AEREDIUM launches AERSeal to end single-key control of smart contracts

AEREDIUM Launches AERSeal: Securing Smart Contracts

AEREDIUM Introduces a Threshold Signing System

AEREDIUM has recently launched AERSeal, a revolutionary security solution for smart contracts, aiming to eliminate the risk of single-key control. With AERSeal, multiple private key shares reside in isolated hardware-attested enclaves, ensuring no single entity can dominate contract actions.

Key Features:

• Threshold Signing System: Key shares never reconstitute a complete private key, employing the CGGMP24 protocol for secure signatures.
• M-of-N Approval Policy: Organizations set their approval requirements, preventing unauthorized access.
• Offline Verification: Customers can independently verify their threshold key, ensuring control even without internet access.
• Compatibility: Currently supporting Ethereum Virtual Machine (EVM) networks and compatible blockchains.

Addressing a Pressing Issue

Smart contracts often rely on a single private key for sensitive operations like asset minting, contract upgrades, and administrative changes. If this key is compromised or goes missing, access to these functions may be permanently lost. AERSeal addresses this by:

• Preventing Single Point of Failure: Replacing the single key with a distributed system.
• Combating Growing Threats: Protecting against increasingly sophisticated attacks targeting key holders.

How AERSeal Works

1. Contract Identification: AERSeal identifies privileged functions in the existing smart contract.
2. Onchain Transfer: The contract is moved to the threshold key, verified on the blockchain.
3. Approval Policy Setup: Customers choose their preferred approval policy and signaries approve requests using passkeys.
4. Secure Verification: Customers can verify their key offline, ensuring control.
5. Onboarding Process: A six-step process including verification, contract registration, and key activation.

"AERSeal is a game-changer," said Albert Dadon, CEO of AEREDIUM. "We’re removing the reliance on one private key for entire smart contracts."

What AERSeal Does Not Do

Importantly, AERSeal does not mitigate vulnerabilities in smart contract code itself, focusing solely on securing the administrative access to these contracts.