Lit Protocol

Lit Protocol is a decentralized key management and confidential compute network that lets developers build applications able to sign, encrypt, and execute code across multiple blockchains — without any single party ever holding complete access to a private key. Its one-sentence pitch: most "non-custodial" key solutions claim they cannot access your keys, but cannot prove it; Lit can.

The Problem

Traditional wallet providers and key management services rely on trust. Operators assert they cannot extract user keys, but there is no cryptographic proof. This becomes acutely problematic for autonomous agents, cross-chain protocols, and compliance-sensitive applications that need to perform on-chain actions without embedding raw private keys in backend servers. Lit addresses this by moving all key generation and usage into sealed hardware enclaves and distributing trust across a decentralized node network.

How It Works

Lit Protocol's architecture is built from three composable layers:

TEE Layer. Every Lit node runs inside an AMD SEV-SNP sealed Trusted Execution Environment. Root key material is generated and stored exclusively within the enclave and is never exposed to node operators, the Lit team, or end users. Lit calls this guarantee "Proof of Cloud" — each node produces hardware-attested signatures that allow any client to cryptographically verify the software and hardware state of the node handling their request.

On-Chain Permissions. Authorization state — which accounts can use which keys, and under what conditions — lives in immutable smart contracts on Base. This makes the rules governing key access public and auditable. Upgrades to those contracts require multisig whitelist approval, eliminating unilateral changes by any single operator.

Lit Actions. Programmable logic is written as JavaScript, pinned to IPFS by content ID, and executed inside TEEs. Lit Actions can read from any blockchain, query APIs, and conditionally authorize signing or decryption based on the results. Because they are content-addressed, a deployed Lit Action cannot be silently modified.

Key generation uses distributed key generation (DKG), splitting cryptographic material across independent node operators. A two-thirds consensus threshold is required before any signing or decryption operation completes, so a minority of malicious or offline nodes cannot produce unauthorized signatures or withhold access.

Key Features

Programmable Key Pairs (PKPs) are cryptographic key pairs whose authority is defined entirely by on-chain conditions. No single entity "owns" a PKP; it can only sign when the associated Lit Action's conditions are satisfied.

Wrapped Keys allow developers to encrypt sensitive key material — including Solana private keys or external API credentials — and store them within the Lit network. The encrypted material is only decryptable when Access Control Conditions (ACCs) are met, letting applications hold secrets without ever exposing them.

Cross-chain signing enables Lit to produce valid signatures for EVM chains, Solana, Bitcoin, and Cosmos in a single TEE session. A Lit Action can read state on one chain and sign a transaction on a completely separate chain, enabling cross-chain automation without bridges or multisig intermediaries.

Vincent is a non-custodial automation framework and agent app store built on Lit. It allows end users to delegate bounded spending authority to AI agents under strictly defined, user-controlled policies — the agent can act on a wallet without the user handing over private key access.

lit-triggers extends Lit Actions with scheduling, chain-event, and webhook-based triggers, enabling fully autonomous on-chain operations without a persistent backend server.

Network History and V3

Lit has shipped through several major versions. The Naga mainnet (V1) launched in January 2026 following a DKG ceremony in December 2025. In March 2026, the Naga network began its sunset process as the team prepared the next major release.

In April 2026, Lit launched V3 — codenamed Chipotle — a ground-up architectural rebuild. The core change: the execution engine is now fully decoupled from the key management system, with key orchestration moved on-chain and TEE execution handled by Phala infrastructure. The result is a single REST API that any client — a curl command, a Python script, an AI agent — can call directly without a custom SDK. V3 uses credit-based billing with no subscriptions: reads are free, and writes or Lit Action execution cost $0.01 per second of compute (minimum one second billed per action). Credit packages start at $5 with no expiration.

Before V1 mainnet, Lit's V0 infrastructure reported over $422 million in assets under management, 1.6 million wallets supported, and signing request volumes growing at roughly 45% month over month.

Token: LITKEY

The $LITKEY token launched on October 30, 2025 on Aerodrome (Base), followed by centralized exchange listings in early November. It serves three roles:

• Work token and staking: Node operators must stake LITKEY to participate in the network, aligning their economic incentives with protocol security and uptime.
• Payment: Developers purchase LITKEY credits to pay for signing, encryption, and compute services.
• Governance: Holders can lock LITKEY as veLITKEY to vote on network emissions and protocol parameter changes.

Total supply is one billion LITKEY. Distribution: 28% to core contributors, 28% to veLITKEY reward emissions, 19% to early investors, 11% to the Lit Foundation, 10% to community airdrops, and 4% to Aerodrome voting incentives. Team and investor allocations are locked for one year post-TGE and vest linearly over the following 24 months.

Security

All Lit nodes operate inside AMD SEV-SNP sealed enclaves with Proof of Cloud hardware attestation, making node operator behavior auditable and hardware-verified rather than trust-based. The DKG model and two-thirds signing threshold ensure no minority coalition of nodes can produce unauthorized signatures. Policy enforcement lives in on-chain contracts that cannot be changed without multisig approval. Lit has published ongoing cryptographic roadmaps, including planned expansions of supported signature types and elliptic curves, with stated commitments to auditing each addition before deployment.

Team and Funding

Lit Protocol was co-founded by David Sneider (CEO) and Chris Cassano. The project has raised $17.7 million in total: a $2.2 million seed round from Sfermion and Collab+Currency, and a $13 million Series A from 1k(x) and 6MV, with participation from Kleiner Perkins, Slow Ventures, CMT Digital, Gumi Cryptos, Lattice Capital, Longhash Ventures, and Shima Capital, among others (26 investors total). A pre-TGE round in 2025 brought in RRE Ventures with follow-on from Collab+Currency, Protocol Labs, and Village Global.

Solana Ecosystem Fit

Lit's Solana support is direct and practical. Developers can create Wrapped Keys on Solana owned by a Lit PKP, enabling Lit Actions to sign Solana transactions from within a TEE without exposing the underlying private key. This is immediately applicable to AI agent wallets that must execute Solana transactions autonomously, to private data pipelines where sensitive inputs are encrypted before LLM processing and outputs are signed for provenance, and to cross-chain solvers that need to read EVM state and settle on Solana. The Vincent agent framework extends these capabilities into user-facing tools, including dollar-cost averaging and other automated Solana strategies that run under explicit, user-defined spending policies.