Signer Census: device provenance and key-rotation plans for crypto treasuries
Lists every signing device and key a treasury depends on, flags risky sources and plans key moves. Treasurers pay.
Competitive · Ledger implant theft, $72–93M lost
Written for: Small startup team
Next step
Call the head of treasury operations at a small Nasdaq-listed crypto treasury company, such as the XRP treasury company that listed this week. Ask where each signing device was bought, who keeps the purchase records, and whether their auditor has raised the Ledger incident.
Why now
What changed from the earlier exposed-key watch item: that idea was about public keys becoming visible on-chain, a slow-moving threat. The same product shape (find the keys at risk, plan moves to fresh keys, leave an audit trail) now has a concrete, costed incident behind it. Holders are moving to treasury companies and ETFs, which concentrates the risk in institutions whose boards and auditors will ask where their signing devices came from. Everything here is software and process: an inventory, on-chain mapping of which addresses each device controls, rotation plans and evidence records. No hardware work is needed.
What became possible
Ledger confirmed that a customer device contained an unauthorized hardware implant. CoinDesk reports the chip sent wallet keys out over the mobile network. The devices came through an approved reseller in Southeast Asia, and analysts trace $72–93M in losses. This is a live theft with a known pattern, not a hypothetical.
Three ways in
- Signer register
Records every hardware signer, multisig participant and backup: where it was bought, its serial number, firmware version, the addresses it controls and who holds it. It flags devices bought from resellers named in incident reports.
- Customer
- Listed crypto treasury companies and crypto funds that self-custody part of their holdings
- Model
- Annual subscription per treasury
- Rotation runbook
Generates a step-by-step plan to replace keys from risky sources with fresh ones, re-key multisigs and move funds in batches. It records signed evidence for auditors.
- Customer
- Treasury operations leads and their audit firms
- Model
- Fixed fee per rotation, with an audit export included
- Outflow watch
Monitors the addresses tied to each registered device and alerts on any outflow that does not match an approved transaction request.
- Customer
- Small funds and DAO treasuries without a 24/7 security team
- Model
- Monthly fee per monitored address set
Competition
BitGo already sells this product for Bitcoin held in its own custody and gives away a basic checker, so flagging exposed addresses alone has little value. A new entrant could still win by (1) working across all custodians: one combined report and migration plan for treasuries split across Coinbase Custody, Anchorage, Fidelity, BitGo and self-custody, which BitGo can't fix outside its own platform; (2) covering more chains and address types: Ethereum/EVM (where fixing means moving to a new account, plus admin keys on contracts and multisigs; I found no dedicated treasury tool), Taproot and old Pay-to-Public-Key addresses, all excluded by BitGo; (3) producing board- and auditor-ready reports with a published method and versioned attestations that fit risk disclosures for public treasury companies; (4) planning migrations well: batching to cut fees, timing, avoiding address-linking that hurts privacy, and ongoing monitoring for new address reuse.
Full competition notes (7 competitors)
BitGo already sells this product for Bitcoin held in its own custody and gives away a basic checker, so flagging exposed addresses alone has little value. A new entrant could still win by (1) working across all custodians: one combined report and migration plan for treasuries split across Coinbase Custody, Anchorage, Fidelity, BitGo and self-custody, which BitGo can't fix outside its own platform; (2) covering more chains and address types: Ethereum/EVM (where fixing means moving to a new account, plus admin keys on contracts and multisigs; I found no dedicated treasury tool), Taproot and old Pay-to-Public-Key addresses, all excluded by BitGo; (3) producing board- and auditor-ready reports with a published method and versioned attestations that fit risk disclosures for public treasury companies; (4) planning migrations well: batching to cut fees, timing, avoiding address-linking that hurts privacy, and ongoing monitoring for new address reuse. Main risks: custodians (BitGo, Anchorage, Coinbase) adding this to their own platforms, and Project Eleven moving into treasury tooling.
- BitGo Quantum Risk Management (Quantum Risk Score + Fix Exposed Addresses workflow)
Launched July 9, 2026 for BitGo's Bitcoin multisig custody clients. Scores exposure from visible public keys, guides moving funds to fresh addresses, and adds an exposure-limiting coin-selection mode and default address-type controls. Only works for BitGo-custodied BTC, excludes Taproot and Pay-to-Public-Key addresses, and doesn't publish its scoring method. This is essentially the proposed product for BitGo clients.
- BitGo BTC Quantum Resistance Score (public checker)
Free, no-account tool. Paste in one or many BTC addresses and get the share of the balance in addresses with visible public keys. Makes basic exposure flagging free.
- Project Eleven (Bitcoin Risq List, QuanBot, Yellowpages)
Funded quantum-security startup (reported $20M Series A led by Castle Island, with Coinbase Ventures). Open-source tracking of every quantum-vulnerable BTC address, real-time alerts, and the Yellowpages registry linking existing addresses to quantum-safe keys. Well placed to build a treasury product.
- Glassnode quantum exposure analysis
On-chain analytics firm measuring structural vs. address-reuse exposure, including per-exchange breakdowns (e.g. Coinbase 5%, Binance 85%). Data and research only, no client migration tool found.
- Anchorage Digital post-quantum strategy
Custodian building migration frameworks for older assets. No client-facing audit tool found, but could add one.
- Fireblocks quantum-readiness roadmap
Roadmap plus a demo rotating a NEAR account to a quantum-safe key. Not a product for auditing exposed addresses.
- Trezor Suite quantum exposure checker (feature request)
Community request for a read-only checker in the wallet app. Not shipped as far as I found. Shows demand among retail users.
Checked 2026-10-08
Risks
- Treasuries may move straight to qualified custodians, which makes a self-custody register unnecessary
- Small buyer pool, and every account involves a long security review
- We cannot inspect chips ourselves, so device verdicts depend on purchase records and vendor statements
- Ledger and other wallet makers may ship their own remediation tooling
Best on tech readiness and buildability; market pull and open space and team fit are the weak point (6).
tech 7 · pull 6 · space 6 · fit 6 · build 7
Exposed
Companies that could benefit or be threatened. News and context, not investment advice.
Momentum of its main topic
Sources
What happened next
- +7d · 15 Oct 2026 nothing yet. No product launches, funding announcements, acquisitions, or significant press coverage of crypto treasury device provenance and key-rotation planning tools were found after the October 8, 2026 flag date. The seven-day window to today is narrow, and available searches returned only general guidance on key rotation practices and quantum risk commentary, with no matching product or company milestones.
Status history
- 2026-10-08 Added to the watchlist
- 2026-10-13 Promoted from the watchlist: Today's evidence made it buildable
- 2026-10-13 Flagged as buildable