlama's snapshot shows large centralized exchanges with substantial seven-day volumes and reserves, while Galaxy's research page shows an active and rapidly changing digital-asset research agenda. These sources do not prove EXU's relative share or solvency, but they support stress-testing liquidity, counterparties, and execution economics rather than assuming scale from funding. Key dependencies include banking and fiat rails, liquidity providers, cloud and market-data infrastructure, custodians, sanctions vendors, and key institutional customers. A funding extension without measurable operating traction, a loss of a critical venue or banking partner, or margin compression during a volume downturn would increase financing and continuity risk.[CR010, CR011, CR012, CR013]

7.4 Monitoring and thesis-break triggers

The current evidence supports a monitoring framework, not a conclusion that EXU has suffered a breach, enforcement action, or customer-asset loss. Management should provide a jurisdiction-by-jurisdiction licensing matrix, sanctions and KYC testing, asset-reconciliation evidence, reserve and insurance documentation, incident and outage logs, material vendor concentration, customer concentration, and a 24-month cash-flow bridge. Investors should monitor regulator actions affecting EXU's markets, changes in sanctions or licensing requirements, uptime and incident severity, unexplained spread or execution deterioration, reserve discrepancies, withdrawal delays, and capital runway. A thesis break occurs if any of these indicators demonstrates that EXU cannot operate compliantly, safeguard customer assets, or fund remediation. Absence of a publicly recorded incident is not evidence that controls are effective; the gap itself is material because the company's operating metrics and control attestations remain private.[CR014, CR015, CR016]

7.5 Exhibits

8.1 Investment decision and valuation discipline

EXU's publicly reported financing context is a $120 million Series B at a $1.2 billion valuation, with $160 million of total funding reported by TechCrunch from PitchBook. That establishes a financing mark, not an independently verified fair value, revenue multiple, or cash balance. The evidence set contains no EXU revenue, trading-volume, take-rate, retention, margin, customer, cap-table, liquidation-preference, or debt disclosure. A price-sensitive decision therefore cannot be anchored to an operating multiple. Public-company comparables show that crypto-exchange valuation is exposed to market conditions, liquidity, fees, security, and regulatory compliance, while the regulatory sources show that governance, custody, surveillance, and operational-risk controls are valuation-relevant requirements. The appropriate recommendation is research-more: proceed only after obtaining the cap table, latest management accounts, cohort economics, and evidence that the financing terms do not embed a preference overhang.[CV001, CV002, CV003, CV004, CV005, CV006]

8.2 Thesis, anti-thesis, and comparables

The positive thesis is that EXU reached unicorn status in a capital market willing to fund a crypto-trading platform at scale, and that institutional positioning could support high-value transaction and custody economics. The anti-thesis is that the mark may reflect a financing negotiation rather than durable earnings power: no public EXU operating metric allows a revenue, EBITDA, or volume multiple to be tested. Coinbase's disclosed scale and Robinhood's public-market metrics illustrate the information gap rather than prove EXU comparability. Investopedia's 2026 exchange review explicitly evaluates fees, features, products, services, liquidity, security, reputation, and regulatory compliance, which are the diligence dimensions needed before assigning a peer multiple. The comparison set is therefore directional and should not be presented as a like-for-like valuation benchmark.[CV007, CV008, CV009, CV010, CV011]

8.3 Scenarios, downside triggers, and diligence asks

Scenario ranges are intentionally qualitative because the public record lacks the denominators required for a defensible discounted-cash-flow or revenue-multiple model. The bull case requires verified growth in institutional trading activity, defensible take rates, controlled compliance cost, and financing terms without punitive preferences. The base case is a track-or-research-more posture at the reported financing mark until those inputs are delivered. The bear case is a down-round or impaired exit if regulatory controls, custody, market surveillance, or liquidity costs consume the economics, or if crypto-market activity compresses. IOSCO identifies governance, conflicts, custody, reconciliation, assurance, and operational-technology risk as recommended control areas; FinCEN's active guidance cadence reinforces that compliance obligations can change. Diligence should request audited or reviewed financials, monthly volume and revenue bridges, customer concentration, licenses, AML/KYC evidence, incident history, the full preference stack, and an independent 409A or financing-mark support file.[CV012, CV013, CV014, CV015, CV016]

8.4 Exhibits