HackRead

When Market Data Can’t Be Trusted: Why Feed Integrity Matters to Order-Flow Analysis


Every chart used to analyze order flow relies entirely on market data, so it inherits flaws in it. Drop a single trade, delay one quote, or lose the connection for a few seconds, and the screen can show something the market never did. For anyone reading volume, delta, or order-book activity, the whole method assumes each event arrived intact and on time.

A frozen chart is easy to spot. An incomplete one is not, because it still draws clean, convincing patterns. A footprint can show buyers controlling a price level when the missing trades would say otherwise, and a lagging order book can keep displaying bids pulled moments ago.

This shows most clearly on a trading footprint chart, which breaks each candle into the trades executed at every price. The explanation on the ATAS official website shows how tick-by-tick exchange data becomes volume, Bid × Ask, and delta clusters, allowing traders to examine activity hidden inside ordinary candles. However, the accuracy of those readings depends on the underlying trade records.

Where Feed Problems Distort the Analysis

One Missing Trade Is Enough

Before it reaches a chart, a trade passes through the exchange that generates the message, the provider that distributes it, and the software that draws it. A fault at any stage changes what the trader sees.

Say the exchange recorded 120 contracts bought at the ask and 100 sold at the bid, but 50 of those sell contracts never reached the feed:

Bought at askSold at bidDelta
Exchange record120100+20
What the chart shows12050+70

Nothing changed in the market, yet the chart reports more than three times the real buying pressure.

That gap is why market data quality in capital markets matters beyond reporting. Faulty inputs flow into automated models, risk calculations, and every conclusion drawn from the screen.

Volume profiles and clusters suffer the same way. A price level looks quiet because part of its history never arrived, and an imbalance indicator lights up on a pattern the full exchange record doesn’t contain.

Late Quotes Show Liquidity That Isn’t There

Some feeds lose nothing; every update arrives, just too late. Cboe had some quote updates delayed to its SIP feeds on March 6, 2026, but the issue has been resolved. However, there was a big disparity between Cboe’s native feeds, as they were functioning as normal.

When trading an order book, every millisecond matters. If there is a delay in the quote update for a 500-contract bid cancellation, the depth will show an imbalance which no longer exists. During economic releases and large moves, there can be dozens of changes to the quotes before the slower feed catches up.

This does not necessarily mean there was any corruption in the feed. There can be many reasons for this, including network congestion, too much processing, or a temporary connectivity issue. The chart is out of date either way.

Order and Timestamps Decide What the Book Looks Like

An exchange feed is a running sequence of events: orders enter the book, change size, execute, or vanish. Rebuilding the book means applying them in sequence.

Take a 200-contract order later reduced to 50. Lose the reduction message and the reconstructed book keeps showing 200. A badly merged outdated snapshot creates the same phantom liquidity.

The exchange stamps an event when it happens; the local machine stamps it when it arrives. Network delay widens that gap, and poorly synchronized clocks make cross-feed comparisons harder still.

Three checks matter:

  • Completeness: Did every required trade and book update arrive?
  • Sequence: Were messages processed in their intended order?
  • Freshness: Does the display still reflect the current market?

Passing one doesn’t guarantee the others. A feed that delivers everything late is little use for a live decision.

When Data Reliability Becomes a Cybersecurity Issue

Most feed failures are operational rather than malicious. Still, every link to outside data services is a point of exposure.

According to research on distributed denial-of-service attacks on financial services published in 2025, internet infrastructure and banking APIs were the targets of more focused attacks. It demonstrated how assaults on linked services might cause availability to drop, although none of it included exchange feed manipulation. 

The threats worth planning for are unauthorized access, compromised credentials, service disruption, and tampering inside poorly protected systems. Data checks won’t catch these, so security controls belong alongside them:

  • restrict API permissions;
  • protect credentials;
  • verify software updates;
  • monitor unusual connection activity;
  • investigate unexplained changes in data behavior.

That said, an odd chart move is not evidence of hacking. Rule out ordinary explanations first: the data source, connection status, exchange conditions, and application settings.

Spotting a Feed Problem Before Trusting the Chart

The hard part is telling a real market event from a broken picture of one. A price spike with strange delta might be aggressive trading. It might also be a feed that dropped trades.

Each symptom points to a different first check:

Warning signPossible causeFirst verification
Frozen quotesConnection loss or stalled updatesCheck provider status and timestamps
Missing candlesIncomplete historical dataReload the affected period
Unexpected deltaMissing trades or classification differencesCompare trade records and feed methodology
Unusual depthDelayed or missing book updatesCheck update sequence and data freshness
Conflicting chartsDifferent venues, delays, or feed coverageMatch instruments, sessions, and sources

None of these signs proves an error by itself. Two exchanges can legitimately show different prices and volumes, because each runs a separate order book.

Footprints and order-book heatmaps also measure different things: executed trades versus resting liquidity over time. Neither can fill a hole in the other’s data.

Make Data Checks Part of the Routine

Verification belongs in daily preparation, not in a scramble after something breaks. A practical routine:

  1. Confirm the right exchange, contract, and data subscription are active.
  2. Check whether the data is live or delayed, and that timestamps keep advancing.
  3. Compare suspicious price or volume readings against an independent authorized source.
  4. Reload any historical period interrupted by a disconnection.
  5. Log recurring gaps, affected instruments, and incident times for follow-up.

Much caution is required while working on historical projects. If you want to look at volume trends or order-flow behavior again, Market Replay is a great tool to utilize, but it only works with complete data. Reload the graphic instead of trying to make sense of the gaps if they are unexplained. Recovering information is conditional on the provider and the data that are accessible, although some analytical techniques can fill in the gaps after reconnecting. 

None of this predicts price. Clean data only ensures the chart reflects what actually traded. Before taking any action based on an unusual imbalance or liquidity change, ensure that the data is complete, up-to-date, and from the right source. You will not know this from the chart itself.

(Photo by Alex Luna)





Source link