Skip to main content

17 posts tagged with "custody"

Digital asset custody solutions

View all tags

Anchorage's 20-Issuer Queue: The Stablecoin Factory Hiding in Plain Sight

· 11 min read
Dora Noda
Software Engineer

In May 2026, the most coveted real estate in American banking is not a vault, a trading floor, or even a Federal Reserve master account. It is a single OCC charter held by a Sioux Falls–domiciled bank with fewer than 500 employees. On Thursday, May 7, at Consensus Miami, Anchorage Digital CEO Nathan McCauley walked onstage and casually mentioned that "up to 20" financial institutions and large tech companies are now in a queue waiting to issue federally regulated stablecoins through his firm. He did not name them. He did not have to.

Since the GENIUS Act was signed into law in July 2025, Anchorage has won every meaningful US-compliant stablecoin issuance mandate in the country. Western Union's USDPT, launched on Solana three days before McCauley's keynote. Tether's USA₮, the company's "made in America" answer to Circle. Ethena's USDtb. State Street's freshly minted GENIUS Act–ready institutional fund. The list keeps growing because, for the next six to twelve months, there is essentially one federally chartered crypto bank that can take new stablecoin clients on day one — and it is not Circle, Erebor, or BitGo. It is Anchorage.

This is not a launch announcement. It is a structural moat — and it looks suspiciously like the early years of AWS, Stripe, and Plaid, when one vendor accumulated a half-decade of switching-cost advantage before competitors even arrived.

BNY Mellon Plants Its Flag in Abu Dhabi: How a $59.4T Custodian Just Made MENA the Third Pole of Institutional Crypto

· 12 min read
Dora Noda
Software Engineer

When the world's largest custodian quietly issues a press release about a "strategic collaboration" in Abu Dhabi, it is easy to scroll past. You shouldn't. On May 7, 2026, BNY — the bank that safeguards $59.4 trillion in client assets — announced it is bringing regulated Bitcoin and Ethereum custody to the United Arab Emirates, partnering with Finstreet Limited and the ADI Foundation to build the first G-SIB-grade digital asset infrastructure inside the Abu Dhabi Global Market (ADGM). That single decision, slotted between a Mubadala infrastructure play and a defense localization deal in the morning newswire, redrew the global map of institutional crypto custody.

For a decade, the institutional crypto custody story has been a two-pole narrative: the United States and Hong Kong/Singapore. With one announcement, BNY made it a triangle.

Lightspark and Visa Bring Self-Custodial Bitcoin and Stablecoin Debit Cards to 100+ Countries

· 11 min read
Dora Noda
Software Engineer

For most of the last decade, "spending crypto in the real world" meant handing your coins to an exchange, waiting for them to issue you a Visa or Mastercard, and accepting that the spending balance was no longer yours in any meaningful sense. The Coinbase Card, the Crypto.com card, the BVNK-powered programs — all of them solved the merchant-acceptance problem by re-introducing a custodian.

That model just cracked.

On April 29, 2026, Lightspark and Visa announced a partnership to issue stablecoin- and Bitcoin-backed Visa debit cards across 100+ countries, plugged directly into Lightspark's Grid platform. The same week, Lightspark's Grid Global Accounts launched at Bitcoin 2026 Las Vegas, and a new wave of issuers — including a self-custodial multi-asset wallet called Avvio — began onboarding to the rails. The pitch is blunt: a Visa swipe at any of 175 million merchants, funded by a balance the user actually holds the keys to.

If the architecture sticks, this is the first global Visa product where "your card, your coins" stops being a slogan and starts being a default.

What Lightspark and Visa Actually Shipped

The headline number is 100+ countries, but the more important detail is what Grid is. Lightspark Grid is an API platform that lets any fintech, neobank, or app behave like a global financial institution without becoming one. Through a single integration, a partner can offer:

  • Branded dollar accounts backed by stablecoins
  • Visa debit cards, virtual and physical, that swipe at 175 million merchants in 33 countries at launch
  • Real-time payouts to bank accounts and mobile money providers in 65+ countries, across 14,000 banks
  • Instant Bitcoin/fiat conversion routed over Lightning or the new Spark protocol
  • Stablecoin support including USDC on Solana, Base, and Spark

According to Lightspark, the network as configured already reaches roughly 5.6 billion people across an aggregated $93 trillion in GDP. The first phase rolls out in the United States and Europe, with planned expansion into Asia Pacific, Africa, and the Middle East later in 2026.

For Visa, this is a continuation of a clear 2025–2026 strategy. The card network now captures more than 90% of on-chain card volume through partnerships with crypto-native infrastructure providers, and its on-chain stablecoin settlement for issuers reached an estimated $3.5 billion annual run rate by late 2025. Lightspark gives Visa something it didn't have before: a partner whose entire stack is built around Bitcoin and Lightning settlement, not just stablecoins.

The Avvio Wedge: Self-Custody as a Product, Not a Compromise

The Lightspark–Visa announcement on its own would already be a big payments story. What pushes it into "architectural shift" territory is the type of issuer now showing up on Grid.

Avvio is one of the first card-issuing wallets to launch on the Lightspark+Visa stack as an explicitly self-custodial, multi-asset product. The pitch is unusually direct for a consumer payments app: real USD and EUR accounts, payouts into 120 countries, and a spending balance collateralized by self-custodial Bitcoin, gold, and tokenized-stock exposure. The wallet keys never leave the user's device, and the Visa rail sits on top.

This matters because every prior attempt at a "real" crypto debit card has eventually hit one of two walls:

  1. Custodial issuers (Coinbase Card, Crypto.com Card, the original BVNK pilots) had to take ownership of user funds to authorize merchant pulls in real time. Convenient — but the user is back to trusting an intermediary, with all the failure modes that implies.
  2. Pseudo-self-custodial wrappers typically required moving funds into a centralized intermediate balance the moment you swiped. Self-custodial in marketing copy, custodial at the moment of truth.

A Lightspark+Visa+Avvio-style stack threads the needle by separating roles. The user holds the keys. The wallet authorizes a draw against a verified balance. Lightspark Grid handles the conversion and settlement to Visa in real time over Lightning or Spark. The merchant gets dollars. Visa gets a clearing event. Nobody in the chain ever needed sole custody of the asset.

That is a meaningfully different security model from anything that has shipped at this scale before.

How This Stacks Up Against BVNK, MoonPay, and Coinbase

To understand how big a shift this is, it helps to look at where the other three contenders sit in May 2026:

  • BVNK + Visa Direct (2025–2026): BVNK's stablecoin payments infrastructure powered Visa Direct payouts to issuers in select markets, handling roughly $30 billion in annual stablecoin volume. The model was issuer-locked and operated through custodied balances. In a notable plot twist, Mastercard acquired BVNK for around $1.8 billion in March 2026, effectively migrating that infrastructure off Visa's roadmap.
  • MoonPay MoonAgents Card (May 1, 2026): MoonPay launched a stablecoin debit card aimed at AI agents and consumers, on the Mastercard network via Monavate. It links a self-custodial wallet to a virtual Mastercard, with revocable approvals and no transfer of custody at issuance. It is genuinely closer to self-custodial than older custodial-card products, but it lives on Mastercard rails and on a single chain.
  • Coinbase Cards and Base App: Coinbase still operates one of the most widely held crypto cards in the U.S., funded from the centralized exchange wallet. The Base App, launched as a self-custodial consumer wallet, points in the same direction as Avvio — but Coinbase has not yet plugged Base directly into a Visa-issuing path that bypasses the exchange custody layer.

Stack those four side by side and a clear pattern emerges. Mastercard's bet is on acquiring custodial stablecoin infrastructure (BVNK) and licensing it to AI-agent and fintech use cases (MoonAgents). Visa's bet, via Lightspark, is on building a programmable global rail where the issuer can be self-custodial by default. They are not the same architecture, and within 12–18 months one of them is going to start to look obviously correct.

The Numbers Behind the Inflection

The market context makes the timing less surprising. The total stablecoin market capitalization crossed $317 billion in early 2026, with USDT at roughly $187 billion and USDC at around $75.7 billion — and USDC growing 73% year over year, faster than USDT for the second consecutive year. Crypto card spending hit an $18 billion annualized run rate by January 2026 as everyday payments shifted on-chain. Some analysts now project stablecoins to settle more than $50 trillion in transactions during 2026, a figure that would put on-chain dollar transfers comfortably ahead of the legacy card networks on raw transfer volume.

What was missing from those numbers was a credible self-custodial spending experience at global scale. Card programs were either niche, custodial, or both. The Lightspark+Visa launch is the first piece of infrastructure that lets that $317 billion of dollar-pegged tokens, plus Bitcoin, plus tokenized assets like gold and equities, become spendable in 100+ countries without forcing the user to hand over the keys.

It also reframes the agent economy story. MoonPay positioned MoonAgents around AI agents that need to spend. Lightspark and Avvio are quietly building the same capability for humans first, with agent-callable controls bolted on top via Grid's "agent permissions" layer. Both groups are converging on the same insight: the spending experience and the custody decision should be decoupled.

What This Means for Web3 Infrastructure

For builders sitting one layer below the card network, the Lightspark+Visa launch reshapes demand in three concrete ways:

1. Continuous balance attestation becomes the new hot path. A self-custodial card has to verify "the user has X dollars of spendable balance" in milliseconds, every swipe, often across multiple chains and assets. That is not a one-shot RPC pattern. It looks much more like a high-QPS read workload — eth_call, getBalance, oracle lookups, and Lightning channel state — sustained 24/7 against millions of wallets. RPC providers are about to feel this.

2. Multi-asset price feeds move from analytics to settlement-critical. When the spending balance is collateralized by BTC, gold, USDC, and tokenized stocks at once, the price feed that values that basket is no longer a UX detail. It is part of the authorization flow. Latency, freshness guarantees, and feed redundancy become payments-grade requirements rather than dashboard features.

3. Lightning/Spark settlement attestation becomes a queryable surface. For Bitcoin-backed swipes, the issuer needs to prove that a Lightning payment cleared, that a Spark transfer is finalized, and that a USDC swap settled — all in time to authorize the Visa transaction. Every one of those is a new RPC pattern that today's Ethereum-shaped infrastructure was not designed for.

The shape of all this is different from how centralized exchange wallets generated load. Exchange wallets concentrated traffic at a few endpoints. Self-custodial spending wallets fan out load across millions of independently keyed addresses, each polling for balances, each requiring its own authorization checks, each potentially live across multiple chains.

What to Watch Next

Three open questions will decide whether this becomes the new template or a well-funded experiment:

  • Does MiCA and the GENIUS Act compliance overhead force self-custodial issuers like Avvio back behind a custodian for licensing reasons in Europe and the U.S.? The technical architecture is ready. The regulatory architecture for self-custodial card programs is genuinely unclear.
  • Does Mastercard counter with a self-custodial Visa-style stack of its own, or double down on the BVNK-MoonPay custodial agent thesis? The two networks are now visibly diverging on architecture for the first time in years.
  • Do other issuers — BVNK successors, Bridge, regulated neobanks — follow Avvio onto Grid, or do they wait for the regulatory dust to settle? The first 90 days of issuer onboarding will be telling.

Either way, the era where "spending Bitcoin" required surrendering Bitcoin is ending. The infrastructure to keep the keys and swipe the card now exists, in 100+ countries, on the world's largest card network.

BlockEden.xyz provides enterprise-grade RPC and indexing infrastructure for the chains powering this new self-custodial payments stack — including Solana, Base, and the Bitcoin-adjacent Lightning ecosystem. If you're building wallets, card programs, or agent-callable financial services on top of this architecture, explore our API marketplace to ship on rails designed for the workload.

Sources

OCC Letter 1188: The Quiet Rule Letting US Banks Take Over Stablecoins

· 13 min read
Dora Noda
Software Engineer

On May 1, 2026, the public comment window closed on the most consequential US stablecoin rule of the cycle. Almost no one outside the bank legal departments noticed that the regulatory unlock for the country's four largest banks had already happened five months earlier — and that the comment-period close converts a quiet 2025 interpretive letter into a live operational green light.

That earlier unlock is OCC Interpretive Letter 1188, published December 9, 2025. It runs 17 pages, uses the dry phrase "riskless principal crypto-asset transactions," and on its face just confirms an obscure brokerage permission. In practice, it is the legal hinge that lets JPMorgan, Citigroup, Bank of America, and Wells Fargo offer their corporate and retail customers crypto and stablecoin trading without ever registering as a money services business — the bottleneck that has blocked nationally chartered banks from this product line for the better part of a decade.

The combination of IL 1188, the OCC's GENIUS Act stablecoin framework whose comment period just closed, and a string of bank-side filings (Wells Fargo's WFUSD trademark, Citi's 2026 custody launch, the four-bank joint stablecoin discussions) means Q2 2026 is the quarter US banking quietly absorbs the stablecoin layer. Here is what the rule actually does, why it matters more than the headline rules everyone is watching, and what changes in the next ninety days.

What "riskless principal" actually means

A "riskless principal" trade is the unsexy cousin of agency brokerage. The bank stands between two customers: it buys a crypto asset from one, then immediately sells the same asset to the other at a matched price. The bank never carries the position on its balance sheet beyond the few seconds of settlement. It collects a spread or fee, but it does not take directional market risk.

The OCC's analysis in IL 1188 is unusually direct. Riskless principal crypto trades are, in the agency's words, "the functional equivalent" of recognized bank brokerage activity and "a logical outgrowth" of the crypto custody activities that the OCC already permits under Interpretive Letter 1170. The agency leans on three of its four "business of banking" factors weighing "strongly in favor" of permission. There is no carve-out, no pilot, no sandbox — it is simply confirmed as part of what national banks are allowed to do.

The settlement-default risk the bank inherits is described as "nominal." That is the legally important word. Once the OCC frames a crypto activity as carrying only nominal risk, the regulatory perimeter that applied to the entire prior generation of bank-crypto rulemaking — capital surcharges, supervisory expectation letters, FedNow-style operational reviews — collapses into routine examination.

For context, IL 1188 was preceded by IL 1186 on November 18, 2025, which separately authorized national banks to pay blockchain network fees and hold the small principal balances of crypto needed to do so. Together, the two letters establish that a national bank can custody crypto, transact crypto for customers, and pay the gas to make the transactions land — the full stack a corporate-treasury or retail customer needs from their primary bank.

Why the MSB exemption is the actual breakthrough

The reason Wells Fargo, Citi, and JPMorgan have not been competing with Coinbase and Robinhood for retail crypto trading is not technical. It is the federal Bank Secrecy Act. Most non-bank firms that buy and sell crypto for customers fall under FinCEN's "money transmitter" and "money services business" categories, with all the registration, state-by-state licensing, and BSA compliance overhead that brings.

The BSA explicitly excludes banks from the MSB definition. That has always been true, but until IL 1188 the OCC had not made clear that an in-bank crypto trading desk would benefit from the carve-out — supervisors could and did read prior guidance as requiring banks to push the activity into a separately licensed subsidiary. The 2020-2022 Brian Brooks-era guidance attempted this clarity and was partially walked back during the Hsu acting-chairman period; IL 1188 finishes the job that was started.

The competitive consequence is asymmetric. Coinbase, Kraken, and Gemini have spent years and tens of millions of dollars building money transmitter licenses across all 50 states, plus FinCEN registration, plus BitLicense, plus international equivalents. A national bank inherits the equivalent of that stack at near-zero marginal cost the day it opens its crypto trading desk. The bank's federal charter pre-empts state-by-state licensing for permissible banking activities, and the OCC's interpretive letter is the keystone that says crypto trading is one of those activities.

The GENIUS Act stablecoin framework that just closed for comment

While the riskless-principal letter sits in the structural foundation, the rule everyone is actively watching is the OCC's Notice of Proposed Rulemaking implementing the GENIUS Act, published February 25, 2026. The 60-day comment window closed May 1.

The proposal does five things that matter for the bank-crypto integration story:

  1. Reserve composition rules. Every payment stablecoin in circulation must be backed dollar-for-dollar by reserves held separately from the issuer's own funds. Eligible reserves are US cash, insured deposits, short-term Treasury notes, government money-market funds, and tokenized versions of the same.
  2. Custody perimeter. Only national banks, federal savings associations, federal branches of foreign banks, and federally licensed payment-stablecoin issuers can serve as covered custodians for stablecoin reserves, pledged stablecoins, or private keys held on behalf of others.
  3. Yield prohibition. No interest, no rebates, no rewards programs that meaningfully echo yield. The American Bankers Association and 52 state banking associations filed a joint comment letter urging the OCC to harden this language even further to head off "stablecoin rewards" workarounds.
  4. Federal preemption of state issuers. Larger state-licensed issuers move into federal oversight, eliminating the patchwork that previously let issuers pick the most permissive state regulator.
  5. Foreign-issuer perimeter. Tether, Circle's offshore entities, and any non-US issuer touching the US distribution channel must clear an OCC recognition process.

The 200+ public-comment questions the OCC seeded into the NPRM signal that the agency expects substantial back-and-forth before a final rule, but the core design — banks issue, banks custody, banks distribute, no yield — is already locked. The rule's center of gravity is exactly where IL 1188's center of gravity is: putting the licensed national-bank rail at the heart of the stablecoin stack.

Why this lands now: the bank-side filings tell the story

If IL 1188 had landed in 2022, it would have been a curiosity. Landing in late 2025 with the GENIUS Act framework about to lock in, it is a starter pistol. The bank-side filings since December tell you the largest US institutions read the letter the same way:

None of these moves make sense in isolation. Together with IL 1188 and the GENIUS Act NPRM, they form a coherent stack: the OCC clears the activity, the GENIUS framework defines the product, and the four largest US banks build the distribution.

What changes operationally in Q2 2026

For corporate treasurers, the pitch from a relationship bank changes from "we can refer you to a custodian for crypto exposure" to "we offer custody, on-ramp/off-ramp, and 24/7 stablecoin settlement directly through your existing cash-management portal." For the first time, a Fortune 500 CFO can open a stablecoin balance, settle a cross-border supplier invoice, and reconcile it against a primary-bank statement without ever touching a crypto-native fintech.

For the existing crypto exchanges, the competitive pressure goes vertical. Coinbase's institutional business has been the fastest-growing segment of its revenue base; that growth was always premised on banks not being allowed in the lane. With IL 1188 plus charter approvals — Coinbase itself received conditional national trust bank approval on April 2, alongside BitGo, Paxos, and others — the regulatory moat that protected crypto-native institutional business shrinks fast.

For Tether and Circle, the GENIUS Act framework's foreign-issuer perimeter combined with bank-issued domestic stablecoins creates a two-front competitive squeeze. Tether's USAT launch on January 27, 2026 was an explicit acknowledgment that the offshore USDT footprint cannot, by itself, compete for US institutional flow under GENIUS. Circle's compliance-first positioning becomes less of a unique selling proposition the moment Wells Fargo, Chase, Citi, and BofA each issue their own.

The infrastructure shift this implies

The technical surface a bank needs to ship a stablecoin product is unrecognizable from the surface a typical mid-market bank IT shop has built out. Real-time on-chain transaction monitoring, multi-chain RPC and indexing, sanctions and OFAC screening on every wallet address, programmable settlement APIs, and qualified-custody-grade key management all become first-class banking infrastructure rather than crypto-vendor add-ons.

The big four banks will mostly buy this rather than build it. The Aon insurance settlement above ran on standard public-chain infrastructure; bank-issued stablecoin products will need the same RPC reliability, indexing, and compliance layers that every regulated crypto issuer already buys. The 36 stablecoin license applications pending with the Hong Kong Monetary Authority point to a global pattern: every regulated stablecoin issuer needs the same plumbing, and that plumbing is increasingly the constraint, not the regulation.

BlockEden.xyz provides enterprise-grade RPC, indexing, and transaction infrastructure for stablecoin issuers and institutional builders across 25+ chains. Explore our API marketplace to build on infrastructure designed for the bank-grade products coming online in 2026.

Why the timing is the story

The under-noticed move in US crypto policy is rarely the headline rule. The CLARITY Act has slipped from April to May markup with Polymarket odds dropping from 64% to 47%. The SEC's covered-UI exemption took most of the regulatory-clarity oxygen in mid-April. Treasury's FinCEN-OFAC stablecoin AML NPRM consumed the compliance press cycle. Each of those rules matters, but each will require months of follow-on rulemaking before it changes a single bank product roadmap.

IL 1188 is different precisely because it is small, dry, and operational. It does not need a markup, a comment period, or a follow-on rule. It is in force. The May 1 close of the GENIUS Act comment period removes the last "we'll wait for the regulators" excuse. A bank that wanted to build stablecoin products had a complete legal foundation as of December 9, 2025; today it has the complete product framework. The next move is product launches, and the joint-stablecoin and trademark filings strongly suggest those launches arrive before the end of Q3 2026.

The structural prediction that follows: by year-end 2026, a meaningful share of US corporate-treasury stablecoin balances sits inside relationship-bank products rather than in Coinbase Prime, Anchorage, or Fireblocks accounts. The crypto-native infrastructure providers do not disappear — they sell more shovels than ever — but the customer of record shifts up the stack to the banks. The riskless-principal letter is the small print that lets this happen, and Q2 2026 is the quarter the small print becomes the headline.

Sources

Fireblocks Hits $2 Trillion: How One Stack Became the Snowflake of Stablecoin Issuance

· 10 min read
Dora Noda
Software Engineer

A single number from Fireblocks' April 2026 update reframes how anyone should think about the institutional crypto market: the company has now processed more than $2 trillion in annual transaction volume, with stablecoins alone accounting for roughly 55% of that flow. That is not a venture pitch. That is real money, moving over real rails, on a stack that twelve of Europe's largest banks just chose to anchor a new euro stablecoin on.

Read it twice. The most consequential infrastructure story of this cycle is not a new chain, a new rollup, or a new bridge. It is a Tel Aviv–founded custody company that quietly became the default backend for stablecoin issuance, institutional custody, and tokenization — at the same time. Fireblocks is now the closest thing the digital asset economy has to a Snowflake moment: a single platform that becomes so deeply embedded in customer workflows that switching costs compound into multi-year contracts no rival can dislodge.

The Number Behind the Number

Fireblocks crossed an even more striking milestone earlier this year — over $10 trillion in cumulative transaction volume across more than 300 million wallets and 2,400+ institutional clients. The $2T annual run rate is what that compounding looks like at scale. To put it in context, the company processes roughly $200 billion in stablecoin transactions every month, more than 35 million stablecoin transactions in that same window, and now sits at about 15% of all global stablecoin volume.

Those numbers matter for one reason: they describe a company that is no longer an option in the institutional crypto stack. It is the assumption.

When a fintech, bank, or asset manager sits down to architect a digital asset business in 2026, Fireblocks is not on the shortlist alongside three or four peers. It is the default candidate that other vendors must justify replacing. That is the position Snowflake earned in cloud data warehousing between 2019 and 2022 — and it is precisely the position Fireblocks has earned in custody, policy, and tokenization between 2023 and today.

Why Qivalis Changes Everything

The clearest sign of this shift came on April 21, 2026, when the Qivalis consortium — a group of twelve major European banks including BBVA, BNP Paribas, ING, UniCredit, KBC, CaixaBank, Danske Bank, DekaBank, DZ BANK, Banca Sella, Raiffeisen Bank International, and SEB — selected Fireblocks as the technology backbone for its MiCAR-compliant euro stablecoin, scheduled to launch in the second half of 2026.

This is the strategic capture moment. Consider what Qivalis is and what it forces:

  • It is the most credible euro stablecoin attempt to date. Twelve regulated banks, one Dutch Central Bank–regulated issuer, one MiCAR-aligned framework. Europe's incumbent banks are not just experimenting; they are building the rails they intend to clear corporate payments on.
  • It standardizes Fireblocks' ERC-20F token contract — a permissioned ERC-20 variant with built-in compliance hooks, sanctions screening, freeze controls, and audit-ready reporting — as the de facto template for bank-grade stablecoins in Europe.
  • It creates a self-reinforcing adoption loop. The next bank consortium that sets out to launch a regional stablecoin — whether for the Nordics, the Gulf, or Latin America — will look at Qivalis, see Fireblocks underneath, and choose the same stack rather than re-litigate the architecture from scratch.

That last point is the moat in two sentences. In enterprise software, "second movers copy the first mover's vendor list" is not a saying. It is a fact of procurement. Fireblocks has now been chosen by the most regulated and most procurement-heavy buyers in the world. Every subsequent bank-issued stablecoin, in every region, is now Fireblocks' to lose.

And it matters even more because the euro stablecoin market is essentially a greenfield. As of January 2026, the global stablecoin market sat at roughly $305 billion — but 99% of it was dollar-denominated. Euro-pegged stablecoins represented just $650 million in supply. A bank-backed, MiCAR-compliant euro stablecoin sitting on Fireblocks rails could expand that figure by an order of magnitude within eighteen months, and every euro of that growth strengthens the platform Fireblocks has built.

The Architecture That Makes the Moat Real

It is tempting to look at Fireblocks and see a custody product. That framing misses the point. What Fireblocks actually sells is an integrated stack of four products that are individually competitive and collectively untouchable:

  1. MPC-CMP key management. Fireblocks built its own multi-party computation protocol in-house, with key shares stored in trusted execution environments. Competitors like BitGo combine multisig with MPC built on third-party open-source libraries; Fireblocks owns the cryptography end-to-end and runs its policy engine inside a secure enclave.
  2. A transaction-policy engine. This is the under-appreciated layer. Every transaction in Fireblocks runs against a programmable rule set covering counterparties, amounts, time-of-day, dual-approval, address whitelists, and dozens of other dimensions. For an institutional treasury, this is the difference between "we have a wallet" and "we have controls our auditor will sign off on."
  3. Connectivity to 150+ chains and 1,500+ tokens. When a customer adds a new chain or asset, they don't go through a procurement cycle — they enable it in the dashboard. That elasticity is what locks in customers who started on Ethereum and are now operating across Solana, Sui, Aptos, Base, Polygon, Stellar, and increasingly purpose-built stablecoin L1s.
  4. The Fireblocks Network. A directory of 2,400+ institutional counterparties that settle more than $70 billion per month in fully on-chain, self-custodied transactions. BitGo's competing Go Network includes roughly 450 counterparties and operates on an omnibus, off-chain model — a meaningfully different (and less composable) architecture.

Stack those four together and you get something none of Fireblocks' rivals can credibly replicate. BitGo is custody-first. Anchorage Digital is an OCC-chartered bank with deeper regulatory standing but a curated set of about 60 supported assets and a $10M minimum that puts it out of reach for most fintechs. Copper plays well in Europe and the Gulf but does not match Fireblocks' integration breadth. Safe is open-source multisig — excellent for DAOs and protocols, not built for issuance and policy. Coinbase Prime and Circle's API have specific roles in the workflow but are pieces, not the whole stack.

This is the Snowflake comparison made literal. Snowflake won not because its query engine was uniquely brilliant, but because it sat at the intersection of enough adjacent jobs (storage, compute, sharing, governance) that customers stopped buying point solutions. Fireblocks now occupies the same intersection in digital assets.

The 2027 IPO Math

Public reporting puts Fireblocks at an $8 billion valuation as of its 2022 Series E. The intervening four years have transformed the underlying business. With $2T in annual volume and an effective take-rate of even 3 to 5 basis points across custody, policy, network, and compliance services, the implied annual revenue base sits somewhere in the $600 million to $1 billion range — before counting tokenization, native yield, and stablecoin issuance services.

Apply the multiples that Circle's June 2025 NYSE debut established for crypto-infrastructure businesses (Circle priced at $31 and closed its first day at $82.84, valuing the business at roughly $18 billion against meaningfully smaller revenue), and Fireblocks at IPO lands in a defensible $15–25 billion range. CEO Michael Shaulov has also publicly mused about tokenizing the equity itself rather than running a conventional listing — a path that would be both narratively perfect and structurally difficult, but worth watching.

The bigger point is not the valuation band. It is that Fireblocks is one of the very few crypto companies whose financials make sense to a generalist public-market investor. Recurring software revenue, defensible moat, regulated buyers, secular tailwind. That is the Coinbase pitch with fewer trading-volume swings.

What Could Actually Break This

Every too-clean story deserves a stress test. Three things could disrupt the Fireblocks trajectory:

Vertical disintermediation. Coinbase Prime, MetaMask Institutional, and Circle's expanding API stack are all building issuance and treasury tooling in-house. If a Tier-1 issuer can get "good enough" custody plus a native distribution wedge from a single vendor, Fireblocks' bundle thesis comes under pressure at the high end.

Bank-chartered competition. Anchorage Digital's OCC charter and BitGo Trust's NYDFS qualification mean some institutions will choose a bank over a software vendor for regulatory and insurance reasons. (Fireblocks responded by launching its own NYDFS-chartered Trust Company in mid-2025, narrowing this gap, but the bank-charter story is still partly Anchorage's to tell.)

A single security incident. When you hold the cryptographic primitives for thousands of institutions, every CVE is existential. Fireblocks' track record here is strong, but the asymmetric tail risk never disappears.

None of these is fatal in 2026. All three are the right things for a competitor or an investor to track in 2027.

The Read for Builders

If you build in this market, the takeaway is simple: the institutional infrastructure layer is consolidating faster than most ecosystem maps suggest. Three years ago, "custody," "tokenization," "policy," and "settlement" were four separate vendor categories. In 2026 they are increasingly one purchase decision, and Fireblocks is winning the bake-off for that purchase decision more often than anyone else.

For developers and infrastructure operators who want to plug into the rails the institutions are actually using, the implication is to design integrations against this consolidated stack rather than around it. Stablecoin issuers will increasingly assume Fireblocks-style permissioned-token semantics. RWA platforms will assume policy-engine-style counterparty controls. Bank-grade workflows will assume MPC-CMP key management as the floor, not the ceiling.

The companies that will matter in the next phase are the ones that complement this stack — purpose-built indexers, low-latency RPC, agent-aware wallets, cross-chain orchestration — rather than try to compete with it head-on.

The Snowflake Question, Answered

Snowflake's $70 billion peak market cap was not the prize. The prize was that Snowflake became the noun customers used to describe what they were doing — "we'll just put it in Snowflake." Fireblocks is on the same path. When the next bank consortium plans a stablecoin, they don't say "we'll evaluate three custody providers." They say "Fireblocks is the obvious choice; let's confirm the integration plan."

That is the moat. $2 trillion is the receipt.


BlockEden.xyz operates the high-availability RPC and indexing infrastructure that institutional builders rely on across Sui, Aptos, Solana, Ethereum, and 25+ other chains. If you are designing the developer-facing layer that sits next to a Fireblocks-grade custody stack, explore our API marketplace — built for the same SLAs the people moving real money already demand.

BtcTurk's Third Hack in 19 Months: The Emerging-Market CEX Trust Tax

· 10 min read
Dora Noda
Software Engineer

Three breaches. Nineteen months. More than $140 million gone. And yet BtcTurk still processes the bulk of Turkey's roughly $200 billion in annual crypto volume — because there is nowhere else for most Turkish users to go.

That tension is the real story of the January 2026 BtcTurk hack, not the $48 million headline. When Turkey's dominant exchange loses hot-wallet funds for the third time since mid-2024, and retail users shrug and keep trading, something structural is breaking. Emerging-market crypto users are paying what amounts to a "trust tax" — accepting materially weaker custody than international competitors in exchange for local-currency rails. As global crypto adoption shifts from speculative trading to stablecoin-denominated savings, that tax is about to get noticed.

Hyperliquid's 44% Comeback: How a Purpose-Built L1 Outran Aster and Forced Wall Street to Rethink Crypto Custody

· 10 min read
Dora Noda
Software Engineer

Seven months ago, Aster was holding 70% of the on-chain perpetuals market and Hyperliquid had been written off as last cycle's story. On April 20, 2026, the arithmetic inverted: Hyperliquid sits at 44% perp-DEX market share, Aster has shrunk to 15%, and Grayscale used the same day to rip Coinbase out of its HYPE ETF filing and hand custody to Anchorage Digital — the only federally chartered crypto bank in the United States. Two data points. One hinge moment for where derivatives actually trade, and who the U.S. government trusts to hold the assets when they do.

The Bitcoin ETF Fee War Has Begun: How Morgan Stanley's 0.14% MSBT Is Forcing a Race to Zero

· 10 min read
Dora Noda
Software Engineer

Two years ago, buying Bitcoin through a US-listed fund cost you 1.5% a year. Today, it costs 0.14% — and Wall Street is only getting started.

On April 8, 2026, Morgan Stanley launched MSBT, the first spot Bitcoin ETF ever issued directly by a major US bank. Its 0.14% expense ratio undercuts BlackRock's $55 billion IBIT by 11 basis points and Grayscale's long-dominant GBTC legacy product by a factor of ten. Within its first week, MSBT pulled in more than $100 million — landing in the top 1% of all ETF launches ever tracked by Bloomberg's Eric Balchunas.

The headline is a fee cut. The real story is a structural repricing of the entire institutional on-ramp to crypto. When the biggest wealth manager in the United States decides to treat Bitcoin exposure as a commodity loss-leader rather than a premium product, the economics of every other issuer — and every service provider in the stack — quietly change underneath them.

45 Seconds to Drain Your Wallet: Inside Ledger's MediaTek Dimensity 7300 Exploit

· 9 min read
Dora Noda
Software Engineer

Plug a USB cable into a Nothing CMF Phone 1. Wait 45 seconds. Walk away with the seed phrase to every hot wallet on the device.

That is not a theoretical threat model. It is a live demo Ledger's Donjon research team published on March 11, 2026, targeting MediaTek's Dimensity 7300 (MT6878) — a 4nm system-on-chip shipping in roughly a quarter of Android phones worldwide, and the exact silicon Solana's flagship Seeker handset was built around. The flaw lives in the chip's boot ROM, the read-only code that runs before Android even loads. It cannot be patched. It cannot be mitigated by an OS update. The only fix is a new chip.

For the tens of millions of users who trust their smartphone as a crypto wallet, this is the moment the "mobile-first self-custody" narrative collided with the physics of silicon.