Secure, Efficient, Scalable
Top-tier, battle-tested security solutions for 260+ institutions since 2021.
RAISED
PEAK AUC
SECURELY TRANSFERRED
Committed to the highest standards of security and compliance.
Compliance in Action
Explore Our Trust Center
MPC Self-Custody
Enterprise-grade digital asset self-custody services
Eliminate single-point failures to manage digital assets
- MPC and TEE technologies protect your digital assets with the highest level of security.
- Manage wallets and transfer funds on multiple terminals, including the mobile App and Web Console.
- Policy Engine flexibly controls access authorization.
- Off-chain multisignature enhances approval privacy and significantly reduces on-chain transaction fees.
Interact with dApps under multi-party control
- Supports all public EVM-compatible blockchains and DeFi protocols.
- Policy Engine meticulously delegates transaction permissions.
- Real-time contract monitoring and phishing detection safeguard every transaction.
- Customize RPC nodes for diverse business scenarios.
- Collaboratively manage smart contract owner’s permissions to reduce single-point risk in critical operations.
Enterprise-grade digital asset self-custody services
- Seamlessly create and manage millions of MPC wallets with APIs.
- Automatic gas fuelling and sweeping significantly improve integration efficiency and accelerate your business success.
- Web3 API securely controls the entire lifecycle of smart contracts.
- API Co-Signer automates transaction approval and signing.
- MPC and TEE technologies provide multi-layer security to eliminate single-point-of-failure risk for private keys.
MPC Node Suite
White-label MPC privatization solutions
Flexibly build MPC wallets for seamless integration into your applications
- Fully privatized, with hardware-level data security and privacy protection under your control.
- A secure, universal, and cross-platform MPC-TSS key management solution.
- Support diverse business scenarios to accelerate your success.
Safest software is
open source
Safeheron independently developed MPC algorithms and is now the world's first company to open-source the mainstream MPC-TSS algorithm in C++.




Why choose us?
100% control over assets
3-of-3 MPC-TSS key management eliminates the single-point failures with full asset control.
Open-source algorithms
Safeheron open-sourced the world's first MPC-TSS algorithm library implemented in C++.
Maximum security
Safeheron’s multi-layer security defenses against state-level attacks.
Certified and insured
Safeheron is certified with ISO/IEC 27001:2022 and SOC 2 and is insured by Lockton.
Extensive features
Safeheron offers one-stop management for Web3, DeFi, NFTs, and smart contracts.
Governance and policy
TEE Policy Engine customizes multi-dimensional policies and approval workflows.
Technical support
Robust technical support encompasses use cases, solutions, technologies, and security expertise.
Diversified solutions
Battle-tested SaaS services and MPC privatization solutions.
Hear from our customers
Latest Updates from Safeheron
What Should a Crypto Treasury Policy Include?
A crypto treasury policy should set out, before a business holds any crypto assets, which assets it may hold, how much, how much liquidity to keep, who custodies the assets, who has authority to initiate and approve transactions, and how accounting, tax and reporting are handled. The policy is not a one-off document; it should be adjusted as the business’s risk tolerance changes. Why Set a Policy Before Holding Crypto Assets? Because crypto asset risk touches many parts of a company. In its analysis for businesses, Deloitte notes that a treasury strategy must align with the company’s established policies, processes and risk tolerance, and requires coordination among the board, audit committee, risk, finance, tax, internal audit and operations. Writing the rules down first gives everyone a shared basis to work from. Crypto assets also face a wider range of risks, including liquidity, concentration and counterparty, regulatory, operational, market and reputational risk. The role of the policy is to turn these risks into enforceable, verifiable rules in advance. Which Assets Should the Policy Allow, and How Much? Start by listing the permitted asset classes and stating the business rationale for each. For every candidate asset, understand its specific terms and characteristics, as well as the underlying blockchain and governance mechanisms, and commission a third-party technical assessment where needed. Next, set allocation […]
How Should Businesses Account for Crypto Assets?
How a business accounts for the crypto assets it holds depends on which accounting standards it applies. Under US GAAP, qualifying crypto assets are measured at fair value for fiscal years beginning after December 15, 2024, with changes in value recognized in net income for the period. Under International Financial Reporting Standards (IFRS), cryptocurrency holdings are generally treated as intangible assets, and are treated as inventory only when held for sale in the ordinary course of business. What Does US GAAP Require for Crypto Assets? The FASB issued ASU 2023-08 in December 2023. Before then, crypto assets were treated as indefinite-lived intangible assets measured at historical cost less impairment: price declines required an impairment charge, but price increases could not be written back up. The new standard requires qualifying crypto assets to be measured at fair value after initial recognition, with changes in fair value in each reporting period recognized in net income. For presentation, these assets must be shown separately from other intangible assets on the balance sheet, and fair value changes must be presented in the income statement separately from the amortization and impairment of other intangible assets. ASU 2023-08 is effective for all entities for fiscal years beginning after December 15, 2024, including interim periods within those years, and early adoption is permitted. On initial adoption, the […]
What Is Crypto Treasury Management?
Crypto treasury management is how a business plans and controls the stablecoins, bitcoin and other crypto assets it holds: how much to keep readily available, which wallets to hold it in, who can move it, how to reconcile and record it, and what to do with idle funds. Its goals are the same as traditional treasury management: maintain liquidity, control risk and keep an audit trail. The difference is that the funds sit on-chain, so the controls take the form of keys, wallets and policies. What Does Crypto Treasury Management Involve? The first task is liquidity planning. A business should split its on-chain funds into three parts: day-to-day working capital, known large outflows, and truly idle funds. It first decides how much to keep readily available, then decides whether to put idle funds to work earning yield. The second is fund tiering. A common approach is to split funds into an operating tier, a buffer tier and a long-term reserve tier. Each tier needs a minimum and maximum balance, a defined source of top-ups, a list of addresses it may send to, and per-transaction and daily limits. Splitting funds between hot and cold wallets is the most basic step in this process. The third is transfer control. Deposits, withdrawals, internal transfers and merchant settlements each carry their own risks and […]
How Can Businesses Prevent AI Agents From Sending Crypto by Mistake?
How can businesses prevent AI agents from sending crypto by mistake? The key is to never let an AI agent hold, on its own, the complete private key that can move funds, and to check every transfer before signing against rules the agent cannot change, including transfer limits, address whitelists and human approval for amounts above the limit. The agent can initiate transactions, but whether a transaction executes is decided by policy and by people. Why Do AI Agents Send Assets by Mistake? As an incident in February 2026 showed, an autonomous trading agent can transfer its entire token holdings to a stranger simply by misreading a single value. Why AI agents accidentally send crypto comes down to this: the agent holds the private key and signs directly, there is no independent check before signing, and an on-chain transfer cannot be reversed once signed. How Should AI Agent Keys and Permissions Be Designed? The first step is not to give the agent the complete private key. With MPC, the private key exists as shards distributed across different locations from the moment it is generated, so even if the server running the agent is compromised, the attacker cannot obtain the full key. The agent only initiates transactions; signing requires the other shards, which participate only after the policy check passes. This […]
Why Do AI Agents Accidentally Send Crypto?
Why do AI agents accidentally send crypto? Based on publicly reported cases, the problem arises when the agent turns “what to do” into a specific transaction: misreading a single value or misparsing one API response can make the transfer amount off by a factor of a thousand. And such agents often hold their own private keys and sign directly, so the error reaches the chain without any independent check. What Happened in the February 2026 AI Agent Transfer Incident? The AI agent, named Lobstar Wilde, was set up by its developer to trade autonomously on Solana, starting with about $50,000 of SOL and a target of reaching $1 million through trading. It also held a memecoin named after itself. On February 22, 2026, a user replied to it on social media, saying a family member needed money for medical treatment and asking for 4 SOL. Instead of sending just 4 SOL, the agent transferred its entire holding of about 52.4 million tokens, about 5% of total supply. As for their value at the time, The Block estimated about $250,000, while GNcrypto estimated about $440,000. The agent later admitted on social media that it had meant to send a very small amount but had transferred its entire position. The recipient quickly sold the tokens for about $40,000 profit. What Caused the […]