Skip to content

Services

Treasury, keys and on-chain intelligence.

Native EVM builders with more than 10 years in the space. From wallet architecture to on-chain investigations, grounded in the intelligence we monitor daily, with operational security for the people, keys and systems behind decentralised operations.
Describe your setupRead the SOTA Operator Stack

Who it is for

  • Funds, DAOs and serious operators

    Your setup grew organically and has never been reviewed end to end.

  • Investors, protocols and incident responders

    Investors doing diligence, protocols assessing partners and teams responding to incidents.

  • Pseudonymous operators and DAO signers

    Your wallets predate your current opsec bar.

  • Treasury teams at high decentralisation

    Distributed signers who need deliberate friction on capital and a discipline for every DeFi interaction.

What you get

  • Architecture advisory

    Wallet and key architecture review (self-custody, multisig, hardware, session keys), private RPCs, MEV protection and transaction routing, a privacy stack with self-hosted endpoints and address hygiene, and protocol and chain risk assessment. You get a written architecture document your team can execute and audit.

  • Intelligence and OSINT

    Counterparty due diligence on wallets, entities, funding trails and infrastructure. Protocol deep dives on governance capture risk, admin keys and upgrade paths. Financial services research with historical data and wallet mapping. Findings never leave your circle.

  • Counterparty Watch

    A weekly delta brief on the wallets, protocols and entities you designate, with diff-based alerts only when something changes.

  • Incident intake

    A prioritised emergency slot for drains and hacks: a trace of what happened, exposure quantified and a documented report.

  • Wallet exposure scan

    The public labels, cluster links and counterparty paths your wallet already carries, mapped and explained before someone else pulls them. Severity-typed findings with funds-relevant risks first, and a fix plan. Scan artefacts stay with you.

  • Treasury key setup training

    Facilitated ceremony design, signer roles, thresholds and timelocks, and drills for treasury teams, built on the SOTA Operator Stack. Optional module: x402 and agent float once capital custody is solid.

How it works

  1. 1

    Brief

    Your assets, adversaries and constraints, and the decision the work supports.

  2. 2

    Investigate or design

    An on-chain and OSINT sweep with documented evidence, or a target setup with measured trade-offs.

  3. 3

    Report and roll out

    Written findings with confidence levels, or a guided rollout with verification at each step.

Web3 operational security

Protect the people, keys and systems behind decentralised operations.
Layered defence for high-stakes operatorsFor Ethereum operators
  1. Identity and accessYubiKey and FIDO2, passkeys, least privilege, session hygiene
  2. Wallet and key custodyHardware wallets, Safe multisig, Fluidkey receive patterns
  3. Network and privacyVPN or Tor, DNS, RPC choice, leak checks
  4. Endpoint hardeningLinux, macOS and Windows baselines
  5. Ops and recoveryBackups, drills, incident runbooks
From personal baseline to team-grade Web3 OpSec

  1. 1

    Baseline

    • Clean OS
    • Disk encryption
    • YubiKey for login and SSH

  2. 2

    Treasury keys

    • Safe m-of-n
    • Hardware wallets as signers
    • Ceremony and backups

  3. 3

    DeFi ops

    • Scoped approvals
    • Simulate, then sign
    • Governance and bridge runbooks

  4. 4

    Team SOTA

    • Role separation
    • Drills and recovery
    • Friction matched to high decentralisation

Our focus is high-decentralisation Ethereum and DeFi treasuries. YubiKeys gate people, Safe and hardware wallets hold capital, and DeFi operations need runbooks. Learn from these blueprints, then ask us for training to put them into practice.

Blueprint first, then training

The spine is DeFi-native treasury and key management for high-decentralisation teams. Training and the OS guides build on that blueprint.

OS hardening guides

Pair a hardened host with a YubiKey before you touch value. These guides sit under the SOTA stack.

When you need institutional grade or HNW security

Our SOTA Operator Stack is for sovereign and decentralised treasury teams. For banking-grade custody or high-net-worth personal security, these are the references we point people to, because they are the right tool for that mandate.

  • Taurus (opens in a new tab)

    Institutional custody

    Digital-asset infrastructure for institutions: custody, policy engines, HSM and MPC, and operational controls built for regulated environments and serious AUM.

    • Banking-grade key protection and governance
    • Multi-party approval and policy-driven workflows
    • The right fit when DIY Safe and hardware wallet operations are not enough

    taurushq.com

  • Operational and endpoint security for high-net-worth and high-risk operators: OS hardening, threat-modelled setups and security depth beyond generic consumer advice.

    • Linux, macOS and Windows hardening at a professional bar
    • Threat models for high-net-worth and high-risk people and teams
    • A complementary path when you need specialist HNW security

    opsek.ioOS security baselines we align with on the sovereign track.

Also useful

Public tools we point operators to for wallet, protocol, L2 and machine-payments risk. Pointing to a tool does not mean we endorse every score.

Ecosystem and stack

Data, custody, privacy and public-goods projects we work with.

Packages

  • Architecture advisory

    Threat model, target architecture and a guided rollout, with a written architecture document.

    Describe your setup

  • Intelligence and OSINT

    Investigations, Counterparty Watch and incident intake, with confidential reporting.

    Request research support

  • Wallet exposure scan

    Your addresses scanned, with severity-typed findings and a prioritised fix path.

    Scan my wallet

  • Treasury key setup training

    Ceremony design, signer roles, thresholds, timelocks and drills for your treasury team.

    Request training

Growth Boost

We help protect and foster the cypherpunk ethos by supporting community building, public-goods initiatives and fundraising.

What you get

  • Positioning and narrative work grounded in what your protocol actually does
  • Community architecture: channels, moderation and contributor funnels
  • Grant and quadratic-funding strategy grounded in ecosystem signals
  • A technical content pipeline that earns trust
  • An OpSec review of your public surface before you scale attention

How it works

  1. 1

    Audit

    Current positioning, community and public surface.

  2. 2

    Strategy

    A prioritised growth plan with security constraints.

  3. 3

    Execute

    Hands-on support with measurable milestones.

Who it is for

Early-stage protocols and public-goods teams that need traction without compromising values or security.

Start growth support

Questions

Are your findings confidential?
Yes. Findings never leave your circle, and wallet scan artefacts stay with you.
Where should a new team start?
Harden signer endpoints with the OS guides and pair each person with a YubiKey. Then set up the treasury Safe with a key ceremony. The full adoption order is on the SOTA Operator Stack page.
Can you help during an incident?
Yes. Incident intake is a prioritised emergency slot for drains and hacks, with a trace, exposure quantification and a documented report.
What if we need institutional custody?
The SOTA Operator Stack is for sovereign and decentralised treasury teams. For banking-grade custody we point you to Taurus, and for high-net-worth personal security to Opsek.

Describe your setup.

Tell us about your assets, signers and constraints. We start with a threat model.
Describe your setupRequest treasury training