Custody with no single point of failure.
Cermet splits your signing key three ways — your device and two independent secure enclaves — so every signature is 3-of-3. Policies you set gate each transfer, every action lands in a tamper-evident log, and a break-the-glass path means you can always recover, even without us.
Self-custody that a team can actually run.
Hot wallets trust one key. Multisig is clunky and chain-specific. Cermet is MPC custody with real governance — the safety of shared control with the feel of one app.
Keys that can't be stolen whole
Your key is generated in three pieces and never reconstructed — one on your device, two inside hardware secure enclaves. A stolen phone or a breached server holds a fragment, not funds.
3-of-3 MPC signingRules decide what's allowed
Allow small internal transfers, block raw signing, require two admins over a limit. Policy is enforced at signing time — not by trust.
Transfer policyApprovals, not passwords
Every sensitive action is proposed, then approved by the quorum you defined — on their own devices, with their own share.
GovernanceEvery action is written to a tamper-evident ledger.
Transfers, member changes, policy edits, key ceremonies — appended to a hash-chained record your own device can re-verify. If history were altered, the chain would break.
Bring shared custody to your treasury.
Create a multi-party wallet in minutes. Invite co-signers, set your policy, and transact with confidence.