Safeheron

Safeheron is a Singapore-based institutional digital asset self-custody infrastructure company that allows enterprises to hold and transact crypto assets with bank-grade security while retaining 100% sovereign control over their private keys. Its platform targets OTC desks, payment service providers, digital banks, stablecoin issuers, funds, and Web3 asset managers that need the security properties of hardware custody without delegating key control to an external custodian. The company began serving institutions in 2021.

Core Architecture: MPC + TEE

Safeheron's security model combines two independent trust mechanisms. The first is Multi-Party Computation Threshold Signature Scheme (MPC-TSS): private key material is split into shards distributed across multiple parties and devices, and no individual shard constitutes a complete key. Any transaction requires a quorum of those shards to cooperate in signing, eliminating single points of failure at the key level. The second mechanism is Intel SGX Trusted Execution Environment (TEE): signing computation occurs inside a hardware-isolated enclave that is opaque even to the host machine's operator, protecting against both external attackers and malicious insiders — including Safeheron itself.

The underlying cryptographic algorithms (GG18, GG20, MPC-CMP, Lindell17) are open-sourced in Safeheron's C++ library on GitHub (safeheron/multi-party-sig-cpp), making the core implementation independently auditable. The library was audited by Kudelski Security in December 2020 and by Least Authority.

Products

The Self-Custody SaaS Platform is the flagship product: a web console for institutional teams with multi-party approval workflows, role-based access controls, and a TEE Policy Engine that enforces custom spending rules — thresholds, whitelisted counterparties, time windows, and signer hierarchies. Key material never leaves the client's control.

MPC Node (launched June 2025) allows clients to run key management infrastructure on their own on-premises hardware using Intel SGX TEE, addressing data-residency requirements for enterprises that cannot rely on a cloud-hosted key layer.

Safeheron Insight (launched July 2026) is an AI analytics engine embedded in the web console. It accepts natural-language queries against a client's transaction history — balance snapshots, fee summaries, whitelist changes — and is strictly read-only; it cannot initiate or sign transactions.

One-Stop Payment Solution (April 2025) packages the MPC + TEE wallet infrastructure with stablecoin on-ramp and off-ramp services, AML/KYT screening, and automation tooling including an API Co-Signer and Auto Sweep function. It targets payment service providers and digital banks building stablecoin payment infrastructure.

Native AML/KYT screening (March 2026) is integrated directly into transaction approval flows, running counterparty checks at the moment of asset movement rather than as a post-hoc audit. A TRON Energy Rental product (March 2025) reduces gas costs on TRON transactions by approximately 50% through a zero-development integration.

Supported Chains and Assets

The platform covers Bitcoin, Ethereum and EVM-compatible networks, Solana, TRON, and NEAR, along with stablecoins including USDT and USDC. For Solana specifically, Safeheron supports secure asset transfers, NFT issuance and management, and DAO treasury governance while maintaining full MPC + TEE self-custody. Elliptic's blockchain analytics, integrated via partnership, cover 50+ blockchains and 250+ cross-chain bridges.

Security and Audit Status

Kudelski Security (December 2020) and Least Authority audited the core MPC algorithm library. SlowMist audited the Safeheron App (V1.5.1), web console, official website, and browser extension (V0.1.4). Cure53 conducted additional penetration testing. The platform holds ISO/IEC 27001:2022 and SOC 2 Type II certifications — SOC 2 most recently recertified in May 2026 by a Big Four auditor covering security, availability, and confidentiality controls. Insurance is provided by Lockton.

In August 2023, Fireblocks publicly disclosed CVE-2023-33241 ("BitForge"), a flaw in the GG18 and GG20 MPC protocol specifications affecting multiple vendors. Safeheron patched its open-source library before the disclosure date, and Fireblocks verified the fix. Safeheron subsequently published its own technical analysis of the vulnerability.

In August 2026, Safeheron and the Responsible Fintech Institute launched a cross-jurisdiction pilot testing post-quantum cryptography (ML-DSA-65, NIST FIPS 204) for digital asset transaction signing on NEAR testnet. Participating financial institutions include Bison Bank and DK Bank; regulatory observers include ADGM, the Gelephu Financial Services Office, and the MFSA. Safeheron intends to open-source the PQC code after the pilot concludes.

Team and Background

CEO and co-founder Wade Wang previously co-founded Damai.com, China's largest online concert ticketing platform. CTO and co-founder Bruce Wang held engineering roles at Tencent and Alibaba. Jag Foo serves as Chief Security and Policy Officer.

Safeheron raised a $7 million Pre-A round in August 2022 led by Yunqi Partners and Web3Vision, with participation from M77 Ventures, PrimeBlock Ventures, Waterdrip Capital, and Antalpha Ventures. In April 2023, HashKey Capital and Bixin Ventures co-led an additional seed investment. As of end-2025, the company reported more than 200 enterprise clients, over $250 billion in total asset transfers secured, monthly transfer volume exceeding $10 billion, and revenue that tripled in 2024.

Ecosystem Integrations

Safeheron's MetaMask Snaps integration (launched August 2022, supported by a MetaMask Grants DAO award) enables 2-of-3 MPC threshold signing split across a Keystone hardware wallet, MetaMask desktop extension, and MetaMask mobile app. Alibaba Cloud integrated Safeheron's MPC + TEE security tools in early 2023. In July 2026, Chainalysis KYT was embedded into the platform for real-time AML screening at the point of transaction execution. Elliptic's analytics are integrated for on-chain compliance monitoring and regulatory reporting. Named enterprise partners include dtcpay, Legend Trading, HashKey OTC Global, Request Finance, and RD Technologies.

Named clients include AlphaYield, a Wyoming-based OTC desk with approximately $1 billion in annual settlement volume that has recorded zero security incidents since deploying Safeheron, and Infini, a stablecoin financial platform whose CEO reported that business volume tripled after the integration.