Blockchain Security & Compliance | Trust Center | Blockdaemon

Blockdaemon Trust Center

Trust is our foundation. The Blockdaemon Trust Center provides transparency and assurance around our security, compliance, and privacy practices - ensuring confidence in our blockchain solutions.

Blog Section Description

Blockdaemon Completes SOC 1 Type I Report

Securing Critical Crypto Transactions with API Gateway Validation and Clear Signing

GENIUS Signed Into Law: A New Era Begins for Stablecoins and U.S. Market Leadership

Crypto-Asset Safekeeping by Banking Organizations: Another Piece of Guidance or a Turning Point for Crypto Custody?

Blockdaemon Completes SOC 2 Type II Compliance Report

A Win for Clarity: SEC Issues Long-Awaited Guidance on Protocol Staking

Stablecoins Step Into the Spotlight: Global Regulation Accelerates

SAB 122: Ushering in a New Era of US Digital Asset Custody in Banking

Security & Data Protection

Advanced Encryption Protocols

We have deployed over $6 billion in staking infrastructure, making us a trusted name in the staking industry.

Access Controls

We use Multi-Factor Authentication (MFA) & Role-Based Access (RBAC) to ensure only authorized personnel can access sensitive data.

Continuous Monitoring & Threat Detection

We maintain 24/7 monitoring to detect and mitigate vulnerabilities before they impact operations.

Security Audits & Bug Bounty Program

Regular audits by internal and external experts, plus crowdsourced security testing, help keep our systems robust.

Why Blockdaemon?

Blockdaemon provides secure, scalable blockchain infrastructure trusted by institutions and developers. With industry-leading certifications, risk protection, and a global network, we enable blockchain access at any scale.

Compliant

The only ISO 27001-certified independent staking provider.

SOC 1 Type I compliant
SOC 2 Type II compliant
Non-custodial products
OFAC compliant

Safe

A strong balance sheet, backed by top-tier institutions.

Strong corporate governance
Audited financials
100% slashing-risk coverage

Secure

Gold standard risk mitigation with four layers of protection.

24/7 monitoring
Mission-critical failovers
Industry-leading SLAs

Scalable

Highly available, distributed, and reliable infrastructure.

Decentralized data centers
Robust dashboards & analytics
Customizable deployment

Transparent Reporting & Business Continuity

We commit to full transparency across security and business continuity. Our slashing protection, backed by leading risk advisors and insurers, safeguards clients against potential losses. With 24/7 global monitoring, we detect and address issues in real time. To prevent disruptions, we maintain 70+ terabit DDoS protection, securing infrastructure against attacks. We disclose any security incidents that could affect compliance, security, or privacy - reinforcing trust and accountability.

To find out more about infrastructure uptime and reliability, check out our infrastructure page.

Security Best Practices

Infrastructure Security

Blockdaemon’s infrastructure is secured by enterprise-grade firewalls, real-time intrusion detection, and strict access controls. With 24/7 monitoring and automated risk mitigation, we provide institutional-grade security at every layer of our stack.

Product Security

Our products are built with security at the core, integrating secure coding practices, continuous security testing, and proactive threat detection. Through regular penetration testing and transparent security assurance, we ensure robust protection against vulnerabilities.

Internal Security Procedures

Blockdaemon enforces strict internal security protocols to maintain a security-first culture. Employees undergo continuous security training, adhere to least privilege access principles, and follow strict data handling procedures that align with institutional security standards.

Personnel Screening & Security Training

All employees and contractors undergo pre-screening and background checks to ensure they are qualified and trustworthy. Regular training on the latest security protocols and best practices ensures that personnel remain up to date on potential risks and mitigations.

Strict Access Controls & Duty Segregation

Engineers are assigned responsibilities with explicitly restricted access based on operational requirements. All production secrets are managed through service accounts, removing direct engineer access to deployment environments.

Data Minimization & User Privacy

We adhere to a strict data minimization policy, collecting and processing only what’s necessary to provide our services effectively. Users maintain full control over their data, with options to access, modify, or delete their information in compliance with privacy regulations. Additionally, anonymization techniques are implemented to improve privacy and protect sensitive information across all systems.

Glossary of Terms

Delegator Holders of the Network’s token who choose to stake these tokens to the protocol in order to participate in the network’s consensus mechanism. At all times throughout the staking process, the Delegator maintains control of the private keys associated with this address and has full control of the movement of tokens in and out of that address, subject to any bonding period set by the protocol.

Validator A node, configured with the protocol’s software, that operates as the primary method for producing new blocks of the Network. It does this by selecting and ordering the transactions to be included in the next block of the chain and creates that block per the protocol rules, in order to keep consensus on the blockchain.

Validator Keys A Validator typically has a keypair - public and private. Public keys are the Validator’s onchain identity, and the private key is used to control that identity on chain. The actions the Validator can perform are set by the Network.

Rewards Token distributions made by the protocol if a Validator Node is chosen to validate transactions. These rewards subsidize the cost of network participation.

Commission Fee The Validator charges the Delegators who choose to stake their tokens to the protocol via the validator infrastructure. This fee is charged as a % of any rewards distributed by the protocol to that validator.

Stake/Unstake (Bond/Unbond) The tokens that are staked to the network are usually locked up (“bonded”) for a specified period of time. The length of time differs from protocol to protocol and is entirely controlled by the protocol.

Slashing To guarantee the integrity of the network, the protocol imposes a penalty on any participant who violates the protocol’s rules. This is referred to as a slashing event. These rules usually relate to signing or double-signing blocks or extreme downtime.

Contact us to learn more about the Blockdaemon Trust Center

Your trust is our priority. If you have any questions, concerns, or feedback, please do not hesitate to reach out to us. Our team is here to support you and ensure your experience with Blockdaemon is secure and reliable.

Thank you for choosing Blockdaemon. We are committed to maintaining the highest standards of trust, security, and transparency in all that we do.