Swiss fintech bank case study

The problem

On a blockchain, a signed transaction is final. A stolen private key or a single rogue operator can move client assets, and nothing reverses it. Single HSM keys and manual approvals do not keep pace with transaction volume and approval rules.

How DuoKey helps

DuoKey Multi-Party Computation splits each signing key into shares held in separate environments. The complete key never exists, not even while signing. Approval policies are checked before every signature, and each signature leaves an audit record.

How it works

Step by step, where the keys go

01 / 04
A transfer is requested
A client or treasury system submits a blockchain transfer. Nothing is signed yet.
02 / 04
Policy and approvers decide
Amount limits, whitelisted addresses and a 2-of-3 approval quorum are checked before any key material is used.
03 / 04
Key shares sign together
Three MPC key shares in separate sites compute the signature jointly. The full private key is never assembled, not even in memory.
04 / 04
The transaction reaches the chain
The signed transaction is broadcast and recorded on chain, with an audit record that ties the signature to its policy and approvers.

Security leadership

The questions this programme had to answer

What changed

How DuoKey secures the bank's blockchain transactions

MPC
No complete private key, ever
Key shares sign together. There is no single key to steal, copy or lose.
Policy
Rules checked before every signature
Amounts, destinations and approvers are verified before a transaction is signed.
Quorum
No single person can move assets
A threshold of approvals is required, so one compromised account is not enough.
Audit
A record for auditors and the supervisor
Each signature is tied to its policy decision and approvers.

More programmes

Volkswagen

OTA that stays under OEM authority.

View case study

ICRC

Beneficiary data sealed by keys the ICRC controls.

View case study

Swiss energy operator

Board papers protected with a key Microsoft does not hold.

View case study

Major German bank

Microsoft 365 for a bank, with the key in the bank's hands.