Safeheron

Singapore MPC and TEE self-custody software for exchanges, funds and payment firms

Custodian KYC required Singapore
Visit safeheron.com
Our score
Fair
Custody model MPCSelf-custody software
SOC 2 report Yes

What is Safeheron?

Company and ownership

Safeheron is a self-custody technology company based in Singapore. Its user agreement names SAFEHERON Pte. Ltd. as the contracting entity, and Wade Wang is founder and CEO. Funding announcements say the company was established in 2019, while the timeline on its website lists January 2021 as the month Safeheron was founded. Yunqi Partners and Web3Vision co-led a $7 million Pre-A round in August 2022. HashKey Capital and Bixin Ventures led a Pre-A+ round in April 2023. The homepage puts total funding above $13 million and says Safeheron has worked with more than 260 institutions since 2021.

Custody model and security

The platform signs with 3-of-3 MPC threshold signatures. Under the user agreement, each private key is split into three shards: Safeheron controls two on its cloud servers and the client holds the third, so no transaction can be signed without the client's shard. Safeheron states that it never holds a complete private key. Intel SGX enclaves isolate key shards and transaction policies on the server side, and a policy engine runs each transfer through approval rules. An open-source offline recovery tool lets clients rebuild their keys if Safeheron stops operating.

Published audits include SlowMist reviews of its apps and MPC Node, a Kudelski Security review of the MPC library in 2021, Least Authority audits of the MPC-ECDSA code in 2023 and 2024, and a Cure53 audit of its MetaMask Snap. Safeheron completed another SOC 2 Type II audit in May 2026, carried out by a Big Four accounting firm, and passed its ISO/IEC 27001:2022 annual audit by DNV in February 2025.

Regulation and insurance

Safeheron sells software rather than custody services. Its terms state that the linked wallet is "owned, held and fully controlled" by the client, and the Trust Center lists certifications and compliance policies but no financial license. Accounts open only after onboarding is approved, and clients must provide the information Safeheron needs under anti-money-laundering and counter-terrorist-financing laws, including identification of significant beneficial owners. Services are not available in mainland China. The Trust Center lists digital asset custodial risks insurance provided by Lockton. Singapore law governs the agreement, with arbitration at the Singapore International Arbitration Centre.

Products and integrations

MPC Self-Custody is the hosted service, with vault wallets for treasury and DeFi use and APIs that can create millions of MPC wallets for end users. The REST API encrypts requests with AES-256, signs them with RSA keys and accepts calls only from allowlisted IP addresses. Official SDKs cover JavaScript, Go, Python and Java. Webhooks report transaction and security events, while the API Co-Signer automates approvals.

MPC Node Suite is a white-label package that firms deploy on their own infrastructure, with web and mobile client SDKs and thresholds such as 2-of-3 or 3-of-3. Safeheron also markets it for building air-gapped cold wallets. Compliance tools screen transactions and addresses, and Chainalysis KYT became available inside the platform in July 2026. Supported assets include 11 native coins, BTC and ETH among them, plus hundreds of tokens, with token lists for Ethereum, Arbitrum, BNB Smart Chain, TRON, Solana and TON. The Starter plan costs $5,750 a year on annual billing and includes $12 million of yearly outbound volume, with 0.1% charged above that.

Founders

Wade WangCEO
Best for:Exchanges and payment service providers running hot walletsOTC desks and brokers that want to keep control of their keysFunds and asset managers needing MPC treasury walletsWallet providers building white-label MPC wallets

Pros and cons

Pros

  • Client always holds one of three key shards, and Safeheron never holds a full key
  • SOC 2 Type II by a Big Four firm, renewed May 2026, plus ISO 27001:2022 audited by DNV
  • Public pricing, with a Starter plan at $5,750 a year
  • Open-source MPC libraries and an offline key recovery tool
  • Self-hosted MPC Node Suite for wallet providers and exchanges

Cons

  • No financial license, so it cannot act as a regulated or qualified custodian
  • Routine signing depends on Safeheron's two cloud-hosted shards being online
  • Starter plan caps teams at two and users at three, with 8x5 support

Our review

3.3/5
Fair

Safeheron suits crypto businesses that want audited 3-of-3 MPC wallets, public pricing and an on-premises option while keeping control of their keys. It holds no financial license and does not hold assets for clients, so firms that must use a regulated custodian need another provider.

Security4.0
Compliance2.5
Asset support3.5
Features3.5
Support3.0

Key handling is Safeheron's strongest point. The client always holds one of three shards, and Safeheron's two shards sit inside Intel SGX enclaves. If the company failed, the open-source recovery tool would let clients rebuild their keys. Outside checks back this up, from a Big Four SOC 2 Type II audit renewed in May 2026 to code audits by four security firms. Much of the cryptography is public on GitHub, including a C++ threshold-signature library and an Intel SGX development framework.

Pricing is public. A Starter plan at $5,750 a year gives smaller desks a known cost, though its limits of two teams and three users, with 8x5 technical support, suit only small operations. Larger firms move to custom Enterprise terms.

The trade-offs follow from the model. Safeheron is a software vendor with no financial license, so it cannot serve as the regulated or qualified custodian that some fund rules and investor mandates require. Because two of the three shards run on Safeheron's servers, routine signing depends on the service being online.

Compliance tooling is a strength for regulated clients. Chainalysis KYT, added in July 2026, lets compliance teams queue or freeze flagged transfers inside the same approval flow, and each decision is logged with a named approver and a timestamp. A published case study shows HashKey OTC Global running custody and wallet operations on the hosted service across EVM chains, Solana and TRON. In August 2026 Safeheron became technology partner in a post-quantum MPC signing pilot convened by the Responsible Fintech Institute, with ADGM and Malta's MFSA among the regulators taking part.

Safeheron fits exchanges, payment firms, OTC desks and funds that want to keep control of their keys while outsourcing wallet infrastructure, as well as wallet providers that want to run MPC on their own servers. It fits less well where a regulator or investor mandate requires assets to sit with a chartered custodian.

Listings are researched and drafted with AI assistance from public sources, then checked for accuracy and readability. Spot an error? Tell us. Editorial policy. Facts last checked Oct 28, 2026.
Sources (25)

Specs

KYC required ⓘ Yes · unverified
Custody model MPC, Self-custody software · unverified
Clients Institutions, Funds, Corporates · unverified
SOC 2 report Yes · unverified
API access Yes · unverified
MPC Yes · unverified
Qualified custodian No · unverified

Not disclosed by the provider: Regulated, Insurance, Assets supported, Staking, Licenses & charters, Cold storage.

Data from the provider's website and public sources, checked Oct 28, 2026. Fees and availability change; confirm on the official site before you sign up.

Key features

3-of-3 MPC-TSS

Each private key is split into three shards, with the client holding one and Safeheron holding two inside Intel SGX enclaves.

Policy engine

Approval workflows can be set by transaction type, asset type and risk level before any transfer is signed.

API Co-Signer

The API Co-Signer automates transaction approval and signing for API-driven flows.

Wallet-as-a-service

APIs can create and manage millions of MPC wallets for a client's end users.

AML screening

KYT and address screening, including Chainalysis KYT since July 2026, can queue or freeze flagged transfers.

Offline recovery

An open-source tool lets clients rebuild private keys from their shards without Safeheron.

Inside Safeheron

MPC Self-Custody

Hosted service for vault wallets, DeFi access and wallet-as-a-service under 3-of-3 MPC.

MPC Node Suite

White-label MPC wallet stack that firms deploy on their own servers with web and mobile SDKs.

Developer API and SDKs

REST API with RSA-signed requests, webhooks and SDKs in JavaScript, Go, Python and Java.

Web3 tools

Chrome extension and Web3 API for signing DeFi and NFT transactions on EVM chains.

AML and compliance

KYT and address screening with policy actions, including a Chainalysis KYT integration.

User reviews

No user reviews yet. Have you used Safeheron? Share your experience below.

Write a review of Safeheron

Your rating
At least 40 characters. Please write about your own experience.

Reviews are moderated before they appear.

FAQ

Is Safeheron a qualified custodian?

No. Safeheron sells self-custody software, and its user agreement says the client owns, holds and fully controls the wallet while Safeheron never holds a complete private key.

Is Safeheron regulated?

Safeheron's Trust Center lists ISO/IEC 27001:2022 and SOC 2 certifications but no financial license. Its contracting entity, SAFEHERON Pte. Ltd., is incorporated in Singapore, and clients pass AML onboarding before accounts open.

Who controls the private keys at Safeheron?

Each key is split into three shards under a 3-of-3 MPC scheme. Safeheron controls two shards on its servers and the client holds the third, and an offline recovery tool lets clients rebuild the full key.

What does Safeheron charge?

The Starter plan for MPC Self-Custody costs $5,750 a year on annual billing and includes $12 million of outbound volume a year, with 0.1% charged above that. Enterprise and MPC Node Suite pricing is custom, and payment is accepted in USD, USDT or USDC.

Does Safeheron have a SOC 2 report?

Yes. Safeheron attained SOC 2 Type I in June 2023 and Type II in October 2023, and a Big Four accounting firm completed another Type II audit in May 2026.

What insurance does Safeheron have?

Its Trust Center lists digital asset custodial risks insurance provided by Lockton.

Who founded Safeheron and how much has it raised?

Wade Wang is founder and CEO. Safeheron raised a $7 million Pre-A round in August 2022 and a Pre-A+ round led by HashKey Capital and Bixin Ventures in April 2023, and its website puts total funding above $13 million.

Which blockchains does Safeheron support?

Safeheron supports 11 native coins, including BTC and ETH, plus hundreds of tokens and all public EVM-compatible chains. Its token lists cover Ethereum, Arbitrum, BNB Smart Chain, TRON, Solana and TON.

Latest from Safeheron on X

Safeheron
@Safeheron · 5.9K followers
Follow
A platform can decline to process a withdrawal. It cannot prevent a deposit from arriving.

So what happens when screening flags a deposit that is already on-chain? 🧵 https://t.co/3sbNFVq4V1
Image attached to the post
1 0 0 114 View on X
Fast withdrawals and strong controls are often treated as a trade-off. With the right sequence, they can work together.

One withdrawal, seven controls 🧵 https://t.co/qMId8XmlL0
Image attached to the post
1 0 2 167 View on X
The keys were safe. The funds still moved.

If someone obtained valid internal credentials, which control would stop a forged withdrawal on your platform?

Our latest article ⬇️
https://t.co/PLExBrWaKf

#DigitalAssets #Payments https://t.co/tZSpdK965B
Image attached to the post
1 1 1 127 View on X
For consumer platforms handling high volumes of deposits and withdrawals, the wallet has become part of the core financial infrastructure.

Three observations 🧵
1 0 1 258 View on X
XRP Ledger is now on Safeheron.

Hold and move XRP from the wallet you already operate, with approval rules on every transfer and no single key to compromise.

#XRPL #XRP #DigitalAssets https://t.co/f7svKzjEa6
Image attached to the post
0 0 0 176 View on X

Recent public posts from @Safeheron, shown as published. Not reviewed or endorsed by CryptoReview.

Alternatives to Safeheron

NYSE-listed crypto custodian with an OCC-chartered trust bank and up to $250M insurance

KYC requiredQualified custodian · Multi-sig +3Institutions · Funds +3Regulated
4.5

MPC custody software and NYDFS-chartered qualified custody for institutions

Qualified custodian · MPC +2Institutions · Funds +1Regulated
4.3

Crypto custody through Anchorage Digital Bank, an OCC-chartered national trust bank

Qualified custodian · HSM +1Institutions · Funds +2Regulated
4.1

Coinbase's institutional prime broker, with custody at its NYDFS-chartered trust company

RegulatedSOC 2 reportStaking
4.1

FINMA-licensed Swiss crypto bank offering custody for 32 assets plus trading and staking

KYC requiredQualified custodian · MPC +2Institutions · Funds +2Regulated
4.0

Deutsche Börse's crypto custodian, supervised by FINMA and BaFin with a MiCA license

Qualified custodian · HSM +1Institutions · FundsRegulated
4.0