Crypto Exchange

FutureXchange is a crypto only exchange that enables investors to exchange their Bitcoin, Ethereum or other alt-coins via a basic open market buy/sell order ledger. The interface is responsive and code base isomorphic, being easily distributable to multiple devices / platforms from one Node.JS based ES6 standards codebase that uses npm and React for display. The intended devices in order of importance are Mobile, Desktop and Tablet. FutureXchange does not allow fiat money deposits. Feature Requirements The following is a listing of all the features required for the 0.1 specification to be completed. 1. Markets a. List available markets i. List orders for each market ii. Display market data, 24 hour high low, volume and current orders b. Admin control of markets i. Change listing ii. De-activate / activate market iii. Add new market c. Place orders i. Place a buy order ii. Place a sell order iii. Place a market order for instant execution iv. Cancel pending order v. Place stop loss order d. Order Matching i. Match orders placed in market and process transaction ii. Update users notifications e. 2. Notifications a. Send push notifications on: i. Completed order ii. New deposit iii. Completed withdrawal request iv. System announcement (requires admin control) 3. Deposits a. Deposit crypto to crypto wallet b. Generate a new wallet address on demand c. Give labels to wallets 4. Withdrawal a. Withdrawal crypto to crypto wallet and display pending process 5. User Auth and Accounts a. 2FA integration b. KYC integration c. Secure authentication using token based user auth d. Forgot password secure recovery e. Request private key f. Shutdown account g. Admin control of users i. Display all transactions and filter by date or tx ID ii. Display all IPs recorded for user sessions iii. Ability to deactivate / temporary ban a user account iv. Ip Ban facility v. Country block facility vi. Email domain block facility 6. Contact Us, Terms and FAQ pages a. Admin facility to edit pages Security Concerns / Compliancy Due to being a FinTech company, security is one of our primary concerns to the safety of our customers and business. For these reasons we require the latest and best practices when it comes to securing our website, and sensitive data. All APIs and forms must be secured and authenticate users via token authentication to avoid XSS and CSRF exploits. User data must always be sent encrypted and SSL is to be used wherever possible. Implementation of Two-factor Authentication (2FA) will help to prevent malicious attacks on our user accounts from going unnoticed, so must be implemented throughout the app in a consistent manner whenever a user is performing a login, withdrawal or change to their account data. The code and servers will be audited regularly and the standards must remain PCI compliant.