Three shares.Two required.
A 2-of-3 MPC configuration purpose-built for Vaulnox by Fireblocks-Dynamic— the world leader in MPC technology. The cryptographic bedrock of every Vaulnox vault.
Cryptography without a single key.
Multi-Party Computation (MPC) is a branch of cryptography developed over four decades of academic research. It enables multiple parties to jointly compute a result without any party ever learning the full inputs.
Applied to digital wallets, MPC means your private key is never created or stored as a single object. It is mathematically split into independent shares. Each share is cryptographically useless on its own. Only when enough shares collaborate — without ever being combined or reconstructed — can a valid signature be produced.
This is fundamentally different from:
- Single-key wallets— one key, one point of failure.
- Seed phrases — the 12- or 24-word phrase is the single key, in disguise.
- Multisig— multiple full keys, each its own point of failure, each visible on-chain.
With MPC, no complete key ever exists. No single party — not even Vaulnox — can unilaterally access your assets.
Three shares. Two required. One signature.
Your Vaulnox private key is split into three independent, encrypted key shares. Any two shares, collaborating through the MPC protocol, produce a valid signature. Any single share is cryptographically useless.
- Loss of any single share does not mean loss of funds.
- Compromise of any single share does not mean compromise of funds.
- No single party — device, server, or backup — ever holds enough to act alone.
The resulting signature is a standard blockchain signature — identical to what a traditional wallet produces. Chains can’t tell the difference. Wallet apps can’t tell the difference. Only the security model is different.
The full private key never exists anywhere, at any time.
Each share. Its own fortress.
Each key share lives in a different place, protected by different means. Breaking one share means nothing. Breaking two at once is mathematically implausible.
Your Device
The first share lives on your phone, inside the hardware-rooted Secure Enclave. It never leaves. Access is gated by your biometrics and device passcode. Compromising it requires physical possession anda hardware-security bypass — and even then, one share alone is useless.
Fireblocks-Dynamic
The second share lives inside an Intel SGX trusted execution environment operated by Fireblocks-Dynamic. Even root-level access to the server cannot read this share — the hardware enclave is sealed at the silicon layer. The share participates in signing only when the MPC protocol is called to authorize a transaction you have initiated.
Your Conditional Backup
The third share is yours alone. Quantum-proof encrypted, stored where you choose — Google Drive, iCloud Drive, or Vaulnox’s own secure server. Vaulnox cannot see, read, or use this share. It is inert by default, and activates only under conditions you configure through AEGIS: loss of device, verified medical event, inheritance trigger, duress protocol.
Built with the world leader in MPC.
Vaulnox didn’t adopt an off-the-shelf protocol. We partnered with Fireblocks-Dynamic— the world leader in MPC technology and one of the most widely deployed embedded wallet platforms, with 50 million+ users across 600+ wallet types — to develop a 2-of-3 MPC configuration purpose-built for Vaulnox.
The protocol was designed by the Fireblocks-Dynamic cryptography team to Vaulnox’s specifications. Key shares and signing logic execute inside Intel SGX hardware enclaves, preventing OS-level attackers from reading key material even with root access.
Vaulnox is non-custodial by design: you hold your share, the Fireblocks-Dynamic SGX enclave holds a signing share, and your conditional backup share is yours alone. No single party ever holds enough to act unilaterally.
The conditional third share, the SENTINEL policy engine layered on top, and the AEGIS Confidential Interview that personalizes it are Vaulnox innovations — built on cryptography the industry already trusts.
Why we call it Asset Protection MPC.
Most MPC implementations stop at “no seed phrase, distributed key security.” That’s a floor. Asset Protection MPC goes further in two specific ways.
A backup share. Under your control. Under SENTINEL.
The third share is your backup — fully encrypted, user-controlled, and SENTINEL-protected. Vaulnox cannot see, read, or use it. It activates only under the conditions you configure during your AEGIS Confidential Interview: loss of device, verified medical event, inheritance trigger, duress protocol, or any other scenario you define.
SENTINEL runs before the cryptography.
Every signature request is checked against your rules before any share computation begins — spending limits, geofencing, velocity controls, multi-party approvals, anomaly detection. The MPC protocol runs only if SENTINEL allows it.
Together, they turn MPC from “better wallet security” into a complete asset protection framework.
Built on institutional-grade cryptography
See what Asset Protection MPC can do.
Get StartedVaulnox — better than a bank.