Keep Your Funds
Safe From Here On
Safeheron offers enterprise-grade digital asset self-custody services and MPC privatization solutions, ensuring the highest level of security for your assets.
Secure, Efficient, Scalable
Top-tier, battle-tested security solutions for 260+ institutions since 2021.
RAISED
PEAK AUC
SECURELY TRANSFERRED
Committed to the highest standards of security and compliance.
Certified and Insured
Partner with Top Security and Compliance Partners
Compliance in Action
Explore Our Trust Center
MPC Self-Custody
Enterprise-grade digital asset self-custody services
Eliminate single-point failures to manage digital assets
- MPC and TEE technologies protect your digital assets with the highest level of security.
- Manage wallets and transfer funds on multiple terminals, including the mobile App and Web Console.
- Policy Engine flexibly controls access authorization.
- Off-chain multisignature enhances approval privacy and significantly reduces on-chain transaction fees.
Interact with dApps under multi-party control
- Supports all public EVM-compatible blockchains and DeFi protocols.
- Policy Engine meticulously delegates transaction permissions.
- Real-time contract monitoring and phishing detection safeguard every transaction.
- Customize RPC nodes for diverse business scenarios.
- Collaboratively manage smart contract owner’s permissions to reduce single-point risk in critical operations.
Enterprise-grade digital asset self-custody services
- Seamlessly create and manage millions of MPC wallets with APIs.
- Automatic gas fuelling and sweeping significantly improve integration efficiency and accelerate your business success.
- Web3 API securely controls the entire lifecycle of smart contracts.
- API Co-Signer automates transaction approval and signing.
- MPC and TEE technologies provide multi-layer security to eliminate single-point-of-failure risk for private keys.
MPC Node Suite
White-label MPC privatization solutions
Flexibly build MPC wallets for seamless integration into your applications
- Fully privatized, with hardware-level data security and privacy protection under your control.
- A secure, universal, and cross-platform MPC-TSS key management solution.
- Support diverse business scenarios to accelerate your success.
Safest software is
open source
Safeheron independently developed MPC algorithms and is now the world's first company to open-source the mainstream MPC-TSS algorithm in C++.
Why choose us?
100% control over assets
3-of-3 MPC-TSS key management eliminates the single-point failures with full asset control.
Open-source algorithms
Safeheron open-sourced the world's first MPC-TSS algorithm library implemented in C++.
Maximum security
Safeheron’s multi-layer security defenses against state-level attacks.
Certified and insured
Safeheron is certified with ISO/IEC 27001:2022 and SOC 2 and is insured by Lockton.
Extensive features
Safeheron offers one-stop management for Web3, DeFi, NFTs, and smart contracts.
Governance and policy
TEE Policy Engine customizes multi-dimensional policies and approval workflows.
Technical support
Robust technical support encompasses use cases, solutions, technologies, and security expertise.
Diversified solutions
Battle-tested SaaS services and MPC privatization solutions.
Hear from our customers
Our partnership with Safeheron has unlocked new possibilities in digital payment through advanced MPC and TEE technology. This collaboration strengthens our security, scalability, and compliance, enabling us to meet the highest standards. With Safeheron’s powerful MPC self-custody solution, dtcpay continues to provide our users with institutional-grade security, seamless transactions, and an intuitive user experience, reinforcing our commitment to advancing the future of digital payments.
As a trusted financial service provider, we have strict standards when choosing our security infrastructure provider. Safeheron turns out to be a great match. Its MPC self-custody solution eliminates private key risks while providing enterprise-grade security with ease of use. With Safeheron’s sophisticated technology, we are confident to provide our customers with a reliable and secure digital payment experience.
The Safeheron team has in-depth expertise and extensive practical experience in blockchain security. With a highly robust security mechanism, a comprehensive permission management system, and an excellent user experience, Safeheron has provided strong support for our institutional trading services in the Asia region. We look forward to further deepening our collaboration.
UXUY has developed a highly secure key management service powered by Safeheron's MPC technology. In today's challenging cyber environment where digital assets face numerous security threats, Safeheron's mature solution provides us with robust technical assurance. Through this innovative MPC solution, we have effectively reduced the risks of private key leakage and asset theft, delivering users a seamless experience that combines both security and convenience.
With Safeheron’s hardcore MPC technology, we ensure the highest level of security for our clients' crypto funds within our crypto-to-fiat feature. In addition, Safeheron's customer support exemplifies excellence, promptly resolving issues to maintain our uninterrupted operations.
Latest Updates from Safeheron
594.5 BTC Gone: When Trusted Hardware Fails
On July 30, roughly 500 Bitcoin addresses were drained within a short window—1,324 UTXOs in all, amounting to about 594.5 BTC. The wallets shared one troubling trait: some of their seeds may have been generated by an older firmware version of the Coldcard Mk3. According to the technical analysis available so far, the firmware in question was supposed to draw on the device’s hardware random number generator. Because of a compilation setting and a flawed code check, it instead fell back to a deterministic, software-based source of randomness. Users believed their recovery phrases came from true hardware entropy; in reality, the pool those phrases were drawn from may have been small enough to enumerate. As of this writing, the randomness flaw in Coldcard has been corroborated by public technical analysis. Exactly how the attacker exploited it end to end—and whether all 594.5 BTC trace back to this single issue—remains under investigation. But whatever the final attribution, the incident surfaces a point that is easy to overlook: A private key that was never leaked is not automatically a private key that is safe. From the very moment it is created, it also has to be unpredictable enough. The attacker never had to break Bitcoin A Bitcoin private key isn’t secure because it lives inside some special device. It’s secure because a […]
The Triple-A Attack and a Review of Technical Security Incidents in July 2026
July 2026 delivered a punishing run of security failures across the crypto industry. From the treasury breach at Triple-A—a licensed Singapore-based payments platform—to a string of attacks on cross-chain bridges, oracles, and other critical infrastructure, these eight technical security incidents alone topped $90 million. Taken together, these incidents point to one thing: failures in private key and permission management are becoming the costliest risk in institutional digital asset operations. Major July Technical Security Incidents at a Glance Notably, two of the five largest losses (AFX Trade and Ostium) trace directly back to compromised signing keys, while Triple-A’s own treasury was breached through unauthorized access (root cause still under investigation)—making key and permission management the month’s leading source of loss. Target Date Loss / Assets Stolen Root Cause Details & Status AFX Trade 07-22 $24,150,000 Validator signing-key compromise Five validator signing keys were stolen to reach the signing quorum; the team immediately suspended bridge operations and offered a 30% (≈$7.2M) bounty to recover the funds. Ostium 07-15 $23,752,746 (USDC) Oracle signing key compromise Off-chain pricing infrastructure was breached, allowing price data to be forged. Triple-A 07-24 $11,800,000 Unauthorized access to own treasury wallets A licensed institution breached. The loss hit Triple-A’s own treasury (across 7 chains over 31 hours); client funds were unaffected thanks to regulatory segregation, but the incident still […]
EU Expands Cross-Border Crypto Bans as Hong Kong Finalizes Licensing Framework
This article covers key developments across regulation, security, markets, and international crypto news, with a focus on the EU’s tightening cross-border compliance requirements and Hong Kong’s newly finalized licensing framework. Regulation The EU has expanded its trading ban to 14 crypto service platforms operating in loosely regulated jurisdictions including Panama, the UAE, and Georgia, further tightening cross-border digital asset compliance requirements. Meanwhile, the one-year statutory deadline for GENIUS Act stablecoin rules in the US has passed, with the Treasury and key regulators’ rules on AML compliance and sanctions compliance still at the proposal stage; progress on the CLARITY Act’s market structure legislation also remains stalled over conflict-of-interest provisions for officials. Security Crypto lost over USD 47 million to hacks over the past week: the AFX Trade cross-chain bridge was drained of roughly USD 24.15 million, Wanchain lost about USD 10 million, and the Verus Ethereum bridge was breached for the second time in two months. Most of these incidents stem from access-control vulnerabilities in cross-chain bridge contracts, underscoring the need for institutions to strengthen institutional-grade custody security at the custody layer. Markets Bitcoin is trading near USD 65,000, up about 0.89% over 24 hours; Ethereum is around USD 1,935, up roughly 3.37%. Meme coins led gains as sentiment improved on expectations for the CLARITY Act vote, though the Fear & […]
Global Regulatory Shakeup: SEC Advances New Rules as EU’s MiCA Takes Full Effect
Regulation The SEC is advancing its “Regulation Crypto” agenda, targeting three rulemaking proposals in July covering token offerings, broker-dealer custody, and market structure for trading venues, part of a push toward clearer digital asset compliance frameworks and a possible safe harbor for DeFi projects. Sam Waldon, Principal Deputy Director of the SEC’s Division of Enforcement, will depart July 31 after more than 14 years. Commissioner Hester Peirce warned that crypto vaults and on-chain lending strategies could fall under securities laws depending on how they are structured. New California crypto regulations also took effect July 1. Security Ostium, an Arbitrum-based perpetuals exchange, was hacked this month for an estimated \$18-24 million after a compromised private key let attackers submit fake oracle price reports, opening a synthetic position at an artificially low price before selling at market for profit. Industry-wide, H1 2026 hack incidents hit a record 207, though losses fell below \$1 billion; roughly 76% of stolen funds came from infrastructure and operational compromises rather than smart-contract bugs, underscoring the importance of access-control weaknesses and signing-system security, and reinforcing that institutional-grade custody security must cover operations and credential management, not just code audits. Markets Bitcoin and Ethereum extended declines this week; the overall crypto market fell 1.3% to \$2.3 trillion on July 24 as the Fear and Greed Index dropped to […]
CLARITY Act Showdown, $763M in Hack Losses, and New Stablecoin Regulation Moves
The CLARITY Act and Stablecoin Oversight The US Senate continues to push the CLARITY Act, aiming to clarify SEC/CFTC jurisdiction over “digital commodities” vs. “digital securities” and establish a capital/reserve framework for stablecoin issuers. The bill’s path forward remains uncertain — Senator Elizabeth Warren has asked President Trump to voluntarily disclose his personal crypto earnings from January 1 to July 15, 2026, by July 23, a request tied directly to the CLARITY Act fight. This regulatory uncertainty is a reminder for institutional investors to prioritize digital asset compliance. Security: $763M in Hack Losses in Q2 2026 Crypto hacks caused roughly $763.97 million in losses across 67 incidents in Q2 2026, with access-control weaknesses the single largest point of failure. Over 70% of stolen funds were routed to North Korea-linked actors; one firm reportedly mistakenly hired a DPRK-affiliated developer — underscoring the growing importance of AML compliance and institutional-grade custody security. Markets: LidoDAO and Cardano Rally LidoDAO gained 23.3% after Interactive Brokers announced it would list the token. Cardano rose 8.6% after activating the “Van Rossem” hard fork, its first upgrade approved entirely through on-chain governance. Bitcoin and Ethereum were mixed, reflecting divided outlooks for H2 2026. Institutions looking to reduce exchange custody risk may consider MPC self-custody solutions. International: EU and Asia-Pacific Moves The EU reached a compromise on the […]
