MPC Key Management

No single point of compromise

Launch a distributed MPC node cluster for institutional-grade key management. Threshold signatures across 15+ chains—no single node ever holds the full private key. Powered by Lux MPC.

Request Access Read the Docs

15+

Supported Chains

<500ms

Signing Latency

Key Schemes

99.99%

Uptime SLA

Why MPC over traditional wallets?

Hardware wallets create a single point of failure. Multisig wallets are expensive on-chain. MPC splits the private key across distributed nodes so no single party—or attacker—can sign alone.

No single point of compromise
Keys are split into threshold shares across independent nodes. Even if t-1 nodes are compromised, the key is safe.
Byzantine fault tolerance
The cluster continues signing even when some nodes go offline. Configurable t-of-n threshold (e.g., 3-of-5).
Chain-agnostic
One MPC cluster signs for Bitcoin, Ethereum, Solana, XRP, Lux, TON, and 10+ more chains. ECDSA and EdDSA.
Key resharing
Rotate participants, change the threshold, or add new nodes—without generating new keys or moving funds.

CGGMP21 (ECDSA)

State-of-the-art threshold ECDSA protocol for Bitcoin, Ethereum, Polygon, BNB, XRP, and all secp256k1 chains. Replaces the older GG18 scheme with stronger security proofs and fewer communication rounds.

FROST (EdDSA)

Threshold Schnorr signatures for Ed25519 chains like Solana and TON. Supports Bitcoin Taproot. Efficient two-round signing with native aggregation.

LSS (Resharing)

Linear Secret Sharing enables dynamic resharing—change participants, rotate shares, or adjust the threshold without regenerating keys or moving assets on-chain.

One cluster, every chain

A single MPC deployment generates wallets and signs transactions across all supported networks.

ECDSA

Bitcoin (BTC)
Ethereum (ETH)
Lux Network (LUX)
XRP Ledger (XRPL)
Polygon
BNB Chain
Arbitrum
Base
Optimism

EdDSA

Solana (SOL)
TON

Coming Soon

Cosmos (ATOM)
Sui
Aptos
Polkadot

Production-grade MPC infrastructure

Bootnode deploys and manages the full MPC stack: nodes, messaging, encrypted storage, API, and monitoring.

Managed Node Cluster

Bootnode provisions a Kubernetes StatefulSet of MPC nodes with stable DNS, persistent encrypted storage, health checks, and auto-recovery.

Distributed Key Generation

Keys are generated collaboratively across all nodes. No single node—or operator—ever sees the full private key. Zero-knowledge proofs verify each share.

Threshold Signing

Only t-of-n nodes are needed to produce a valid signature. Sub-second signing latency for both ECDSA and EdDSA across all supported chains.

Key Resharing

Rotate participants, change threshold, or add new nodes without regenerating keys. Assets stay at the same addresses throughout.

Encrypted at Rest & In Transit

Key shares are encrypted with AES-256 in BadgerDB. Node-to-node communication uses NATS with TLS. Post-quantum TLS available.

JWT & OIDC Authentication

REST API secured with JWT tokens, OIDC login via Lux ID / Hanzo ID, role-based API keys, MFA support, and full audit logging.

REST API & Go Client

Full HTTP API for wallet creation, signing, and resharing. Go client library for direct integration. Etherscan-compatible bridge endpoint.

NATS + Consul Messaging

Nodes coordinate via NATS pub/sub with JetStream for reliable delivery. Consul handles service discovery and health checks.

Multi-Chain Wallets

One keygen ceremony produces addresses for all supported chains. Derive BTC, ETH, SOL, XRP, and LUX wallets from a single distributed key.

From zero to signing in minutes

Bootnode handles node provisioning, networking, and key ceremony orchestration. You call the API.

Configure

Choose your threshold (e.g., 3-of-5), select supported chains, and configure authentication. All through the dashboard or API.

Deploy

Bootnode provisions MPC nodes as a Kubernetes StatefulSet with encrypted storage, NATS messaging, and Consul discovery.

Generate Keys

Trigger a distributed keygen ceremony via the API. Nodes collaboratively generate key shares—no full key is ever assembled.

Sign

Submit signing requests via REST API. Any t-of-n nodes produce a valid ECDSA or EdDSA signature in under 500ms.

Simple API, serious security

Create wallets and sign transactions with straightforward REST calls. The MPC protocol complexity is handled by the node cluster.

API Reference

# Create a distributed wallet
curl -X POST https://mpc.yourorg.com/api/v1/wallets \
  -H "Authorization: Bearer $TOKEN" \
  -d '{"name": "treasury", "chains": ["ETH", "BTC", "SOL"]}'

# Response: addresses for every chain
{
  "wallet_id": "w_8f3a...",
  "addresses": {
    "ETH": "0x7c2e...9a1f",
    "BTC": "bc1q...xm4p",
    "SOL": "7Kf2...Rn3v"
  },
  "threshold": "3-of-5",
  "protocol": "CGGMP21+FROST"
}

# Sign an Ethereum transaction
curl -X POST https://mpc.yourorg.com/api/v1/sign \
  -H "Authorization: Bearer $TOKEN" \
  -d '{
    "wallet_id": "w_8f3a...",
    "chain": "ETH",
    "tx": {
      "to": "0xdead...beef",
      "value": "1000000000000000000",
      "gas": 21000
    }
  }'

Built for institutions

From treasury management to cross-chain bridges, MPC key management provides the security foundation.

Treasury Management

Multi-sig-grade security without on-chain overhead. CFOs and treasury teams sign with policy-controlled approval flows.

Cross-Chain Bridges

Secure bridge validators with threshold signatures. No single validator can authorize a withdrawal.

Custodial Wallets

Offer institutional custody with distributed key management. SOC 2 and regulatory compliance built in.

DeFi Protocols

Protect protocol-owned liquidity with MPC-secured admin keys. Eliminate single-key risks for governance actions.

Exchange Hot Wallets

Replace single-key hot wallets with threshold signing. Faster than multisig, more secure than HSMs.

Automated Signing

Integrate MPC signing into CI/CD pipelines, bots, and automated trading systems with API key authentication.

Your keys. Distributed. Never exposed.

Talk to our team about deploying an MPC network for your organization. Custom thresholds, dedicated infrastructure, and white-glove onboarding.

Request Access Read the Docs