Safeheron

Our Chief Policy and Security Officer Jag Foo @blocksaurus will be moderating a session on security, compliance, and data sovereignty at the SIJORI Digital Hub Summit — alongside leaders from @getfailsafe and Drew & Napier. 📍 Marina Bay Sands | 📅 June 25 🔗Register Now docs.google.com/forms/d/e/1FAI… #DigitalAssets #Compliance #Safeheron

Licensing ascends. The failure pattern stays identical — until the architecture changes. Worth a read if you're building custody or asset-holding infrastructure. safeheron.com/blog/etana-ins… #CryptoSecurity #DigitalAssets #InstitutionalCrypto #CryptoCustody

Independently verifiable control means: 🔐 Client holds key shards — no unilateral movement ⚙️ Rules enforced via TEE — violating transactions can't be signed 👁️ On-chain ownership, no internal ledger required 🛡️ Platform fails → assets still survive Not a promise. Architecture.

The most trust a platform can offer its end users isn't just a license certificate. It's an architecture that doesn't ask for trust — it proves it. 🧵

THORChain lost ~$10.8M last week. Root cause isn't confirmed yet — but the patch they shipped maps closely to mitigations that have been public since 2023. Safeheron CTO Kane Wang on what the fix tells us, and the harder question the industry needs to sit with. 👉linkedin.com/pulse/thorchai… #CryptoSecurity #InstitutionalAdopt

@THORChain lost ~$10.8M last week. Root cause isn't confirmed yet — but the patch they shipped maps closely to mitigations that have been public since 2023. Safeheron CTO Kane Wang on what the fix tells us, and the harder question the industry needs to sit with. 👉linkedin.com/pulse/thorchai… #CryptoSecurity #InstitutionalAdopt

The real answer is not "find a more trustworthy custodian." 💡The real answer is Institutional Asset Sovereignty: regardless of which custody arrangement an institution chooses, it retains independently verifiable control over its core assets. It is a capability standard. Full analysis 👇 safeheron.com/blog/etana-cli… #InstitutionalAssetSovereignty #DigitalAssetCustody

Most institutional clients pursuing breach-of-contract claims will find the liability was already contracted away. The deeper issue: clients had no independent way to verify their assets before the case broke. For a decade, "licensed + audited + insured" has been the gold standard for institutional custody. But across FTX → Prime Trust → Etana, the licensing weight ascended from state MTLs to trust companies to qualified custodians. They still failed.

Etana clients lost 70% of their money. 𝗧𝗵𝗲 𝘄𝗼𝗿𝘀𝗲 𝗽𝗮𝗿𝘁: 𝘁𝗵𝗲𝘆 𝗻𝗲𝘃𝗲𝗿 𝗵𝗮𝗱 𝟭𝟬𝟬% 𝗼𝗳 𝘁𝗵𝗲 𝗰𝗼𝗻𝘁𝗿𝗼𝗹. Kraken's parent Payward is suing former custody partner Etana for misappropriating 25M client assets. 6.83M cash against $26M in liabilities. Clients recover at most 26%. This is not a 70% loss. It's a 100% control problem. 🧵 safeheron.com/blog/etana-cli… #InstitutionalCrypto #SelfControl

Thanks @Conflux_Network for the invitation — great to be part of the conversation in Hong Kong. Adam Dai shared what we've long believed: in institutional crypto, security, compliance, and operational efficiency aren't competing priorities. They're an infrastructure problem. Stablecoin rails need the right foundation before anything else can scale. Institutions want AI in their workflows too — but not at the cost of asset control. Safeheron AI Connect extends that same foundation to AI: it analyzes, reports, and alerts. It never executes. Same compliance boundary. Now extended to your AI assistant. #Stablecoins #InstitutionalCrypto

The U.S. Senate vote on the CLARITY Act is happening soon. The banking lobby is fighting hard — because they know stablecoins settle in seconds, which a bank wire takes days to do. Read our CEO's take👇 #CLARITYAct #Stablecoins #CryptoRegulation

Security isn't a feature. It's the premise. Safeheron passes SOC 2 Type II — again. Audited by one of the Big Four. Building the most trusted infrastructure for institutional digital assets, continuously. safeheron.com/blog/safeheron… #SOC2 #CryptoSecurity #DigitalAssets

Sovereignty starts at the key layer. Safeheron is partnering with @efgh_global to secure the VNL1, Vietnam Layer One (VNL1) network with our full on-premise MPC-TEE-HSM stack. Zero vendor hold key shards. All cryptographic control stays within sovereign infrastructure. safeheron.com/blog/safeheron… #Safeheron #EFHG #KeySovereignty #SelfCustody

𝗪𝗵𝗲𝗿𝗲 𝗶𝘀 𝘆𝗼𝘂𝗿 𝘁𝗿𝘂𝘀𝘁 𝗰𝗵𝗮𝗶𝗻 𝗯𝗿𝗲𝗮𝗸𝗶𝗻𝗴 𝗱𝗼𝘄𝗻? Keys. Signers. Approvals. The most dangerous answer to a security question isn't "no." 𝙄𝙩'𝙨 "𝙄'𝙢 𝙣𝙤𝙩 𝙨𝙪𝙧𝙚." A 3-layer self-check for institutions holding digital assets 👇 #MPC #InstitutionalCrypto #DigitalAssetCustody

Security isn't about building a stronger lock. It's about systematically eliminating every single path an attacker can run all the way through. Three layers. Each one holds. Cost of attack rises exponentially. Full breakdown 👉 safeheron.com/blog/the-300m-…

Both incidents. Same diagnosis. There are 3 layers where single-point risk hides: 🔐 Technical — does a complete key exist anywhere? 👥 Authorization — are signers TRULY independent? ⌛️Process — is there a buffer that can't be switched off unilaterally? 🚨 Treating technical redundancy as comprehensive security is a cognitive misalignment that's now costing the industry hundreds of millions.

Two protocols. $300M lost. A thread on why the institutional trust chain doesn't end at multisig 🧵