Keep Your Funds
Safe From Here On

Safeheron offers enterprise-grade digital asset self-custody services and MPC privatization solutions, ensuring the highest level of security for your assets.

Secure, Efficient, Scalable

Top-tier, battle-tested security solutions for 260+ institutions since 2021.

$13M+

RAISED

$1.5B+

PEAK AUC

$300B+

SECURELY TRANSFERRED

Committed to the highest standards of security and compliance.

Certified and Insured

Partner with Top Security and Compliance Partners

Compliance in Action

Explore Our Trust Center

MPC Self-Custody

Enterprise-grade digital asset self-custody services

Eliminate single-point failures to manage digital assets

  • MPC and TEE technologies protect your digital assets with the highest level of security.
  • Manage wallets and transfer funds on multiple terminals, including the mobile App and Web Console.
  • Policy Engine flexibly controls access authorization.
  • Off-chain multisignature enhances approval privacy and significantly reduces on-chain transaction fees.
View More
Eliminate single-point failures to manage digital assets
Talk to Us

MPC Node Suite

White-label MPC privatization solutions

Flexibly build MPC wallets for seamless integration into your applications

  • Fully privatized, with hardware-level data security and privacy protection under your control.
  • A secure, universal, and cross-platform MPC-TSS key management solution.
  • Support diverse business scenarios to accelerate your success.
View More
Flexibly build MPC wallets for seamless integration into your applications
Talk to Us

Safest software is
open source

Safeheron independently developed MPC algorithms and is now the world's first company to open-source the mainstream MPC-TSS algorithm in C++.

Hear from our customers

Safeheron empowers financial institutions with secure key sharding, flexible and customizable wallet governance, and efficient, seamless approval workflows, letting institutions enjoy powerful self-custody services effortlessly.

Li Liang, Singapore CEO View More

Our partnership with Safeheron has unlocked new possibilities in digital payment through advanced MPC and TEE technology. This collaboration strengthens our security, scalability, and compliance, enabling us to meet the highest standards. With Safeheron’s powerful MPC self-custody solution, dtcpay continues to provide our users with institutional-grade security, seamless transactions, and an intuitive user experience, reinforcing our commitment to advancing the future of digital payments.

Sam Lin, CTO View More

As a trusted financial service provider, we have strict standards when choosing our security infrastructure provider. Safeheron turns out to be a great match. Its MPC self-custody solution eliminates private key risks while providing enterprise-grade security with ease of use. With Safeheron’s sophisticated technology, we are confident to provide our customers with a reliable and secure digital payment experience.

Louis Liu, Founder & CEO

The Safeheron team has in-depth expertise and extensive practical experience in blockchain security. With a highly robust security mechanism, a comprehensive permission management system, and an excellent user experience, Safeheron has provided strong support for our institutional trading services in the Asia region. We look forward to further deepening our collaboration.

Hao Chen, CEO View More

UXUY has developed a highly secure key management service powered by Safeheron's MPC technology. In today's challenging cyber environment where digital assets face numerous security threats, Safeheron's mature solution provides us with robust technical assurance. Through this innovative MPC solution, we have effectively reduced the risks of private key leakage and asset theft, delivering users a seamless experience that combines both security and convenience.

Max, CTO

With Safeheron’s hardcore MPC technology, we ensure the highest level of security for our clients' crypto funds within our crypto-to-fiat feature. In addition, Safeheron's customer support exemplifies excellence, promptly resolving issues to maintain our uninterrupted operations.

Jean-Baptiste Chenut, CFO View More

Partnering with Safeheron has been transformative for AlphaYield. Their MPC + TEE platform delivers the enterprise-grade security and operational efficiency we need to execute large institutional trades with complete confidence, while their exceptional team consistently goes above and beyond to support our evolving needs.

Michael Pearson, CEO View More

Security, flexibility, and compliance — all solved on one platform. Since integrating Safeheron, our business volume has tripled.

Christian Li, CEO View More

Latest Updates from Safeheron

Web3 Learning

How Can Businesses Make Global Payouts with Stablecoins?

How can businesses make global payouts with stablecoins? First, collect and verify each recipient’s wallet address, chain, and token. Next, screen the addresses for sanctions and risk, then send payments according to approval and limit rules, and finally reconcile the on-chain results and record them in the books. After receiving stablecoins, recipients still need to convert them into local currency through a local off-ramp, while businesses must handle tax reporting according to the rules where they operate. Why Do Businesses Use Stablecoins for Global Payouts? In its 2025 Annual Economic Report, the Bank for International Settlements (BIS) noted that stablecoins could offer lower costs and faster transactions, particularly in cross-border payments, and that transfers are not limited by banking hours or public holidays. The International Monetary Fund (IMF) likewise considers that stablecoins can make international payments faster and cheaper for individuals and businesses. Exactly where they are faster and where they cost more than wires is broken down point by point in our comparison of stablecoins and wire transfers for cross-border payments. In an analysis aimed at finance executives, PwC lists supplier payments and contractor payments as flows well suited to stablecoins, and notes that freelancers and contract workers in the technology and creative industries are already receiving stablecoin payments. What Steps Does a Stablecoin Payout Go Through? The first […]

By Safeheron Team 10/11/2026

Anatomy of Binance 6.3 billion hack
Security & Research

Binance’s Hot Wallet Used MPC. So How Did Attackers Still Drain It?

On October 29, 2026, Binance suffered a security incident involving roughly 6.34 billion USD in assets (Binance’s figure; TRM Labs puts it at about $6.36 billion). The attackers gained unauthorized access to an internal wallet signing service, initiated transactions outside the normal withdrawal flow, and moved assets out of hot wallets on multiple blockchains.[1][2] The affected hot wallets used MPC (secure multi-party computation). In its October 30 announcement, Binance said it had found no evidence that wallet private keys had been compromised.[3] So the private keys may never have leaked, yet the assets still left. That leaves an uncomfortable question: if an employee’s laptop, a production server, or even the MPC signing coordinator is compromised, what is left to stop an attacker from moving the funds? What Happened: From an Engineer’s Laptop to the Wallet Signing Service According to the preliminary findings Binance published on November 3, this was a multi-stage intrusion that unfolded over several months.[1] In June, a wallet operations engineer downloaded a tampered Homebrew installer while setting up an AI coding tool. The security team replaced the device and rotated the relevant credentials, but the identities and roles of some wallet team members had already been exposed. In September, another engineer ran a project containing malicious code during a fake job interview. Endpoint security tools did not […]

By Safeheron Team 10/11/2026

What Should a Crypto Treasury Policy Include?

A crypto treasury policy should set out, before a business holds any crypto assets, which assets it may hold, how much, how much liquidity to keep, who custodies the assets, who has authority to initiate and approve transactions, and how accounting, tax and reporting are handled. The policy is not a one-off document; it should be adjusted as the business’s risk tolerance changes. Why Set a Policy Before Holding Crypto Assets? Because crypto asset risk touches many parts of a company. In its analysis for businesses, Deloitte notes that a treasury strategy must align with the company’s established policies, processes and risk tolerance, and requires coordination among the board, audit committee, risk, finance, tax, internal audit and operations. Writing the rules down first gives everyone a shared basis to work from. Crypto assets also face a wider range of risks, including liquidity, concentration and counterparty, regulatory, operational, market and reputational risk. The role of the policy is to turn these risks into enforceable, verifiable rules in advance. Which Assets Should the Policy Allow, and How Much? Start by listing the permitted asset classes and stating the business rationale for each. For every candidate asset, understand its specific terms and characteristics, as well as the underlying blockchain and governance mechanisms, and commission a third-party technical assessment where needed. Next, set allocation […]

How Should Businesses Account for Crypto Assets?

How a business accounts for the crypto assets it holds depends on which accounting standards it applies. Under US GAAP, qualifying crypto assets are measured at fair value for fiscal years beginning after December 15, 2024, with changes in value recognized in net income for the period. Under International Financial Reporting Standards (IFRS), cryptocurrency holdings are generally treated as intangible assets, and are treated as inventory only when held for sale in the ordinary course of business. What Does US GAAP Require for Crypto Assets? The FASB issued ASU 2023-08 in December 2023. Before then, crypto assets were treated as indefinite-lived intangible assets measured at historical cost less impairment: price declines required an impairment charge, but price increases could not be written back up. The new standard requires qualifying crypto assets to be measured at fair value after initial recognition, with changes in fair value in each reporting period recognized in net income. For presentation, these assets must be shown separately from other intangible assets on the balance sheet, and fair value changes must be presented in the income statement separately from the amortization and impairment of other intangible assets. ASU 2023-08 is effective for all entities for fiscal years beginning after December 15, 2024, including interim periods within those years, and early adoption is permitted. On initial adoption, the […]

What Is Crypto Treasury Management?

Crypto treasury management is how a business plans and controls the stablecoins, bitcoin and other crypto assets it holds: how much to keep readily available, which wallets to hold it in, who can move it, how to reconcile and record it, and what to do with idle funds. Its goals are the same as traditional treasury management: maintain liquidity, control risk and keep an audit trail. The difference is that the funds sit on-chain, so the controls take the form of keys, wallets and policies. What Does Crypto Treasury Management Involve? The first task is liquidity planning. A business should split its on-chain funds into three parts: day-to-day working capital, known large outflows, and truly idle funds. It first decides how much to keep readily available, then decides whether to put idle funds to work earning yield. The second is fund tiering. A common approach is to split funds into an operating tier, a buffer tier and a long-term reserve tier. Each tier needs a minimum and maximum balance, a defined source of top-ups, a list of addresses it may send to, and per-transaction and daily limits. Splitting funds between hot and cold wallets is the most basic step in this process. The third is transfer control. Deposits, withdrawals, internal transfers and merchant settlements each carry their own risks and […]

How Can Businesses Prevent AI Agents From Sending Crypto by Mistake?

How can businesses prevent AI agents from sending crypto by mistake? The key is to never let an AI agent hold, on its own, the complete private key that can move funds, and to check every transfer before signing against rules the agent cannot change, including transfer limits, address whitelists and human approval for amounts above the limit. The agent can initiate transactions, but whether a transaction executes is decided by policy and by people. Why Do AI Agents Send Assets by Mistake? As an incident in February 2026 showed, an autonomous trading agent can transfer its entire token holdings to a stranger simply by misreading a single value. Why AI agents accidentally send crypto comes down to this: the agent holds the private key and signs directly, there is no independent check before signing, and an on-chain transfer cannot be reversed once signed. How Should AI Agent Keys and Permissions Be Designed? The first step is not to give the agent the complete private key. With MPC, the private key exists as shards distributed across different locations from the moment it is generated, so even if the server running the agent is compromised, the attacker cannot obtain the full key. The agent only initiates transactions; signing requires the other shards, which participate only after the policy check passes. This […]

Why Do AI Agents Accidentally Send Crypto?

Why do AI agents accidentally send crypto? Based on publicly reported cases, the problem arises when the agent turns “what to do” into a specific transaction: misreading a single value or misparsing one API response can make the transfer amount off by a factor of a thousand. And such agents often hold their own private keys and sign directly, so the error reaches the chain without any independent check. What Happened in the February 2026 AI Agent Transfer Incident? The AI agent, named Lobstar Wilde, was set up by its developer to trade autonomously on Solana, starting with about $50,000 of SOL and a target of reaching $1 million through trading. It also held a memecoin named after itself. On February 22, 2026, a user replied to it on social media, saying a family member needed money for medical treatment and asking for 4 SOL. Instead of sending just 4 SOL, the agent transferred its entire holding of about 52.4 million tokens, about 5% of total supply. As for their value at the time, The Block estimated about $250,000, while GNcrypto estimated about $440,000. The agent later admitted on social media that it had meant to send a very small amount but had transferred its entire position. The recipient quickly sold the tokens for about $40,000 profit. What Caused the […]

View More