Custody

Keys that never exist in one place.

Cystody secures assets with multi-party computation: a 2-of-3 threshold where private keys are never assembled in a single process. A compromised node, or a stolen API key, can't move funds alone.

2-of-3 thresholdECDSA + EdDSAHD derivationKey rotation
ASHAREBSHARECSHARE2/3SIGNATURE

How it works

One key. Many guardians. No single point.

Every signature is a collaboration between independent parties. There's no master key to steal and no single server that can be subverted into moving funds.

  • 2-of-3 MPC threshold signing
  • One address per chain family
  • Key rotation without changing addresses
Signing
2-of-3 MPC threshold
Coverage
ECDSA (EVM, Bitcoin) + EdDSA (Solana)
Addresses
HD-derived, one per chain family
Recovery
Reshare keys without downtime

Coverage

One address per chain family.

A single derived address serves every EVM network at once, with native support for Bitcoin and Solana. Curves and standards are handled for you.

  • EVM, Bitcoin, and Solana
  • ECDSA and EdDSA signing
  • HD-derived, unlimited addresses
cystody · walletsMPC 2/3

Wallets

4 networks

  • Ethereum0x9f2a…c41b642,180.00USDC
  • Base0x9f2a…c41b318,540.00USDC
  • Solana7Bq9…Xp2K204,900.00USDC
  • TronTJ9k…Lm3a910,000.00USDC

One address per chain family · HD-derived

Security

Designed so no single failure moves money.

Threshold signing is the foundation. The signer independently validates every transaction it signs, defeating attacks that bypass an application layer.

AttackWhy it fails
  • Compromise of one signerCan't sign alone; a threshold is required
  • Stolen API keyStill can't sign; the signer validates the transaction
  • Chain-ID substitutionValidated against an allowlist
  • Destination swap after signingDestination, value & data are validated

Custody that holds up under scrutiny.

See how threshold signing, validation, and approvals combine into a model you can put in front of an auditor.