EXU

1.1 Identity and public footprint

EXU (also referenced as EXUGlobal) is a crypto trading platform founded in 2025 that TechCrunch lists in its 2025 unicorn tracker with a $1.2 billion post-money valuation after a $120 million Series B round. The company is anchored geographically in the U.S. venture ecosystem — the TechCrunch article is a U.S. unicorn survey and the named investors are U.S. and Asia-Pacific institutional funds — but no primary filing, press release, or company page confirms an exact headquarters city, founding month, or executive team. The official website at exuglobal.com did not respond during research for this run, which is itself a diligence signal: an institutional-grade crypto trading platform whose website is not reachable is a company where every operating claim must be corroborated in a private data room. On the public record, EXU's identity is therefore best described as an early-stage, U.S.-oriented crypto trading platform whose defining public artifacts are its investor syndicate and its PitchBook-reported valuation, not its product or its team.[CO001, CO002, CO004, CO005, CO006, CO033]

1.2 Founders, leadership, and governance gaps

The public sources retrieved for this run do not name any EXU founder, officer, or board member. That is unusual for a Series B unicorn: comparable crypto exchange peers (Coinbase, Kraken, Bitstamp, Gemini) all have publicly identifiable founder-CEOs and named senior teams. Silicon Valley pattern-matching says a Series B round of this size would typically involve at least a founder-CEO with prior crypto or trading credibility, a CTO with distributed systems or trading systems background, and a Chief Compliance Officer given the regulatory environment. None of that can be verified from the public sources examined. The named lead investor Sequoia Capital is well documented, as is the strategic backing of The Goldman Sachs Group and the Asia-Pacific relationship anchor Granite Asia (successor to GGV Capital), so investor identity is the only leadership dimension with high-confidence public coverage. Every other governance question — board composition, protective provisions, chair independence, existence of an audit or risk committee, and key-person insurance — is a mandatory data-room diligence ask before underwriting.[CO007, CO008, CO009, CO030, CO034]

1.3 Funding, valuation, and capital base

The core capital facts for EXU are consistent across TechCrunch's reporting and its underlying PitchBook data feed: a $120 million Series B round completed in 2025 at a $1.2 billion post-money valuation, bringing cumulative raised to $160 million. Named participants in the round are Sequoia Capital, The Goldman Sachs Group, and Granite Asia. Public sources do not disclose the earlier funding history that produced the other $40 million of the $160 million total — no seed or Series A press releases are indexed in the sources retrieved. Public sources also do not disclose any secondary transaction, convertible-note or SAFE overhang, or debt/credit facility; a Series B crypto exchange with roughly $160 million of equity would typically not need debt, but institutional custody or fiat rails partnerships may require guarantee structures that only appear in the data room. Compared with Coinbase's pre-IPO capital stack and Kraken's multi-round history, EXU's public capital profile looks compact and clean, but the underwriting question is whether the private cap table matches that picture.[CO002, CO003, CO004, CO007, CO008, CO009]

1.4 Cover metrics, milestones, and sector chronology

Beyond capital, the cover metrics that would normally close out a company overview — revenue, run-rate, monthly active users, trading volume, headcount, and office locations — are not publicly disclosed for EXU. Marketing statements attributed to the company in third-party press aggregators (isStories.com and similar) referenced roughly 1 million users and $280 million daily trading volume, but those figures were not retrievable as primary text and cannot be verified against any exchange volume tracker (CoinMarketCap, The Block, DefiLlama). The verifiable public chronology for EXU is very short: founded in 2025, Series B closed in 2025, listed in TechCrunch's January 2026 unicorn survey. That chronology sits inside a much longer sector chronology that any diligence read has to account for: the November 2022 FTX bankruptcy, the June 2023 SEC actions against Binance and Coinbase, the 2023 publication of the EU MiCA regulation, the November 2023 IOSCO 18-recommendation framework, and the ongoing FATF Travel Rule expectations. That combined chronology is why the diligence posture for EXU has to be "research more" rather than "buy" — the investor signal is genuinely strong, but the operating record required to underwrite a $1.2B valuation is not yet public.[CO001, CO011, CO012, CO013, CO014, CO021]

1.5 Exhibits

2.1 Market boundary and substitutes

EXU's addressable market is the global centralized cryptocurrency exchange sector — the fee pool that spans retail spot, institutional spot, derivatives clearing, custody, and margin-adjacent services. Included spend covers trading fees, market-maker rebates, and derivatives clearing revenue; excluded spend covers mining, stablecoin issuer float, and pure DeFi protocol fees. Substitutes matter a great deal because they compete for the same underlying flow: decentralized exchanges (Uniswap, dYdX, GMX) offer non-custodial execution at competitive spreads for retail and long-tail assets, OTC desks (Cumberland, Galaxy, B2C2) take large institutional trades bilaterally without touching a public order book, and traditional brokerages (Robinhood, Fidelity, Schwab) increasingly offer spot crypto exposure through familiar accounts. Wikipedia's stablecoin coverage confirms that dollar-pegged stablecoins are now the primary settlement asset on centralized exchanges, tying exchange growth to stablecoin adoption. That means EXU's "institutional-grade crypto trading platform" positioning is not a market of its own; it is a segment inside the broader exchange sector that competes on regulatory posture, custody quality, AI-driven differentiation, and fee schedule.[CM001, CM002, CM003, CM021, CM034]

2.2 Sizing lenses and evidence-constrained numbers

No single public source reconciles a dollar-denominated TAM/SAM/SOM for a new institutional-grade crypto exchange. Four independent lenses do exist in the public record and are shown in the sizing table: (i) a16z crypto reports 220 million monthly active blockchain addresses in September 2024, more than 3x the end-of-2023 baseline; (ii) The Block's ongoing spot-volume tracker regularly shows trillions of dollars of annual volume across major centralized venues; (iii) CoinMarketCap enumerates hundreds of exchanges by trust score and liquidity; (iv) Fidelity Digital Assets and PwC surveys estimate institutional allocation and fund AUM. These are not the same measurement and cannot be summed. The most defensible construction for EXU's sizing is therefore an evidence-constrained SAM: a take-rate applied to U.S. + EU institutional spot volume plus a share of derivatives clearing, held against the multi-vendor competitive frame described in the competitors chapter. Chainalysis 2024 reporting reminds every underwriter that some reported volume is inflated by illicit or wash-trade activity, so the SAM has to be discounted for that as well.[CM004, CM005, CM006, CM008, CM009, CM014]

2.3 Buyer segmentation and adoption path

Institutional-grade crypto trading has a well-defined buyer stack: retail active traders (the historical volume driver), prosumer API users, family offices, hedge funds and prop shops, and corporate treasuries. EXU's stated positioning targets the middle three segments — family offices, hedge funds, and prosumers — where fee sensitivity is lower and product differentiation (AI signals, execution quality, cross-margin) matters more than in retail. The adoption path is a two-stage funnel: (1) legal/compliance approval based on the platform's regulatory posture and audit history, and (2) custody-tech integration into the buyer's middle office. Both stages typically take 30-90 days and drop 70-85% of the raw pipeline before first pilot volume. Growth signals in Fidelity and PwC research confirm the direction of travel — institutional participation is increasing — but the funnel means Year 1 exchange volume is bounded by pipeline maturity, not headline market size. The buyer map is also affected by ETF flow: U.S. spot Bitcoin and Ether ETFs generate custody demand and hedging volume that ends up on the exchange side, giving EXU an indirect but real institutional flow driver.[CM022, CM023, CM024, CM032, CM035]

2.4 Drivers, constraints, and preserved sizing gaps

Growth drivers for EXU's market are institutional allocation growth, stablecoin transaction volume, U.S. spot crypto ETF adoption, and stronger EU regulatory clarity via MiCA. Constraints are U.S. regulatory ambiguity (SEC v. Binance, SEC v. Coinbase still in litigation), cyber and custody risk, fiduciary reluctance, elevated compliance costs, and the reputational overhang from FTX and other 2022-2023 collapses. Bank prudential standards published by BIS cap direct bank exposure to crypto assets, which paradoxically helps exchanges by pushing bank clients to specialist venues but also reduces the pool of natural credit and treasury counter-parties. IOSCO's 18 recommendations and the Fed's Financial Stability Report both signal that regulator attention will remain high in 2026. Preserved sizing gaps for this chapter include: (a) no reconciled dollar-denominated SAM specific to institutional-grade crypto trading; (b) no public disclosure of how much of reported exchange volume is wash-trade or self-trade; (c) no public data on how much U.S. institutional flow migrates to EU-domiciled venues under MiCA; and (d) no EXU-specific pipeline data. These are the diligence asks any investor must resolve.[CM007, CM012, CM015, CM016, CM019, CM020]

2.5 Exhibits

3.1 Competitive landscape and substitutes

The competitive landscape for EXU is unusually crowded even by fintech standards. The top of the incumbent stack is Coinbase (US-listed public equity), Binance (largest by volume, still recovering from a $4.3B US settlement), Kraken (top-5 US venue), OKX and Bybit (global derivatives leaders), Gemini and Bitstamp (regulated legacy venues), and Crypto.com (consumer-brand-forward). Substitutes matter as much as the direct peers: decentralized exchanges like Uniswap and dYdX handle a growing share of long-tail spot volume, OTC desks like Cumberland, Galaxy, and B2C2 absorb the largest institutional trades bilaterally without touching public order books, and traditional brokerages such as Robinhood, Fidelity, and Schwab increasingly offer spot crypto exposure through familiar accounts. Fireblocks and other custody-infrastructure vendors are neither peers nor substitutes but represent a build-vs-buy question that every new exchange has to answer. EXU's public materials do not disclose which of these stacks it uses, so the competitive frame is inferred rather than confirmed.[CP001, CP023, CP024, CP026]

3.2 Feature, pricing, and regulator-posture comparison

Feature and pricing comparison is where EXU's public-record thinness matters most. Every listed peer publishes a fee schedule, a licensing footprint, and at minimum a marketing description of institutional services. EXU does not. On features, Coinbase covers all eight of the capability rows in the matrix (spot, derivatives via subsidiary, custody, prime, AI-lite via Advanced Trade, MiCA in progress, broad US MTLs, and adjacencies via Base L2 and USDC). Binance, Kraken, and OKX cover 6-7 rows. Bybit, Gemini, Crypto.com, and Bitstamp cluster around 4-5. EXU claims only two rows publicly — spot trading and AI-marketed features. On pricing, the industry converges around a tiered maker/taker schedule that reduces to under 10 basis points for the highest-volume institutions; without published fees, EXU's take rate and competitiveness cannot be scored. On regulatory posture, the gap between US/EU-regulated venues (Coinbase, Kraken, Gemini, Bitstamp) and offshore venues (Binance, OKX, Bybit) is the single most durable competitive axis, and EXU's position on it is unknown.[CP002, CP003, CP004, CP005, CP006, CP007]

3.3 Switching cost, multi-homing, and distribution power

Switching cost in the exchange market is asymmetric across segments. For retail users, the primary switching cost is fiat on/off ramp, KYC redo, and habitual UX; those costs are real but low enough that retail traders routinely maintain accounts on 2-3 venues. For institutional users, the switching cost is much higher: legal and compliance approval, custody-tech integration, and middle-office reporting all take 30-90 days per venue. That creates durable inertia for incumbent institutional relationships but also creates a moat for the first new venue an institutional buyer approves, because the same integration work does not have to be redone. Multi-homing behavior at both retail and institutional levels means EXU does not need to be the only venue, but must be one of the top 2-3 that a target buyer approves. Distribution power in the sector flows through brand trust (Coinbase, Gemini), stablecoin issuer alignment (Circle/USDC across many venues), traditional-broker distribution partnerships (Robinhood-Bitstamp acquisition, Fidelity Crypto), and social-media and referral programs (Binance, Bybit). EXU's distribution levers are not publicly disclosed and are a diligence ask.[CP027, CP028, CP029, CP030]

3.4 Moat durability, adverse evidence, and displacement risk

Moat durability for a new institutional-grade crypto exchange rests on three plausible pillars: (i) tier-1 investor trust, (ii) a robust regulatory license posture, and (iii) AI or execution features that draw on proprietary order-flow data. EXU has (i) by virtue of the Sequoia, Goldman, and Granite Asia syndicate. Pillar (ii) is unknown because EXU's licensing posture is not disclosed. Pillar (iii) is the weakest — AI trading features are commoditizing quickly through third-party APIs, and unless EXU's AI feeds on proprietary order-book depth or execution outcomes, it is a marketing wrapper rather than a moat. Adverse competitor evidence — SEC actions against Binance and Coinbase, Binance's $4.3B November 2023 settlement, and FTX's collapse — collectively means investors underwrite crypto exchanges with a higher risk premium than other fintech categories, and any new entrant benefits from this shift only if it can credibly demonstrate a materially better compliance posture. Displacement risk is highest from incumbents extending into AI-driven prosumer tools (Coinbase Advanced, Kraken Pro), from traditional brokerages entering crypto with existing user bases, and from offshore venues shipping product features faster.[CP018, CP019, CP020, CP021, CP022, CP025]

3.5 Exhibits

4.1 Revenue model and stream mix

Centralized crypto exchanges monetize through trading fees (retail spot, institutional spot, and derivatives), custody fees, staking revenue share, listing fees, and market-data subscriptions; a growing set of platforms also monetize through AI-signal or premium-tier subscriptions. EXU's public materials mention AI-signal features but do not disclose fee schedules, VIP tiers, or the actual stream mix. Using peer benchmarks — Coinbase's public 10-K filings, Binance's tiered fee schedule, Kraken's 0.16%/0.26% low-tier and 0.00%/0.10% high-tier fees, and Bitstamp's 0.4%/0.4% low tier — the industry blended take rate for institutional volume settles between 5 and 15 basis points, with retail take rates 3-4x higher and derivatives take rates lower still. Coinbase's 10-K also documents that custody and staking revenue is more stable than trading revenue, so exchanges with an institutional-adjacencies mix typically report lower revenue volatility than pure retail venues. EXU's institutional positioning would fit this pattern if the actual stream mix bears it out.[CI003, CI004, CI005, CI006, CI007, CI008]

4.2 GTM motion, cost structure, and unit economics benchmarks

Because EXU's GTM motion is not publicly disclosed, the analysis relies on public benchmarks. Peer 10-Ks and analyst work suggest CAC per retail user of $50-$200 with 6-18 month payback, and contribution margin per institutional account of $50k-$500k annually depending on volume tier. Cost structure for a compliant institutional exchange is dominated by engineering (matching engine, custody stack, AI features), compliance and licensing (MiCA, US state MTLs, MSB), audit and reporting (BIS-aligned prudential accounting per EY and PwC guidance), banking-rail relationships (Fed FSR and BIS treatment), and blockchain settlement. Gross margin drivers are take rate, market-maker rebate absorption, blockchain settlement cost, and fiat-rail cost; institutional take rate can compress gross margin from ~85% to ~50% at scale. Chainalysis reporting on illicit flows is a further reminder that reported revenue quality has to be discounted for enforcement-exposed volume. Grant Thornton's tax note flags that jurisdiction determines whether reported and booked revenue align, another reason EXU's domicile is a diligence ask.[CI005, CI015, CI019, CI020, CI021, CI022]

4.3 Public traction gaps and revenue model estimates

EXU's public traction is minimal: no revenue figure, no run-rate, no monthly active users, no trading volume tracked by CoinMarketCap, The Block, or DefiLlama. The most that can be modelled from the public record is a directional revenue model: at a 15 basis-point blended take rate, $1 billion of monthly volume implies roughly $15-20 million of annual revenue; $5 billion implies $75-100 million; $15 billion implies $225-300 million. None of these ranges is confirmable, and each depends on the actual retail-versus-institutional-versus-derivatives mix. Wikipedia's Coinbase entry documents how sensitive exchange revenue is to crypto price cycles, so any point estimate must be stress-tested through a bear-case that assumes 40-60% revenue drawdown in a crypto winter, which is what Coinbase's 10-K history has shown. Bloomberg and MarketWatch's COIN quotes are the ongoing public marker for the direct exchange comparable.[CI002, CI010, CI016, CI018, CI026, CI028]

4.4 Capital adequacy, financing dependency, and verdict

EXU has raised $160 million cumulatively across a Series B totalling $120 million and prior rounds not publicly disclosed. For a Series B crypto exchange this is consistent with 18-24 months of operating runway plus regulatory-capital cushions that MiCA and US state MTLs typically require, but no public source confirms EXU's actual burn, runway, or debt structure. Next-round triggers are likely a mix of licensing milestones and institutional customer wins; no roadmap is public. Working capital for an exchange includes segregated customer fiat balances, hot/cold wallet float, and settlement cushions, all of which are opaque without a data room. The BIS prudential regime materially raises the cost of any banking-integrated fiat rail, so EXU's banking partner list matters. The financial verdict is that capital adequacy is likely sufficient for the next 18-24 months, revenue quality and margin path are un-underwritable from the public record, and every meaningful financial metric requires a private data-room read before an investment decision can be made.[CI001, CI027, CI031, CI032, CI033, CI024]

4.5 Exhibits

5.1 Product definition and modules

EXU is publicly described as an institutional-grade crypto trading platform with AI-driven trading signals and risk management features. Because the company website did not respond during retrieval, the product definition has to be built from peer templates and the small set of external references. A reasonable inferred module map for a platform positioned this way includes: a matching engine, spot trading UI + API (REST + WebSocket + FIX), derivatives trading if licensed, MPC-based custody with cold storage backup, KYC/AML pipeline, blockchain analytics integration, market data feed, and an AI signal service. Coinbase Institutional publishes an equivalent product surface, so the peer benchmark is clear even if EXU's coverage is not. Each module carries specific trust dependencies that any institutional buyer will scrutinize, including SOC 2 controls on the matching engine, MPC operational discipline on custody, and Chainalysis or Elliptic integration on the AML pipeline.[CE001, CE002, CE003, CE013, CE014, CE019]

5.2 Architecture, dependencies, and workflow

The reference architecture for an institutional-grade exchange combines cloud infrastructure (AWS or GCP multi-region), a low-latency matching engine (C++ or Rust in-memory order book), trading APIs (REST + WebSocket + FIX), a custody stack (HSM + MPC + cold multi-sig), blockchain nodes (Bitcoin, Ethereum, Solana, and others), a KYC/AML pipeline (Persona, Onfido, Chainalysis, Elliptic), and an AI signal service built on foundation-model APIs. AWS Blockchain and Google Cloud publish partner-facing documentation that supports this stack, and Fireblocks provides a widely-used MPC custody option. NIST cybersecurity guidance and NIST post-quantum cryptography standards are the baseline controls that institutional buyers will benchmark against, and Ledger Academy provides developer-facing security education material widely referenced by exchange engineering teams. The customer onboarding workflow — first meeting, legal/compliance review, custody-tech integration, pilot trade, ramp — has 30-60 day and 30-60 day and further-30-day gates that translate directly into deployment complexity. EXU's specific vendors, latency targets, and blockchain coverage are all private.[CE004, CE005, CE006, CE007, CE009, CE010]

5.3 Differentiation, IP, and roadmap

For a crypto exchange, technical differentiation rests on four dimensions: matching engine quality (latency and throughput), custody security architecture (MPC + HSM + cold storage design), blockchain integrations (breadth and settlement finality across chains and L2s), and proprietary AI models. Patented software plays almost no role in exchange moats; the moat is operational competence and integration depth. EXU's public materials mention AI-driven trading signals as a marketing highlight, but without proprietary data — for example, EXU's own order-book depth used to train models — that AI is easily replicable using third-party foundation-model APIs. a16z's 2024 State of Crypto report documents rapid L2 scaling and material blockchain-cost declines, so exchanges that deeply integrate Ethereum L2s can offer materially cheaper withdrawals than those still routed through L1. Roadmap items that would strengthen EXU's technical moat include colocation-grade matching latency, proprietary market-data products, cross-margined derivatives, audited real-time proof of reserves, and a defined post-quantum key rotation strategy. None of these are publicly disclosed for EXU.[CE008, CE027, CE030, CE033, CE035]

5.4 Trust, safety, security, and quality controls

Trust controls are where an institutional-grade exchange either earns or loses buyer confidence, and they are entirely private for EXU. The standard institutional expectation is SOC 2 Type II, ISO 27001, independent penetration testing on an annual or continuous cadence, custody insurance for cold-storage assets, 24/7 trading desk support with named account managers, and post-FTX real-time proof of reserves. FATF Travel Rule compliance, ESMA implementing standards under MiCA, and IOSCO recommendations all translate into concrete platform-side integrations that add operating cost but also become moats once implemented. Blockchain analytics integration (Chainalysis, Elliptic) is a de facto sanctions and illicit-flow standard. The Hexatrust security-vendor ecosystem represents the SIEM/SOAR/IAM/DLP layer any regulated fintech typically integrates with. Fidelity Digital Assets research reinforces that institutional buyer expectations are demanding on all of these dimensions. None of these controls are disclosed publicly for EXU, which makes trust-control disclosure the single most important data-room ask.[CE019, CE020, CE021, CE022, CE023, CE024]

5.5 Exhibits

6.1 Customer segmentation and buyer map

EXU's stated customer focus per external coverage is institutional and sophisticated retail crypto traders. Because the company website was inaccessible during retrieval and no named customer is publicly disclosed, the segmentation model is inferred from stated positioning and peer templates. The most defensible model covers six segments: retail active traders (the historical volume engine of centralized exchanges), prosumer/API power users (fee-and-latency-sensitive), family offices (compliance-heavy, custody-first), hedge funds and prop trading desks (prime-and-derivatives-heavy), corporate treasuries (audit-heavy, low-turnover), and wealth-manager pass-through channels (RIA and private banks). Fidelity Digital Assets and PwC research both show institutional allocation growing but from a small base, so EXU's addressable buyer pool at the top end of the segment stack is real but capped. a16z's 220 million monthly active address count sets the macro end-user pool ceiling for retail. Statista aggregates geography splits that make it easier to model region-by-region growth once EXU discloses jurisdictions served.[CU001, CU002, CU003, CU004, CU005, CU023]

6.2 Adoption trajectory, named proofs, and diligence gaps

EXU has published no monthly active user count, no registered user count, no institutional account count, no monthly trading volume figure, no assets-under-custody figure, and no named lighthouse institutional customer. In a Series B unicorn context, that combined evidence gap is the most significant single diligence weakness in the entire report. Peer benchmarks provide the frame: Coinbase publicly cites 10,000+ institutional accounts, publishes named institutional case studies (BlackRock, Bridgewater-adjacent counterparties, etc.), and discloses trading volume in its 10-Ks; Binance publishes hundreds of millions of registered users; Kraken publishes partial disclosure. Wikipedia's Coinbase and Binance pages document the scale ceiling. The Block and DefiLlama provide indirect signals — flow concentration and custody asset stickiness — that would allow triangulation once EXU appears on those data feeds. Investopedia's reviews and CoinDesk's ongoing customer coverage will eventually be a real-time customer signal for EXU, but neither has substantive EXU coverage in the sources retrieved. The named customer proof table has no rows for EXU by design.[CU007, CU008, CU009, CU010, CU011, CU012]

6.3 Retention drivers and customer economics

Retention drivers for institutional customers in this segment are custody trust, fee competitiveness, execution quality, product breadth, and account-manager support; EY and Morgan Stanley research both emphasize that trust and audit trail matter more than fees alone for institutional decision drivers. Retention drivers for retail customers are UX simplicity, fee competitiveness, brand trust, and stablecoin availability. Consulting benchmarks suggest well-managed retail exchanges hold 30-50% of a monthly acquisition cohort at 12 months, while institutional cohorts stay above 80% year-over-year given onboarding cost. FTC consumer warnings and the FTX collapse both raise the trust bar retail customers apply to any new venue; institutional buyers use FTX as the reference case for counterparty diligence discipline. IOSCO customer-protection recommendations, FATF Travel Rule requirements, and FinCEN MSB obligations all show up in the onboarding UX as friction the platform must minimize without violating obligation. IMF cross-border policy work and Fed FSR customer-exposure discussion complete the macro frame under which EXU's retention has to be built.[CU013, CU014, CU015, CU017, CU018, CU019]

6.4 Expansion paths and concentration risk

Expansion paths for institutional customers typically follow a staged sequence: (a) custody-only relationship, (b) execution added, (c) prime services (borrow, cross-margining), (d) derivatives, (e) structured products. Deloitte's enterprise adoption research confirms that treasuries and enterprise buyers move through this sequence very slowly. Land-and-expand from custody to execution is the highest-leverage expansion path because custody accounts are exceptionally sticky and provide a natural funnel into higher-take-rate services. Concentration risk for a new institutional exchange typically means one to three lead accounts produce a majority of Year 1 revenue; without disclosure of EXU's top-account share, this is the largest single unquantifiable customer-side risk. Channel dependence on wealth managers (RIAs, private banks) creates similar concentration risk but with renegotiable economics. S&P Global counterparty rating flow feeds into how institutional risk teams weigh EXU's counterparty profile, and adverse sector news (FTX, FTC warnings, Fed FSR) collectively raise the retention bar even for genuinely well-run platforms. Every metric in the concentration risk table is a mandatory data-room ask.[CU024, CU025, CU026, CU027, CU030, CU033]

6.5 Exhibits

7.1 Regulatory and legal risk landscape

Regulatory risk is the single most extensively documented risk category for a crypto exchange. The SEC has active litigation against Binance (13 charges filed June 2023) and Coinbase (unregistered exchange complaint filed June 2023), and continued enforcement actions across 2024. Binance and CEO Changpeng Zhao settled with U.S. authorities for $4.3 billion on AML and sanctions charges in November 2023. FinCEN classifies crypto exchanges as MSBs subject to BSA CTR/SAR reporting. FATF Travel Rule and VASP guidance shape cross-border AML expectations. The CFTC actively regulates crypto derivatives and warns of pervasive retail fraud. In the EU, MiCA and ESMA implementing standards establish a comprehensive licensing regime whose transition period ends in the 2024-2025 window. IOSCO's 18 policy recommendations are the global baseline. On top of federal action, state Attorneys General — most notably California and New York — bring parallel civil actions. For an exchange whose licensing posture is not publicly disclosed, every one of these regulatory dimensions is a critical or material impact risk with unknown mitigation maturity.[CR001, CR002, CR003, CR004, CR007, CR008]

7.2 Operational, quality, and security risk

Operational risk for a crypto exchange is dominated by cyber intrusion, MPC/HSM key compromise, exchange outage during volatility, insider fraud, reconciliation drift, blockchain reorgs, and DDoS abuse. NIST cybersecurity guidance is the baseline institutional buyers expect. Cyber and key-compromise risks are the most severe: post-Mt.Gox and post-FTX experience shows that a single custody incident with customer loss is fatal for institutional credibility, regardless of technical merit. Chainalysis reporting on illicit exchange flows and sanctions exposure reinforces that operational controls have to include blockchain analytics screening. The FBI IC3 annual reports document billions of dollars in reported crypto-related crime losses. The SEC has an ongoing cybersecurity enforcement history that touches crypto issuers and platforms. Post-quantum cryptography (NIST PQC) is a slower-moving risk but real for long-lived cold storage keys. EXU discloses no SOC 2, ISO 27001, penetration testing summary, or proof-of-reserves attestation, so every operational risk mitigation is unknown from the public record.[CR006, CR013, CR017, CR018, CR020, CR021]

7.3 Partner, people, and financial risk

Partner dependency risk for EXU concentrates in fiat banking (limited crypto-friendly banks), cloud infrastructure (typical single-cloud architecture), MPC/custody vendors (Fireblocks and BitGo dominant), Chainalysis/Elliptic for sanctions screening (near duopoly), stablecoin issuers (USDC and USDT), and foundation-model providers for AI features. Single-vendor failure is a realistic scenario for any of these. People risk is elevated because EXU's founders and executives are not publicly named — Silicon Valley pattern-matching says a Series B unicorn without a named leadership team is unusual and warrants a specific data-room read on key-person concentration, retention equity, and succession planning. Financial and model risk includes concentrated top-account revenue for a new exchange (typically one to three accounts drive Year 1 volume), thin market-maker rebate margins that squeeze gross margin at institutional scale, and reliance on stablecoin issuer solvency for settlement. BIS prudential standards indirectly raise the cost of banking partners. FTC consumer warnings and Fed FSR crypto references keep macro-regulatory attention high.[CR014, CR015, CR016, CR019, CR023, CR027]

7.4 Mitigations, monitoring, and kill criteria

Mitigations for the risk register are largely industry standard: multi-jurisdiction license portfolio and outside counsel retention (regulatory), MPC + cold storage + insurance + SOC 2 + continuous penetration testing (cyber/custody), real-time proof of reserves + transparency reports (reputational), named leadership + retention equity + succession plans (people), diversified fee mix + adjacencies + multi-bank relationships (financial), and multi-cloud and multi-custody architecture (partner). Monitoring indicators that institutional buyers actually track include Chainalysis screening results, S&P counterparty rating actions, DefiLlama outflow spikes as a leading indicator of trust erosion, and CoinDesk-style enforcement news. Kill criteria that should be pre-negotiated at term sheet include: any material regulatory enforcement action against EXU, any custody incident with customer loss, founder or CTO exit within 12 months of investment, and failure to secure MiCA passporting by end of 2026. Each kill criterion maps to a specific monitoring indicator and a specific mitigation path, and each should be tested in a data-room deep dive before writing a check.[CR030, CR031, CR032, CR033, CR035, CR036]

7.5 Exhibits

8.1 Thesis, anti-thesis, and recommendation

The EXU investment thesis rests on four pillars: tier-1 investor identity (Sequoia, Goldman Sachs, Granite Asia), AI-driven product differentiation, MiCA licensing potential as EU market unlock, and institutional flow growth as demand-side tailwind. The anti-thesis is equally clear: investor identity does not substitute for operating metrics, AI features are cheap to build with third-party foundation-model APIs and require proprietary data to be defensible, MiCA license status for EXU is unknown, and post-FTX flight to quality tends to benefit publicly regulated incumbents (Coinbase Institutional, Kraken) before it reaches new entrants. Given that every operating metric — revenue, take rate, users, trading volume, license posture, retention, burn — is private and the company website was inaccessible during retrieval, the recommendation is "research-more" with low confidence, high risk rating, and an "expensive" valuation stance. Both TechCrunch's narrative and PitchBook's data anchor a $1.2B mark, but neither confirms operating metrics; base-case scenario modelling suggests a $600-800M EV that sits below the current mark. Coinbase's multi-cycle equity value from $86B peak to sub-$10B trough reminds any private buyer that crypto exchange multiples are highly cycle-sensitive.[CV001, CV002, CV005, CV008, CV017, CV020]

8.2 Entry discipline, preference stack, and public-price support

Entry discipline for an EXU Series B investment matters more than usual because the current mark is set by the syndicate rather than by any independently verifiable operating metric. Standard Series B preferred stock terms in a Sequoia-led round typically carry 1x non-participating liquidation preference and pro-rata rights, but specific EXU terms are not publicly disclosed. The public-price support question is whether the $1.2B mark can be justified against comparable transactions: PitchBook's 2025 crypto VC report and the small set of comparable private rounds together with Coinbase's public equity value provide the anchor. Coinbase's SEC 10-K filings and its SEC EDGAR filings page give the deepest reference financial detail, and Yahoo Finance, MarketWatch, and Bloomberg all publish COIN quotes so multi-source public-price data is available. On a revenue-multiple basis, the current mark implies materially better operating metrics than any comparable private exchange has demonstrated at Series B without public disclosure — hence the "expensive" valuation stance. On an AUM-multiple basis using DefiLlama's CEX reserve tracker as a sanity check, the private-market benchmark is similar. Dilution and preference overhang from earlier rounds ($40M pre-Series B) are further unknowns that should be scored in a data-room read.[CV002, CV003, CV004, CV012, CV017, CV026]

8.3 Comparable set and scenario framing

The comparable set is deliberately mixed to provide multiple lenses: Coinbase as the public benchmark with SEC 10-K disclosure and multi-cycle market-cap history from roughly $60-90B currently down to sub-$10B in crypto winters; Kraken as a comparable private multi-round history with rumored IPO path; Binance as the private opaque scale reference indicating that even top-of-market private valuations are hard to mark; Gemini as a regulated-posture private peer with disclosed prior secondary rounds around $7B; Bitstamp as an M&A comparable being acquired by Robinhood for approximately $200M; OKX as a large private but opaque global peer. Messari's Q4 2024 sector report and Galaxy Research provide outside outlook framing. CFA Institute methodology research and Aswath Damodaran's public valuation research together anchor the framework for scenario modelling. The bull/base/bear scenario table shows illustrative EV bands: bear $200-400M in a crypto-winter drawdown similar to 2022-2023 with take-rate compression, base $600-800M at 15 bps blended take rate on $5B monthly volume, bull $2.8-3.2B assuming $15B monthly volume, 20 bps blended take rate, and 8x revenue multiple after a licensing sweep and institutional wins. Each range carries wide error bands and is illustrative until private data is available.[CV006, CV007, CV010, CV011, CV013, CV014]

8.4 Exit readiness, thesis-break triggers, and final diligence asks

Exit readiness for a private crypto exchange at EXU's scale is gated by three prerequisites: regulator posture (licenses secured and disclosed), audited financial statements at institutional standards, and named institutional customer proofs. EXU has none of these publicly demonstrated as of the current date. Thesis-break triggers that would force a downgrade from "research-more" to "avoid" include: any material regulatory enforcement action against EXU, any custody incident with confirmed customer loss above $10M, founder or CTO exit within 12 months of investment, failure to secure MiCA passporting by end of 2026, reserve outflows exceeding 25% in a week (observable via DefiLlama), and any adverse Chainalysis screening finding. Final diligence asks are focused: 24 months of monthly revenue and take rate to anchor revenue models, customer list with concentration by top-10 to reveal concentration risk, full license schedule (US MTLs, MSB, MiCA, other) to determine geographic revenue ceiling, custody model diagram plus insurance policy summary, SOC 2 Type II attestation report, fully diluted cap table with preference stack, roadmap with milestones and headcount plan, and audited financial statements or interim unaudited if audit is pending. Each of these asks maps to a specific valuation input, and each is the precondition for moving from "research-more" to a "buy" or "avoid" call.[CV033, CV035, CV036, CV040]

8.5 Exhibits