they have a single consumer handling the orders themselves. the rest of the consumers act on this order processors' output - things like returning responses, writing logs, writing to database etc. actual order processing takes place on a single thread, which is the only thread to access the orderbook and so does not need to lock it.
they claim to be able to do up to 6 million orders/sec on this single thread.