; (ii) conduct an effective risk-based analysis of the code of the decentralized crypto asset exchange to determine whether crypto asset transactions can occur on the exchange securely, consistently, and immutably; (iii) verify that the code for the decentralized crypto asset exchange is widely available to the public; (iv) verify that there are appropriate developer documents relating to the decentralized crypto asset exchange that appropriately disclose all risks of the software; (v) conduct an effective risk analysis with respect to the decentralized crypto asset exchange, including— (I) money laundering and sanctions evasion; (II) settlement; (III) fraud and market manipulation; and (IV) operational and cybersecurity risk, including— (aa) the use of multi-signature wallets; (bb) integration with third-party software or vendors; (cc) any material efforts to alter the functionality of the protocol; and (dd) all other material risks; (vi) implement robust policies and procedures to mitigate the risks identified under clause (v); (vii) disclose the risks identified under clause (v) using plain language to customers; (viii) maintain robust capability to detect market manipulation, fraud, money laundering, and sanctions evasion occurring on the decentralized crypto asset exchange, including through the use of alternative tools that will properly target those risks, including through distributed ledger intelligence companies; (ix) ensure that the merchant is not trading with a decentralized crypto asset exchange on a principal basis, but solely on an agency basis at the request of a customer