Concepts
The Vault is an institutional self-custody MPC wallet platform designed for organisations that need to hold digital assets without delegating control to a third-party custodian. It supports three deployment models — SaaS, hybrid, and fully self-hosted on your own infrastructure — and by default at least one key share you physically control must participate in signing, so control over funds stays with your organisation.
The Vault uses Multi-Party Computation (MPC) to split cryptographic key material across multiple independent signers, so no single device, server, or person ever holds a complete private key. A transaction can only be signed when a threshold quorum of signers cooperates — protecting assets even if individual components are compromised.
The Vault implements a configurable k-of-n threshold signing scheme (default 3-of-4): key shares are distributed across server and mobile signers, and a configurable quorum must participate to produce a valid signature. The one exception is a server-only wallet — an opt-in automation type whose shares are held only by server signers.
Who Is It For?
The Vault is built for institutions that:
- Require regulatory compliance with audit trails and policy enforcement
- Need operational controls such as address whitelisting, multi-approver workflows, and spending limits
- Want self-custody without the operational complexity of raw HSM-based key management
- Operate across multiple chains — Ethereum, Bitcoin, and TRON are supported out of the box
Platform at a Glance
Multi-Tenant Architecture
The Vault is a multi-tenant platform with an administrative API layer for platform management and service provider operations. Clients are CORPORATE or INDIVIDUAL, each with isolated profiles. Each profile contains four main modules:
- Wallet Management — HD wallets, assets, transfers, and transaction history
- User Management — users with profile-specific roles and permissions
- MPC — signers management and keys management
- Policies — security rules with limits, whitelists, and approval workflows
The administrative API controls and monitors all client profiles from a single entry point.
Core Components
| Component | Role |
|---|---|
| MPC Coordinator | Orchestrates multi-party signing sessions between signers |
| Server Signers (×2) | Always-on services, each holding one key share |
| Mobile Signer App | iOS/Android app holding one key share per enrolled device |
| Policy Engine | Evaluates governance rules before any signing begins |
| Admin Dashboard | Web UI for wallet management, user administration, and audit review |
| Identity-Aware Proxy | Authenticates every request before it reaches a backend service |
| Wallet Service | Chain-specific deposit detection, address generation, balance tracking |
| Identity Service | Authentication, session management, and RBAC |
Supported Networks
- Ethereum — native ETH, ERC-20 tokens
- Bitcoin — P2WPKH (native SegWit)
- TRON — native TRX, TRC-20 tokens (USDT and others)
More networks are coming soon — see the Blockchain Expansion Roadmap for what’s planned and when.