Babylon and Cubist Enhance Bitcoin Staking Safety with CubeSigner

CubeSigner, the key management platform under Cubist, now supports Bitcoin transaction signing.

Cubist, Led by Computer Science Professors, Releases Wallet-as-a-Service 'CubeSigner'

Lombard’s approach to bridge security goes far beyond industry norms. The Bascule Drawbridge, powered by Cubist, acts as an independent state oracle that double-checks everything the Security Consortium signs off on. It’s not just one group calling the shots, both sides must sign for any minting or redemption to go through. That dual-verification setup gives @Lombard_Finance the kind of cross-chain integrity most protocols only hope to reach. It’s a smart move that quietly defends against the exact kind of exploits we’ve seen cripple others.

Sui Q1 Advanced Report: The Rise of BTCfi Infrastructure, the Boom of Lending Protocols, and the Future of Execution Sharding

🔥Babylon Ecosystem Spotlight ✨ "The complexity of Bitcoin forces everything to be simple. That’s what excites me about Babylon. By keeping slashing conditions straightforward, it reduces risk and makes Bitcoin staking more secure." - Dan Severn - Co-Founder at Cubist Bitcoin staking is made more secure through an ethos of simplicity. Watch the full interview with Dan to discover how a straightforward approach benefits the staking ecosystem: https://t.co/QQ4kpIh1W1

Under the hood: TomoEVMKit- Clean React hooks architecture- Wagmi-compatible interfaces- Secure key management via CubistFor developers who demand both simplicity and control. https://t.co/Nrb3lxreEH

How Tomo Connect Secures Users' Keys: Enterprise-Grade Security with CubistIn the Web3 space, security and user experience often seem at odds. Users have been forced to choose between the security of self-custody or the convenience of centralized solutions (sacrificing control of their assets). At Tomo Connect, we've found a better way with our security partner @cubistdev. Let's explore how we keep your keys safe while making Web3 accessible.How Does Tomo Handle Private Keys?Tomo Wallet prioritizes user security by leveraging CubeSigner, a non-custodial signing service that ensures private keys are never exposed outside secure hardware. We use CubeSigner to securely store and manage private keys within Cubist's virtual Hardware Security Module (vHSM), which is built on top of Nitro Enclaves and FIPS 140-certified HSMs. Private keys are never stored on user devices, and all key-related operations, including signing transactions, occur within secure hardware. Tomo cannot access your keys, and neither can Cubist. Your explicit authentication to the vHSM is required to sign a transaction or export your keys.Users' keys never leave secure hardware without their permission. That's our promise.How Does CubeSigner Work?CubeSigner stores private keys within secure hardware and exposes an API for using these keys, again, without ever leaving the secure hardware. When a transaction request is sent to the CubeSigner API, the transaction is signed within the secure Nitro Enclave using your signing key. The signing key is encrypted at rest and decrypted inside the enclave using a key-wrapping key that is stored within the HSM. This ensures that the signing process is entirely contained within a secure environment, with no raw keys ever exposed. Moreover, this ensures that nobody–not even Cubist–can ever see your keys: they are strictly bound to the secure enclave. Finally, CubeSigner is built in Rust and techniques from language-based security, which together eliminate whole classes of vulnerabilities, and its security is strengthened further through regular audits.Where Do Transactions Get Signed?Transactions are signed inside CubeSigner's virtual HSM, specifically in the secure enclave. Your signing keys are stored as ciphertexts encrypted (using an HSM) with an authenticated encryption scheme (**ChaCha20-Poly1305**) and are only accessible to the enclave. Decryption and signing occur only in the enclave when an authenticated user requests a signature, ensuring raw keys are never exposed in memory, the vulnerable web browser, or any external environment.Keys RecoveryTomo Wallet allows users to recover and export their keys securely. Users can initiate the export process through the wallet interface. Once a request is made, a security measure imposes a 48-hour waiting period to give you time to review and cancel any unauthorized requests. After this period, you are given a short window to complete the export from CubeSigner directly to the endside storage. The keys remain encrypted (from the CubeSigner vHSM to your device) throughout the process, ensuring they are not exposed during export and can be securely transferred to a storage solution. This security architecture is what makes Tomo Connect different from other social login solutions. When users authenticate through Google, Telegram, or any other supported method, they get the seamless experience of Web2 with the security and self-custody of Web3.For developers integrating Tomo Connect, this means you can offer your users the best of both worlds – easy onboarding with social login and enterprise-grade security for their assets.

🔐 Web3 Access Made Simple!Tomo Social login with enhanced security:• Create wallet with @Google, @Apple ID, @X, Kakaotalk or @telegram• Secure 2FA with Pay PIN• Easy recovery via email• Full asset control with Cubist• Biometric authenticationNo more seed phrases, just seamless access 👍Join Tomo now 🫡TG: https://t.co/gO05zCbTfUiOS: https://t.co/LIm02gxmJAAndroid: https://t.co/yL0HqN5qoULearn more: https://t.co/spNDGT0lZ7#TomoWallet #Web3

Deian Stefan @cubistdev is coming to talk Bitcoin security!Deian @deiandelmars, Co-Founder & Chief Scientist at Cubist, works on secure key management and BTC bridging—and he has some real insights to share at Denver.Feb 25 | 12PM | DenverRSVP: https://t.co/37HS0o2Wg5 https://t.co/C1zTbkPxkr

This is why Cubist is relentlessly focused on security. Security doesn't need to get in the way—when you get security right, it can actually unlock the frictionless UX we need for mainstream adoption.

2024: Built the foundation 2025: Building the future Thank you to: • 500+ developers who chose our SDK • 1M+ @tomo_wallet users • Security partners like @Cubist_hq • Our incredible community 2025: More chains. More features. More building.

Sui Foundation Teams up with Babylon Labs, Lombard and Cubist to Bring Programmable Bitcoin to Sui @SuiNetwork #BuildonSui https://t.co/T0Cneaana7

🎨 Immerse yourself in the new “Cubist Renaissance” NFT collection where art meets gaming techniques across our game library. This style celebrates the inner complexity of its subjects, blending modernist abstraction with timeless expression, creating an intriguing balance between chaos and harmony in the portrayal of human faces. https://t.co/nDaewq4bWi

“What happens when you need to get 80,000 people into a stadium using on-chain ticketing?”At last week's @avax Summit in Buenos Aires, Cubist's CEO @kwantam talked through the challenges and possibilities with @DavidLaneNY, @tixbasefounder, and @namsan329. https://t.co/pKfexUy9bk

Our CEO @kwantam recently joined @graphprotocol’s @TwentyTwoNode on the @GRT_iQ podcast for a trip down memory lane.Catch the conversation 🎧 here: https://t.co/0EXkiuVRjjThey reminisce about how Riad started working on zero-knowledge proofs ten years ago (before anyone had a use for them!)—and what inspired him to launch @cubistdev with Ann, Deian, and Fraser. Other highlights: how we came up with the company’s name, why Cubist chose to hone in on the key management problem, and what he loves💙about having a foot in both academia and industry.

Join us at #Meridian2024, taking place Oct 15-17 in London🇬🇧. Cubist co-founder @deiandelmars will be sitting down with @StellarOrg CPO @tomerweller for a Fireside Chat on the possibilities and technical limitations of Account Abstraction. https://t.co/8zRGx8oQAQ https://t.co/yE6vr5yJ3p

Reduce technical barriers and enhance efficiency in your Avalanche L1! @kwantam discusses how @CubistDev’s delegation capability and secure hardware keys can transform your operations. Listen to the full episode here: https://t.co/l7Q5tKkATu https://t.co/tZre5ejG8n

An innovative secure hardware is set to transform COQ Net validation!🐔 @BreevieGotRekt and @kwantam dive into how @CubistDev’s CubeSigner tech and @GoGoPool_ validation process will make it easier than ever to validate on CoqNet, keeping things both secure and non-custodial. https://t.co/qg6cPv9hjM

GoGoPool Partners with Cubist to Elevate CoqNet's Security​We’re excited to announce our partnership with @CubistDev to power CoqNet, a new Avalanche L1 aiming to be the central hub for the Avalanche and COQ community.​Cubist is at the forefront of hardware-backed key management, offering innovative solutions through their CubeSigner technology. CubeSigner provides secure, hardware-backed key management and signing, with robust support for BLS keys crucial for P-chain validation and cross-chain messaging. By integrating CubeSigner, we’ve made the validator setup for Coq Net both simple and secure, keeping the process fully non-custodial.​This partnership aligns perfectly with our mission at @GoGoPool_ to make launching and managing Avalanche L1s (formerly known as subnets) more secure and user-friendly. With Cubist’s support, we’re streamlining the validator setup for CoqNet, enabling seamless and secure operations within the Avalanche ecosystem.​Looking ahead, ACP-77 will further enhance how Avalanche L1s are managed and validated. Combined with Cubist’s support, we’re making it easier for developers to innovate on @avax.​We're working on more ways to make Avalanche L1s even more accessible. Stay tuned for updates!

Surprise, SGX is broken again🙃 At Cubist, we've avoided complex hardware like SGX in favor of lightweight TPM implementations. To understand why—and why you shouldn’t trust anything relying on SGX for security, now or in the future—revisit our blog post: https://t.co/ITclFiWSS5

We're proud that @BridgetowerCap has chosen Cubist as the exclusive wallet provider for their Web3 Commerce Platform. Bridgetower will use CubeSigner embedded wallet infrastructure to power gas relaying, permissioning, self-custody staking, and other security-critical functionality for their customers.Partnering together was an easy decision for us. We designed CubeSigner as a single solution that can securely and seamlessly power the many use cases Bridgetower supports. The projects that the Web3 Commerce Platform is powering are interesting and forward-thinking—they bring digital ownership, provenance, and content monetization to reality—and we're excited to be part of Bridgetower’s initiative to drive the Web3 industry forward in these different markets.Learn more about how we’re working together: https://t.co/3jGaOcrMlY

Is there such a thing as too much economic security? Hear AVS and protocol perspectives from @Fundi_Crypto, @pumpernikhil, @MarkusMento, and @0xShadX, moderated by Cubist co-founder Fraser Brown: https://t.co/8SzRp9s5Cy

Planet Noon News

This summer, we are over the moon to celebrate a major milestone: our two year anniversary here at Cubist! Looking back on the journey of the past two years, we are filled with an overwhelming appreciation for our customers, investors, and families who believed in us along the way.We’re especially grateful to our earliest supporters for sharing our ambitions and growing with us: @lukejdpearson, @tekinsalimi, @thekevinding, @ryanfang95, @stanleywu84, @danvseq, @justinfiddes, @_nMoose, @_patrickogrady, @AaronBuchwald, @toholdaquill, @tomerweller, @greenbergz, @0xSami_, @DefinedNever, @dntse, @baby_fisherman. We're also really excited about some similarly amazing folks we've been collaborating with over the last few months. (You'll hear about them soon!)Our startup story began with a simple phone call—yep, good old telephone call—fueled by our shared desire to simplify what it takes for Web3 developers to build secure software. That same spark of inspiration continues to drive us today as we work tirelessly to make Web3 more user-friendly, accessible, and secure for everyone. Of course, "us" today means the remarkable team that quickly grew from four founders to a team of seven—three Founding Engineers joined right after we closed our seed funding—to the larger, multi-function org we are today.Cubist’s goal has always been to help teams create the future of Web3 easily, quickly, and nonetheless safely.Our original tagline “build safer dapps faster” still rings true today. We started back in 2022 developing toolchains for building and operating secure cross-chain applications. After months of conversations with teams building serious systems, we honed in on a more fundamental and ubiquitous pain point: key management. The serious security teams were tempted to roll their own key management infrastructure because existing solutions were limited, notoriously complex, slow, and often cut corners on security.This, we thought, is a problem we can solve. The fact that we had the right background–across security, cryptography, formal methods, and risk management–the right team, and the right partners just meant tackling this challenge would also be fun!Last year we launched our key management platform, CubeSigner, a developer API that makes DeFi access safer and easier. Our early partners like @ankr and @dinero_xyz ran Ethereum validators, which meant we had to nail performance (max 100ms latency, horizontal scaling) and security (protect pricey keys). But infrastructure teams weren’t the only ones looking to build better products.Next, @AvaLabs used CubeSigner to bring a fast and secure wallet to consumers, with features like social login and policy-guarded key export—and today, @coreapp, @dappOS_com, @tomo_social, and some of our other partners are onboarding millions of users to a seamless, cross-device experience.And what now? We’re continuing to work with teams to push the boundary of Web3, working with latency-sensitive trading teams who take security seriously, VCs who care about access control, consumer apps and protocols who need fine-grained policies to get security guarantees for their users...the list goes on. This journey from niche API to key management toolbox just wouldn’t have been possible without our uniquely qualified team.We are committed to setting new security standards, and love that our customers are as excited as we are about setting a high bar for security. We’re looking forward to many more years of creating a safer, more accessible Web3 for all. And we have a lot to announce—stay tuned.For those who are a part of our story, thank you!~The Cubist Team

🔒Tomo is partnering with @cubistdev to further enhance the security of Tomo Wallet! Tomo Wallet will be migrating onto Cubist’s non-custodial wallet infrastructure, CubeSigner. CubeSigner safeguards signing keys in secure hardware—your keys never leave the hardware, even when you're using your wallet to sign transactions—and provides a streamlined, non-custodial experience across the Tomo mobile app, browser extension, and embedded wallet. This integration makes it simple for you to export your key, while making it extremely challenging for attackers. Download Tomo Wallet today and experience unparalleled security! https://t.co/fFSFw93yX6

Join Frontend Engineering at Cubist! This is an opportunity to call the shots for our web UI platform, currently in beta. Our engineering team is remarkably talented and productive, and we’re seeking someone who radiates the same energy.Apply here: https://t.co/xREtXzZpkJ https://t.co/qZmTIiw2yj

ICYMI, our Co-Founder & CEO @kwantam joined @crypto101Pod’s Crypto Hedge Fund Summit last week to share how Cubist helps companies integrate their on-chain activity with business functions like finance and compliance. We’ve learned some things from TradFi and e-commerce! https://t.co/LnzQUEeGF5

🤝We're in good company! Cubist is excited to support the restaking ecosystem as a Founding Member of the Shared Security Alliance.

Cubist co-founder & CMU professor @kwantam sat down with @crypto's @MuyaoShen to discuss the academic research that is powering #restaking’s growth and why professor-founded projects are increasingly catching the eyes of investors.Read more: https://t.co/GSuAiXj2Z8 https://t.co/rjClYciir5

Cubist is now a node operator for the @AlloraNetwork! Building on our strong experience 🔐securing keys for Ethereum staking, we are excited to bring our CubeSigner key management technology to Cosmos validators.Learn more: https://t.co/GZteHk4SUt https://t.co/mEU7gdjYKF

Today we celebrate the life and work of painter Juan Gris! A key figure in the Cubist movement, his innovative compositions and geometric forms continue to captivate art enthusiasts worldwide. #JuanGris #Cubism #ArtisticInnovationDiscover more about Juan Gris: https://t.co/eylgxPP886

Did you know that Cubist’s original pitch had nothing to do with private keys? @cubistdev COO Ann Stefan talks about her background in fraud ops and the process she used to ensure we were building something people need. Watch the episode by @protocollabs: https://t.co/1jlQwzRb1c

Cubist is thrilled to be the exclusive wallet provider for @si_tickets_ providing batch NFT minting and ticketing for sports, music, and theater events. Not every wallet provider has the performance and reliability to handle live events—where crowds of people access their assets simultaneously. We're excited that CubeSigner can (and will!) enable a whole new ticketing paradigm on the @avax blockchain: https://t.co/VcWvrbirtS

Congrats to our partner @HallidayHQ on the launch of their Appchain Wallet, a single UX for acquiring and managing any token, on any chain, with just one click. This is a game-changer for game developers! Cubist is proud to be powering the Appchain Wallet behind the scenes 💪

Today at #Bitcoin Renaissance, Cubist CEO Riad Wahby is speaking on the Interoperability & Security Solutions panel starting at 5:25pm MST. In case you couldn’t make it to #ETHDenver2024, catch the livestream here: https://t.co/5DVu4sQMcv

Congrats to our partner @tomerweller and his team at @StellarOrg on the launch of @SorobanOfficial, their new WebAssembly-based smart contract platform. Cubist co-founder (and @bytecodeallies board member!) @deiandelmars shared his thoughts with @yeluacaM of @Blockworks_ on why Soroban’s choice of runtime and programming language offers advantages if you're building for secure, real-world use cases. Catch the story here: https://t.co/AAGOEBiXXk

Our CEO Riad Wahby recently joined @CoinDesk's The Protocol podcast to discuss risk management in restaking, why we should be scared of operators who cut corners, and how Cubist is working with @EigenLayer to promote safe restaking strategies.Listen here and on all podcast platforms:https://t.co/K28hZ31CIb