Security & compliance

Crypto custody security you can verify, not just trust.

Nodus360 custody runs on io.finnet’s trustless MPC, an M-of-N implementation independently audited by Kudelski Security, with open-source cryptography and audited disaster recovery. Here is exactly what protects your digital assets, layer by layer, so you can verify it rather than take our word for it.

Cryptography

Trustless MPC

Weighted signing authority distributed across unlimited parties. A valid signature is computed without the private key ever existing in one place.

Key material

No complete key, anywhere

Keys exist only as distributed shares inside the MPC protocol. A whole private key is never assembled at creation, at signing or in storage.

Approvals

Secure Enclave & biometrics

Transaction approvals happen in a dedicated app, protected by device hardware and biometric authentication.

Controls

Policy engine & audit trail

Allow-lists, limits and approval rules per vault, with verifiable logs of every request, approval and signature.

Continuity

Audited disaster recovery

BIP39-based recovery is built into the vault architecture and independently audited, so continuity never hinges on a single system.

Assurance

Audited cryptography, published openly

The M-of-N trustless MPC implementation behind every Nodus360 vault has been independently audited by Kudelski Security, and the cryptography is open source, reviewable by your own security team or an auditor of your choosing.

Ask us for the technical white paper and the current certification status of the underlying platform. We would rather show you the evidence than ask you to trust us.

M-of-N trustless MPC
Independent cryptographic audit
Audited by Kudelski
Open-source cryptography
Reviewable by your own team
Public
Technical white paper
Architecture and threat model
On request
Platform certifications
Held at infrastructure level; current status on request
Ask us

Full detail for your security review.

We will walk your security and compliance teams through the architecture, the audit and the recovery procedure in as much detail as they want.

Request access