A Comprehensive List of Crypto Wallets Built on MPC/TSS

What is MPC / TSS ?

Threshold Signature Scheme (TSS) technology based on Multi-Party Computation (MPC).

1. Products

1.1. ZenGo

1.2. UniPass

1.3. Particle Network

1.4. amis.com (HTSS, AMIS is the wallet service provider)

1.5. jadewallet.io

1.6. cryptoapis.io (Wallet as a Service)

1.7. sepior.com (Virtual HSM)

1.8. https://wiki.mpcalliance.org/Vendors.html (some vendors)

1.9. dynamic.xyz (wallet-based auth platform)

1.10. Fireblocks

1.11. MPC-as-a-Service — the Partisia Blockchain Infrastructure

1.12. web3auth.io (Passwordless authentication meets MPC enabled non-custodial key infrastructure for apps and wallets)

1.13. https://www.safeheron.com/en-US/open-source

1.14. Spatium is a unique keyless wallet based on SMPC technology and anonymous biometrics that allows to manage digital assets with institutional level of security

1.15. https://medium.com/@Cobo_Global (released in Nov 2022, very new)

1.16. https://www.krayondigital.com/ (MPC-based wallets for teams, startups and their customers)

1.17. https://tor.us/ (integrate via Web3Auth)

1.18. https://bitizen.org/ (The first MPC+AA (ERC-4337) keyless, seedless, gasless wallet.)

How it works - https://docs.bitizen.org/FAQ

MPC Distributed Key Generation: when you create a new Bitizen wallet, independent and encrypted key shares are being created for your mobile phone and Bitizen server. When you connect to your Bitizen wallet another device, such as a second mobile phone, computer or iPad — it will also generate another key share to open 2-of-3 TSS mode.

1.19. RainMaker (keyless and gasless) wallet built on Magic Link key management solution

Magic Link: Our Key Management architecture delegates critical encryption and decryption operations to a trusted AWS KMS and AWS Cognito — completely bypassing the Magic backend. This lets us stay non-custodial (standard for trust amongst crypto communities) as user private keys are never seen by our systems.

1.20. Gridlock crypto & NFT wallet

Gridlock is a distributed keystore built using a grid of storage participants to securely lock cryptocurrency assets and sensitive information without the use of a centralized authority.

https://github.com/GridlockNetwork/Whitepaper

2. Research reference

2.1. https://github.com/ZenGo-X/awesome-tss

2.2. https://lay2.notion.site/Process-Insight-and-Security-Model-of-UniPass-POC-e6017231e9514d13a075109ad8b9253d

2.3. Fast Secure Multiparty ECDSA with Practical Distributed Key Generation and Applications to Cryptocurrency Custody∗

https://eprint.iacr.org/2018/987.pdf

2.4. https://docs.particle.network/security

2.5. https://blog.bitgo.com/introducing-bitgo-tss-more-coins-lower-fees-outstanding-security-8548f47cd13e

2.6. https://forum.dfinity.org/t/threshold-ecdsa-signatures/6152/23

2.7. Cryptocurrency & Estate Planning & Inheritance through will

2.8. https://www.jadewallet.io/mpc-based-threshold-signature-scheme.html

2.9. open source project Alice (HTSS library from AMIS)

https://blog.amis.com/alice-%E5%AF%A9%E8%A8%88%E5%A0%B1%E5%91%8A%E7%9A%84-123-b6f2e311ffb0

2.10. What should a bank choose between HSM, MPC and TSS for digital asset custody?

https://blog.taurushq.com/what-should-a-bank-choose-between-tss-mpc-and-hsm-for-digital-asset-custody/

2.11. What Is the Threshold Signature Scheme?

https://cryptoapis.io/blog/78-what-is-the-threshold-signature-scheme Wallet as a Service

2.12. [Cryptography Meetup] A crash course on Secure Multiparty Computation (MPC)

https://youtu.be/HOqv5xzrlFI via @YouTube

2.13. MPC Techniques Series, Part 1: Secret Sharing

https://medium.com/partisia-blockchain/mpc-techniques-series-part-1-secret-sharing-d8f98324674a

2.14. An overview of Multi-Signature and Multi-Party Computation (Pros and Cons)

https://www.dynamic.xyz/blog/the-evolution-of-multi-signature-and-multi-party-computation

2.15. Clear MPC explanation and use cases

https://partisiampc.medium.com/multiparty-computation-the-beacon-of-privacy-solutions-explained-d380feb1d7d2

2.16. https://sepior.com/blog/2019/4/4/are-threshold-signatures-really-more-secure-thannbspmultisignbsp

2.17. Lit blockchain for the purpose

https://medium.com/1kxnetwork/wallets-91c7c3457578

2.18. Digital Asset Custody Solutions: Comparing MPC Wallet Types

https://sepior.com/blog/digital-asset-custody-solutions-comparing-mpc-wallet-types

2.19. Meet Spatium Hybrid

https://medium.com/spatium-blog/meet-spatium-hybrid-9085b84982eb

2.20. Securing Digital Assets Under Custody

https://use.blockdaemon.com/e/974293/g-Digital-Assets-Under-Custody/gyh8/83473338?h=qbjFQw_N5yAH_0wWd57ossLj-UaYQFhz8va9O7Ch1iM

ThresholdSig offers a critical security feature referred to as key share refresh which emulate private key rotation by creating a new set of key shares without changing the corresponding public key and wallet address.

2.21. Wallet Security: The ‘Non-Custodial’ Fallacy

https://a16zcrypto.com/content/article/wallet-security-non-custodial-fallacy/

2.22. Introducing MPC-CMP: Pushing MPC Wallet Signing Speeds 8X

https://www.fireblocks.com/blog/pushing-mpc-wallet-signing-speeds-8x-with-mpc-cmp-9/

pushes transaction signing speeds up to 8X faster than what is currently possible.

in terms of speed as it requires only 1 round to sign a transaction.

3. Bugs and Vulnerabilities

3.1. Alpha-Rays: Key Extraction Attacks on Threshold ECDSA Implementations

https://twitter.com/OmerShlomovits/status/1470747585132519430?s=20&t=n04z_r8LGQAoXQcVU6uh2g

https://blog.ledger.com/alpha-rays/

“A single compromised signer can retrieve all other signers’ keys with a few attempted signatures.”

3.2. Vulnerabilities discovered and patched in legacy MPC algorithm; Fireblocks urges move to MPC-CMP

https://www.fireblocks.com/blog/vulnerabilities-discovered-and-patched-in-legacy-mpc-algorithm-fireblocks-urges-move-to-mpc-cmp/

MPC-CMP, a new, open, and free-to-use MPC protocol developed by the Fireblocks R&D team that pushes transaction signing speeds up to 8X faster than what is currently possible.

3.3. Verichains discovers critical key extraction attacks in MPC wallets

https://cointelegraph.com/press-releases/verichains-discovers-critical-key-extraction-attacks-in-mpc-wallets

Since October 2022, Verichains has been researching threshold ECDSA security and found that nearly all TSS implementations, including popular open-source libraries in Golang and Rust, are vulnerable to key recovery attacks despite having undergone multiple security audits.