Blockchain Security & Compliance | Trust Center | Blockdaemon
Blockdaemon Trust Center
Trust is our foundation. The Blockdaemon Trust Center provides transparency and assurance around our security, compliance, and privacy practices - ensuring confidence in our blockchain solutions.
Blog Section Description
Blockdaemon Completes SOC 1 Type I Report
Securing Critical Crypto Transactions with API Gateway Validation and Clear Signing
GENIUS Signed Into Law: A New Era Begins for Stablecoins and U.S. Market Leadership
Crypto-Asset Safekeeping by Banking Organizations: Another Piece of Guidance or a Turning Point for Crypto Custody?
Blockdaemon Completes SOC 2 Type II Compliance Report
A Win for Clarity: SEC Issues Long-Awaited Guidance on Protocol Staking
Stablecoins Step Into the Spotlight: Global Regulation Accelerates
SAB 122: Ushering in a New Era of US Digital Asset Custody in Banking
Security & Data Protection
Advanced Encryption Protocols
We have deployed over $6 billion in staking infrastructure, making us a trusted name in the staking industry.
Access Controls
We use Multi-Factor Authentication (MFA) & Role-Based Access (RBAC) to ensure only authorized personnel can access sensitive data.
Continuous Monitoring & Threat Detection
We maintain 24/7 monitoring to detect and mitigate vulnerabilities before they impact operations.
Security Audits & Bug Bounty Program
Regular audits by internal and external experts, plus crowdsourced security testing, help keep our systems robust.
Why Blockdaemon?
Blockdaemon provides secure, scalable blockchain infrastructure trusted by institutions and developers. With industry-leading certifications, risk protection, and a global network, we enable blockchain access at any scale.
Compliant
The only ISO 27001-certified independent staking provider.
SOC 1 Type I compliant
SOC 2 Type II compliant
Non-custodial products
OFAC compliant
Safe
A strong balance sheet, backed by top-tier institutions.
Strong corporate governance
Audited financials
100% slashing-risk coverage
Secure
Gold standard risk mitigation with four layers of protection.
24/7 monitoring
Mission-critical failovers
Industry-leading SLAs
Scalable
Highly available, distributed, and reliable infrastructure.
Decentralized data centers
Robust dashboards & analytics
Customizable deployment
Transparent Reporting & Business Continuity
We commit to full transparency across security and business continuity. Our slashing protection, backed by leading risk advisors and insurers, safeguards clients against potential losses. With 24/7 global monitoring, we detect and address issues in real time. To prevent disruptions, we maintain 70+ terabit DDoS protection, securing infrastructure against attacks. We disclose any security incidents that could affect compliance, security, or privacy - reinforcing trust and accountability.
To find out more about infrastructure uptime and reliability, check out our infrastructure page.
Security Best Practices
Infrastructure Security
Blockdaemon’s infrastructure is secured by enterprise-grade firewalls, real-time intrusion detection, and strict access controls. With 24/7 monitoring and automated risk mitigation, we provide institutional-grade security at every layer of our stack.
Product Security
Our products are built with security at the core, integrating secure coding practices, continuous security testing, and proactive threat detection. Through regular penetration testing and transparent security assurance, we ensure robust protection against vulnerabilities.
Internal Security Procedures
Blockdaemon enforces strict internal security protocols to maintain a security-first culture. Employees undergo continuous security training, adhere to least privilege access principles, and follow strict data handling procedures that align with institutional security standards.
Personnel Screening & Security Training
All employees and contractors undergo pre-screening and background checks to ensure they are qualified and trustworthy. Regular training on the latest security protocols and best practices ensures that personnel remain up to date on potential risks and mitigations.
Strict Access Controls & Duty Segregation
Engineers are assigned responsibilities with explicitly restricted access based on operational requirements. All production secrets are managed through service accounts, removing direct engineer access to deployment environments.
Data Minimization & User Privacy
We adhere to a strict data minimization policy, collecting and processing only what’s necessary to provide our services effectively. Users maintain full control over their data, with options to access, modify, or delete their information in compliance with privacy regulations. Additionally, anonymization techniques are implemented to improve privacy and protect sensitive information across all systems.
Glossary of Terms
Delegator Holders of the Network’s token who choose to stake these tokens to the protocol in order to participate in the network’s consensus mechanism. At all times throughout the staking process, the Delegator maintains control of the private keys associated with this address and has full control of the movement of tokens in and out of that address, subject to any bonding period set by the protocol.
Validator A node, configured with the protocol’s software, that operates as the primary method for producing new blocks of the Network. It does this by selecting and ordering the transactions to be included in the next block of the chain and creates that block per the protocol rules, in order to keep consensus on the blockchain.
Validator Keys A Validator typically has a keypair - public and private. Public keys are the Validator’s onchain identity, and the private key is used to control that identity on chain. The actions the Validator can perform are set by the Network.
Rewards Token distributions made by the protocol if a Validator Node is chosen to validate transactions. These rewards subsidize the cost of network participation.
Commission Fee The Validator charges the Delegators who choose to stake their tokens to the protocol via the validator infrastructure. This fee is charged as a % of any rewards distributed by the protocol to that validator.
Stake/Unstake (Bond/Unbond) The tokens that are staked to the network are usually locked up (“bonded”) for a specified period of time. The length of time differs from protocol to protocol and is entirely controlled by the protocol.
Slashing To guarantee the integrity of the network, the protocol imposes a penalty on any participant who violates the protocol’s rules. This is referred to as a slashing event. These rules usually relate to signing or double-signing blocks or extreme downtime.
Contact us to learn more about the Blockdaemon Trust Center
Your trust is our priority. If you have any questions, concerns, or feedback, please do not hesitate to reach out to us. Our team is here to support you and ensure your experience with Blockdaemon is secure and reliable.
Thank you for choosing Blockdaemon. We are committed to maintaining the highest standards of trust, security, and transparency in all that we do.