Rate Limiting and Throttling

Rate limiting and throttling are security and operational controls that restrict the number of requests a user or bot can make to an API within a specific timeframe. In the context of high-frequency trading and derivatives platforms, these measures prevent system overload, protect against denial-of-service attacks, and mitigate the impact of compromised API keys.

By limiting the speed at which orders can be placed or canceled, the exchange ensures that its matching engine remains stable and fair for all participants. Furthermore, rate limiting acts as a circuit breaker; if an attacker gains access to an API key, they cannot execute an infinite number of trades before being detected and blocked.

This control is essential for maintaining market integrity and preventing malicious actors from manipulating order flow or exploiting price discrepancies. Effective rate limiting policies are carefully balanced to allow legitimate trading activity while providing a strong defense against automated abuse and system exploitation.