PROPELOO

NFT / MARKETPLACE ENGINEERING

Build NFT infrastructure beyond the mint.

PROPELOO engineers NFT marketplace systems — from smart contract architecture and lazy minting infrastructure to royalty enforcement, auction mechanics, IPFS metadata pipelines and the indexing layer that makes on-chain ownership queryable at product speed.

An NFT marketplace is not OpenSea with your branding. It is a financial exchange for digital ownership rights.

Royalty enforcement across secondary sales requires ERC-2981 and marketplace-level enforcement — neither is guaranteed. Lazy minting requires signature verification infrastructure. Auction mechanics require real-time bidding state management. Metadata on centralised servers is a single point of failure and a rug vector. PROPELOO engineers the full marketplace stack: contracts, metadata permanence, royalty enforcement, auction infrastructure and the indexing layer that powers it all.

What sits underneath a production NFT marketplace.

An NFT marketplace is not a frontend that calls OpenSea. It is a smart contract system, a metadata pipeline, an indexing layer and a trading infrastructure — each with its own failure modes.

System Layers

  • Token Contract Layer: ERC-721/1155/6551 contracts, royalty configuration (ERC-2981), mint phases, allowlist, transfer hooks
  • Marketplace Contract Layer: Listing contract, order book, escrow, royalty enforcement, fee distribution, signature verification
  • Metadata / Storage Layer: IPFS/Arweave upload pipeline, metadata schema, reveal mechanics, immutable CID pinning, fallback URIs
  • Indexing Layer: Transfer event indexing, ownership tracking, trait aggregation, rarity scoring, listing state, price history
  • Frontend & Wallet Layer: Collection pages, listing flow, transaction UX, WalletConnect, ERC-4337, gas estimation, error handling

Core Technical Capabilities

  • Marketplace Smart Contract Architecture

    Full marketplace contract system — listing, bidding, offer, bundle and auction contracts with atomic settlement, escrow management, signature-based orders and fee distribution to protocol, creator and platform.

  • Lazy Minting Signature Infrastructure

    Off-chain signature-based lazy minting — NFTs minted on first purchase rather than at collection creation, reducing gas cost for creators while maintaining provenance through cryptographic signature verification.

  • Royalty Enforcement (ERC-2981)

    On-chain royalty configuration via ERC-2981 with marketplace-level enforcement — transfer hook-based royalty collection that applies on every secondary sale regardless of which marketplace processes the trade.

  • Auction & Bidding Mechanics

    English auction, Dutch auction and sealed-bid auction contracts with real-time bid tracking, bid increment enforcement, auction extension on last-minute bids, reserve price mechanics and automatic settlement.

  • Metadata & IPFS Infrastructure

    Metadata creation, IPFS upload pipeline, Arweave permanent storage, CID immutability enforcement, batch reveal pipeline, dynamic metadata for evolving NFT properties and on-chain fallback URIs.

  • Cross-chain Bridge Integration

    Cross-chain NFT transfer infrastructure — lock-and-mint bridge design, chain-specific marketplace deployment, unified cross-chain portfolio view and liquidity aggregation across chains.

How we think about NFT marketplace engineering.

An NFT without utility is a JPEG. The infrastructure around ownership, royalties, interoperability and secondary markets is where the product actually lives.

  • Token standard is a product decision

    ERC-721, ERC-1155 and ERC-6551 have fundamentally different trade-offs in gas cost, composability and on-chain account capability. Choosing the wrong standard means redeployment — and the provenance history of the original collection cannot be transferred.

    Axiom:

  • Metadata permanence is a promise

    NFTs pointing to centralised servers are not truly owned — they depend on the platform's continued operation. IPFS or Arweave pinning with immutable CIDs locked in the contract is the only architecture that delivers on NFT's permanence promise.

    Axiom:

  • Royalties require architectural enforcement

    EIP-2981 royalties are advisory. Marketplaces can zero them out. Transfer hook-based royalty enforcement is the only architecture that guarantees creator revenue on secondary sales — and it requires careful marketplace compatibility design.

    Axiom:

  • The secondary market determines project longevity

    Primary mint revenue funds the launch. Secondary trading volume, royalty income and floor price sustainability determine whether a project has a community in year two. Marketplace design is a product strategy decision.

    Axiom:

The decisions that define an NFT marketplace.

These choices affect gas economics, royalty enforcement, metadata permanence and ecosystem compatibility. Most cannot be changed post-deployment.

  • ERC-721 vs ERC-1155 vs ERC-6551

    Impact: Token standard defines composability, gas economics and ecosystem compatibility. Migrating post-launch loses provenance history and confuses secondary market aggregators.

    • ERC-721 — one token per unique item, clear provenance, higher gas per mint, universal marketplace support
    • ERC-1155 — semi-fungible, batch minting, lower gas, single metadata URI per token type
    • ERC-6551 (Token Bound Accounts) — NFTs that own assets and have on-chain accounts, highest utility, limited tooling support
  • Lazy mint vs eager mint

    Impact: Lazy minting shifts gas cost to buyers. Eager minting requires upfront capital but simplifies provenance and eliminates voucher signature verification infrastructure.

    • Lazy mint — signed voucher approach, minted on first purchase, lower creator gas cost upfront
    • Eager mint (pre-mint) — all tokens minted at creation, higher upfront gas, immediate full ownership
    • Batch reveal — minted at mint time with placeholder metadata, traits revealed post-sale
  • On-chain vs off-chain royalty enforcement

    Impact: Transfer hook enforcement guarantees creator royalties but limits the secondary markets your tokens can trade on. This is a creator economy vs liquidity trade-off that must be made explicitly.

    • EIP-2981 only — royalty info on-chain, enforcement by marketplace choice, widely bypassable
    • Transfer hook enforcement — royalties enforced on every transfer regardless of marketplace, restricts listing on permissionless DEXs
    • Operator filter registry (OpenSea legacy) — platform-specific enforcement, partially deprecated
  • IPFS vs Arweave vs centralised metadata

    Impact: Centralised metadata creates a rug vector. IPFS without pinning degrades over time. Arweave provides genuine permanence. The choice defines whether the NFT ownership promise is real.

    • IPFS — content-addressed, decentralised, requires active pinning service to remain available
    • Arweave — permanent storage, pay once, no ongoing pinning cost, slightly higher upfront cost
    • Centralised (S3/CDN) — fastest delivery, single point of failure, rug risk if platform shuts down
    • On-chain metadata — fully permanent, expensive (limited to text/small SVGs)
  • Custodial vs non-custodial marketplace

    Impact: Non-custodial marketplaces require secure escrow contracts. Signature-based listings are gas-efficient but require careful cancellation and transfer mechanics to prevent double-sell vulnerabilities.

    • Custodial — platform holds NFT during listing, simpler UX, custody liability
    • Non-custodial with escrow contract — buyer-paid escrow, no custody transfer until purchase, smart contract risk
    • Signature-based listing (seaport-style) — no custody transfer on listing, gas-efficient cancellation challenge
  • L1 vs L2 deployment

    Impact: Chain selection follows where the target buyer community already has wallets and trading habits. Gas cost per mint is a secondary consideration — low-cost L2s have enabled high-volume collections that L1 pricing would have made impossible.

    • Ethereum L1 — deepest liquidity, widest wallet support, highest gas per mint
    • L2 (Base / Arbitrum / Polygon) — 10-100x cheaper minting, growing NFT ecosystem, bridge latency for L1 liquidity
    • Solana — high throughput, sub-cent minting, different wallet and marketplace ecosystem

What NFT marketplace infrastructure becomes.

  • PFP / Art Collectible Platform

    10k generative collection with allowlist phases, reveal pipeline, trait rarity scoring, royalty enforcement, creator dashboard and secondary marketplace integration.

  • Gaming Item Marketplace

    On-chain item registry for in-game assets — ERC-1155 semi-fungible items, cross-game portability, staking mechanics, in-game economy bridge and player-to-player trading.

  • Event Ticketing System

    NFT-based event tickets with transfer restrictions, resale price caps, proof of attendance (POAP), on-site QR verification and secondary market royalties to the event organiser.

  • Digital Certificate Platform

    Verifiable on-chain credentials — education certificates, professional licences, completion proofs — with revocation mechanics, issuer verification and public on-chain lookup.

  • IP Licensing & Rights

    On-chain licensing infrastructure for digital IP — usage rights encoded in token metadata, sublicence mechanics, revenue-sharing contracts and licence revocation logic.

  • Brand Loyalty & Membership NFTs

    NFT-gated membership systems with tiered access, dynamic metadata reflecting holder status, benefit distribution, expiry logic and holder-exclusive feature access.

The NFT marketplace engineering stack.

Contract standards and storage choices drive the architecture. Tooling follows the chain deployment target.

  • Smart Contracts

    Stack: Solidity, ERC-721 / ERC-1155 / ERC-6551, ERC-2981 (Royalties), Hardhat, Foundry, OpenZeppelin

  • Metadata & Storage

    Stack: IPFS (nft.storage / Pinata), Arweave (Bundlr / ArDrive), On-chain SVG, Metadata Schema Design, Reveal Pipeline

  • Indexing & Data

    Stack: The Graph (Custom Subgraph), Alchemy NFT API, Moralis, Custom Indexer, PostgreSQL, Redis

  • Marketplace Infrastructure

    Stack: Seaport Protocol (OpenSea), Custom Order Book, Auction Contracts, Escrow Contracts, Signature Verification, Batch Operations

  • Frontend & Wallet

    Stack: React / Next.js, Wagmi / viem, RainbowKit, WalletConnect v2, ERC-4337 (Gasless Mint), IPFS Gateway CDN

  • Infrastructure

    Stack: AWS / Vercel, Alchemy / Infura, Tenderly (Monitoring), OpenZeppelin Defender, Datadog, IPFS Pinning Service

NFT marketplace security spans contract, metadata and frontend attack surfaces.

NFT collections hold real economic value. Every layer — contract, metadata storage, frontend and signing flow — is a potential attack surface.

  • Metadata Mutability & Rug Risk

    NFT collections pointing to centralised servers allow the operator to change or delete artwork and trait data after mint — effectively rugging buyers. Immutable IPFS CIDs locked in the contract at reveal time are the only reliable protection. The contract must not allow tokenURI override post-reveal.

  • Royalty Bypass Attacks

    Marketplaces routinely zero-out EIP-2981 royalties. Transfer hook-based enforcement bypasses marketplace-level royalty skipping but restricts trading to compliant marketplaces. Projects must make an explicit choice — enforced royalties with limited liquidity, or advisory royalties with maximum liquidity.

  • Reentrancy in Marketplace Contracts

    Marketplace escrow contracts handling ETH transfers are primary reentrancy targets. Checks-effects-interactions pattern, reentrancy guards and pull-over-push payment patterns are required on all settlement and bidding functions that handle ETH.

  • Flash Loan Bid Manipulation

    NFT loan protocols using floor price oracles can be manipulated by flash-borrowing assets to temporarily inflate the collection floor price. TWAP floor pricing, collection-level price smoothing and minimum auction duration protect against single-transaction price manipulation.

  • Centralised Metadata Dependency

    Collections using centralised metadata storage depend on the operator's ongoing infrastructure commitment. IPFS pinning services, Arweave permanent storage, on-chain fallback URIs and decentralised content addressing are layered mitigations that reduce single-point-of-failure risk.

  • Bridge Exploits for Cross-chain NFTs

    Cross-chain NFT bridges have been responsible for hundreds of millions in losses. Lock-and-mint bridges with multi-sig validator sets, optimistic fraud proofs, time-delayed withdrawals and transaction volume caps reduce but do not eliminate bridge risk.

From collection concept to live marketplace.

  1. 01. Contract & Marketplace Architecture

    Token standard selection, royalty strategy, marketplace model, metadata storage design and smart contract system specification.

  2. 02. Contract Development

    ERC-721/1155 contract development, marketplace contract, royalty enforcement, lazy minting infrastructure and Foundry test suite with full invariant coverage.

  3. 03. Metadata Pipeline

    Metadata schema design, trait generation tooling, IPFS/Arweave upload pipeline, reveal mechanics and immutable CID locking in contract.

  4. 04. Indexing & Data Layer

    The Graph subgraph or custom indexer for transfer events, ownership tracking, listing state, bid history, rarity scoring and price analytics.

  5. 05. Frontend Marketplace

    Collection pages, listing flow, auction interface, offer management, profile pages, transaction UX and wallet connection with full error state handling.

  6. 06. Security Audit & Testing

    Internal Foundry fuzz testing of contract invariants, security review against NFT-specific attack patterns, third-party smart contract audit and frontend security review.

  7. 07. Launch & Monitoring

    Testnet deployment and community testing, mainnet deployment, IPFS/Arweave metadata pinning verification, monitoring infrastructure and post-launch support.

NFT Marketplace Engagements

Production NFT platforms built for creators, collectors and institutions.

  • Multi-chain Creator Marketplace

    Challenge: Client needed a NFT marketplace supporting multiple blockchains with lazy minting to eliminate upfront gas costs for creators.

    Architecture: ERC-721A for batch minting efficiency, ERC-1155 for editions and bundles. Lazy minting via signed vouchers redeemed on first purchase. IPFS with Pinata for metadata permanence. The Graph subgraph for real-time collection and activity indexing.

    Outcome: Platform launched with 5,000+ creators onboarded in 90 days. Lazy minting reduced creator onboarding friction to zero. Cross-chain support covers Ethereum, Polygon and Arbitrum.

  • Enterprise NFT Platform for Loyalty Programs

    Challenge: Retail brand wanted NFT-based loyalty rewards accessible to non-crypto users — no wallets, no gas, no complexity.

    Architecture: Custodial wallet management with email-based account recovery. Fiat onramp via Stripe for non-crypto users. ERC-1155 for loyalty token tiers. Off-chain metadata with on-chain hash anchoring for enterprise compliance.

    Outcome: Deployed across 50 retail locations. 200,000+ loyalty NFTs minted. 95% of users had no prior crypto experience — adoption validated the custodial model.

  • NFT-Collateralised Lending Protocol

    Challenge: DeFi protocol wanted to unlock liquidity from blue-chip NFT collections without forcing sales.

    Architecture: NFT vault contracts accepting ERC-721 collateral. Chainlink oracle for floor price feed with TWAP smoothing. Fixed-term and open-term loan structures. Dutch auction liquidation for undercollateralised positions.

    Outcome: Protocol handles over $8M in active NFT-backed loans. Liquidation system resolved 100% of bad debt without protocol loss. Chainlink integration ensures reliable floor price data.

Frequently Asked Questions

What token standard should we use for our NFT collection?

ERC-721 for unique one-of-one or 1/1-per-item collections where provenance clarity matters most (PFPs, art, credentials). ERC-1155 for semi-fungible items where multiple copies of the same token exist (game items, editions, tickets). ERC-6551 (Token Bound Accounts) when the NFT needs to own other assets — useful for game characters, identity-based tokens or composable NFT systems. The standard cannot be changed post-deployment without a new contract and lost provenance history.

How do we ensure metadata is truly permanent?

Three requirements: store metadata on IPFS or Arweave (not centralised servers), pin the content with a reliable pinning service (nft.storage, Pinata, or Arweave for permanent storage), and lock the IPFS CID into the smart contract so the tokenURI cannot be changed after reveal. On-chain fallback URIs pointing to an IPFS gateway provide redundancy. Arweave provides the strongest permanence guarantee — pay once, stored permanently by the Arweave network. IPFS requires ongoing pinning.

How do we enforce royalties on secondary sales?

EIP-2981 makes royalty information available on-chain, but enforcement is at the marketplace's discretion — most permissionless DEXs do not enforce it. Transfer hook-based enforcement intercepts every transfer and collects royalties regardless of which marketplace processes the trade. The trade-off: transfer hooks restrict trading to marketplaces that support them, limiting secondary market liquidity. Most new collections targeting creator sustainability choose enforced royalties with a curated marketplace over advisory royalties on any exchange.

What is lazy minting and when should we use it?

Lazy minting allows tokens to exist as signed off-chain vouchers until the first purchase — the token is minted to the buyer at the moment of sale, not at collection creation. Benefits: creators avoid upfront gas costs for unminted supply, failed collections don't waste gas, and minting scales to demand. Requirements: signature verification infrastructure, voucher management (tracking which vouchers have been redeemed) and careful nonce management to prevent double-spend. Use lazy minting when the collection is large and you cannot guarantee sell-through.

How do we implement a fair auction mechanism?

Auction fairness requires: minimum bid increment to prevent one-wei overbidding games, auction extension on last-minute bids (extending the auction by N minutes when a bid arrives in the final window prevents sniping), reserve price enforcement so the auction only settles above the minimum, and atomic settlement so winning bid payment and NFT transfer happen in the same transaction. English auctions (ascending price) are most common. Dutch auctions (descending price) work well for price discovery on new collections.

How do we build a reveal mechanic for a generative collection?

A standard reveal mechanic: mint all tokens with placeholder metadata pointing to a loading image, use a Chainlink VRF random seed committed at mint-close to generate the trait distribution, generate all metadata files with the VRF-seeded trait assignments, upload to IPFS, and set the baseURI in the contract to the IPFS directory CID. The VRF commitment proves the trait distribution was not manipulated after seeing which wallets minted. This prevents pre-reveal metadata sniping and provably fair trait distribution.

What is ERC-6551 and when is it useful?

ERC-6551 (Token Bound Accounts) allows any ERC-721 token to have its own Ethereum account — the NFT can hold ETH, ERC-20 tokens, other NFTs and execute transactions. Useful for: game characters that carry their own inventory, identity-based NFTs that accumulate credentials and assets, composable NFT systems where items equip to characters. ERC-6551 is a relatively new standard with growing but not universal marketplace and tooling support. Use it when the composability or ownership model genuinely requires on-chain accounts.

How do we handle gas costs for large collections?

Gas optimisation for large collections: use ERC-1155 for fungible editions instead of ERC-721. Use lazy minting to defer gas to buyers. Use ERC-721A (Azuki's optimisation) for sequential minting which packs multiple mint operations into fewer storage writes. Use batch operations for allowlist management. Deploy on L2 (Base, Arbitrum, Polygon) where minting costs $0.01-0.10 vs $5-50 on L1. If collection size is over 10,000 and gas is a concern, L2 deployment is the right architectural choice.

Do we need a smart contract audit for an NFT collection?

Yes — for any collection expecting significant trading volume or holding real economic value. A marketplace contract handling ETH is an immediate audit target. Even ERC-721 contracts with custom minting logic, allowlist mechanics or royalty hooks contain logic that should be reviewed. Internal review (Slither, Foundry fuzz testing) should precede a third-party audit. Code4rena and Sherlock offer competitive audit models for smaller collections. Trail of Bits, OpenZeppelin and Spearbit provide comprehensive audits for high-value systems.

How long does an NFT marketplace take to build?

A collection with smart contracts, metadata pipeline, reveal mechanic and a clean frontend marketplace takes 8-14 weeks from architecture to mainnet launch. A full custom marketplace with auction mechanics, offers, bundles, royalty enforcement and cross-chain support takes 16-24 weeks. Smart contract audit (4-6 weeks) typically gates the mainnet launch timeline. We deliver in milestone-based sprints with testnet deployments at each stage.