Crypto exchanges
Deposit and withdrawal rails, hot-wallet management, and compliance-ready operations.
Digital-asset infrastructure
The infrastructure behind digital-asset finance.
One API for custody, payments, compliance, and accounting. Launch in weeks, not years, and run it without a blockchain team.
cystody · consolelive
Total balance
$2,075,600.00
▲ 4.2% vs last week
Recent activity
- ↓Deposit creditedUSDC · Base+ 2,500.00
- •Withdrawal pendingUSDC · Ethereum− 250,000.00
- ↓Sweep completedUSDT · Tron+ 48,200.00
2/3Approval requiredApproveReject
- 2/3
- MPC signing threshold
- 12
- Chains supported
- 99.99%
- Durable operations
- 1
- API for all of it
Built for teams on stablecoin rails
ExchangesProcessorsFintechsNeobanksMarketsInstitutions
A regulated backbone for modern money
Own the core. Plug the periphery.
Custody, money movement, compliance, and accounting are built in-house and held to one standard. Your providers for identity, screening, and banking plug in where you choose.
Multi-chain by default
12 chains · 6 token standards
EthereumBNB ChainPolygonArbitrumOptimismBaseAvalancheBitcoinSolanaTRONCosmosTONEthereumBNB ChainPolygonArbitrumOptimismBaseAvalancheBitcoinSolanaTRONCosmosTON
Token standardsERC-20TRC-20SPLCW-20TEP-74BRC-20
Custody
Keys that never exist in one place.
Every signature requires a threshold of independent parties. Neither a compromised server nor a stolen API key can move funds alone.
- 2-of-3 MPC threshold signing
- One address per chain family
- Key rotation without changing addresses
cystody · walletsMPC 2/3
Wallets
4 networks
- Ethereum0x9f2a…c41b642,180.00USDC
- Base0x9f2a…c41b318,540.00USDC
- Solana7Bq9…Xp2K204,900.00USDC
- TronTJ9k…Lm3a910,000.00USDC
One address per chain family · HD-derived
Money movement
Deposits in real time. Withdrawals that survive anything.
Funds are detected and screened before they ever hit a balance. Every withdrawal is a durable pipeline that retries cleanly and never double-spends.
- Screened before the balance is credited
- Durable, auto-retrying withdrawals
- Automated sweeps and managed gas
cystody · transactiondurable
Withdrawal · wd_8f21
250,000.00 USDC
→ 0x9f2a…c41b · Base
✓Validate
✓Screen
✓Approve
✓Reserve nonce
✓Estimate gas
6Sign
7Broadcast
8Confirm
9Settle
crash-resilient · retries preserve nonce · funds held until settled
Ledger
One ledger. No cache. No drift.
Balances are always read from a double-entry ledger, never a cache. What you see is provably true, and reconciliation checks the chain against the books continuously.
- Atomic holds, captures, debits
- Exact precision, no overflow
- Continuous reconciliation
Balance · USDC
double-entry
- AvailableUsable balance after holds
- 1,284,500.00
- HeldLocked for pending withdrawals
- 318,200.00
- OmnibusHot-wallet aggregate
- 472,900.00
Reconciled on-chain = ledger
Compliance & risk
Screen before funds move, not after.
Every address and destination is risk-scored before it touches a balance. Flagged activity routes to one review queue; the rest flows straight through.
- Risk scoring, 0–100
- Unified review queue
- No-KYC behavioral model
Transaction risk
pre-creditApprove 0–29
Review 30–69
Reject 70–100
Security
Designed so no single failure moves money.
Threshold signing is the foundation. The signer independently validates every transaction it signs, defeating attacks that bypass an application layer.
AttackWhy it fails
- Compromise of one signerCan't sign alone; a threshold is required
- Stolen API keyStill can't sign; the signer validates the transaction
- Chain-ID substitutionValidated against an allowlist
- Destination swap after signingDestination, value & data are validated
Trust
Built to the standards your auditors expect.
Built to SOC 2 Type IIBuilt to ISO 27001
- 2-of-3 MPC, keys never whole
- Independent security audits
- Least-privilege access, logged
- Full, exportable audit trail
- Insurance-ready architecture
Who builds on Cystody
One backbone, many businesses.
Payment processors
Accept crypto, settle instantly, and automate screened payouts.
Fintechs & neobanks
Embed wallets and balances without a blockchain team.
Financial institutions
Custody-as-a-service with audit-ready accounting and controls.
Prediction markets
Trader wallets and custody with a no-KYC behavioral model.
Web3 gaming
Player wallets, reward distribution, and asset custody at scale.
Developers
One API for the regulated middle.
Issue wallets, move money, and react to events through a typed, idempotent API. Retries are safe; conflicts are caught.
- Idempotent
- Retry safely; conflicts return 409
- Typed errors
- Specific codes; failing field named
- Reference
- OpenAPI 3.0, generated from source
- Webhooks
- Signed, retried, dead-lettered
withdrawals.create.ts
import { Cystody } from "@cystody/sdk";const cystody = new Cystody({ apiKey: process.env.CYSTODY_KEY });// Idempotent, safe to retry, never double-spends.const withdrawal = await cystody.withdrawals.create( { accountId: "acct_8f21", asset: "USDC", network: "base", to: "0x9f...", amount: "2500.00", }, { idempotencyKey: "payout-2026-06-17" },);withdrawal.status; // "pending", durable from herecystody · webhooksat-least-once
EventStatusAttempt
- deposit.confirmed2001/5
- withdrawal.signed2001/5
- withdrawal.completed2002/5
- transfer.created503retrying
HMAC-signed · exponential backoff · dead-letter on failure
Questions
Answered plainly.
MPC threshold signing, a 2-of-3 scheme where private keys are never assembled in one place. Two of three independent parties are required to sign, and the signer validates each transaction first.
Build on infrastructure that owns the hard parts.
Tell us what you're building. We'll show you how custody, payments, compliance, and accounting come together as one API.