Cubist’s Post

Our Co-Founder & CEO Riad S. Wahby recently sat down with the Crypto Hipster Podcast’s Jamil Hasan to discuss the importance of fostering a Web3 space that is accessible and trustworthy. Among other topics, Riad explains why the combination of secure technology, intuitive UX, and a shared framework of open standards and best practices will lower the barrier of entry for new users and make Web3 more approachable. And while Cubist’s focus is key management, Riad highlights why we are also committed to raising the bar for (re)staking security more generally, including through the Secure Staking Alliance. Listen to the full conversation here: https://lnkd.in/gu9n665q #crypto #cryptowallet #security #keymanagement #staking #restaking #web3

Curious why virtually all banks rely on HSMs to safeguard their most critical data? HSMs, or hardware security modules, provide a very simple and strong security property: the HSM ensures that the secret data it manages can’t be extracted, tampered with, or copied from the secure hardware—essentially turning secrets (like signing keys) into physical objects. This is why banks use HSMs for everything from securely issuing credit card numbers to confidentially verifying PINs to safely authorizing online payments. Unlike other key management systems, basically all known key extraction attacks on HSMs require physical access to the HSM itself and an advanced laboratory. This means stealing keys requires breaking into a heavily guarded data center and infiltrating a lab that has an electron microscope—a much higher bar for attackers who today steal secrets from users' browsers and unprotected servers from their basements. Trendy key management approaches (e.g., browser-based wallets and MPC wallets) theoretically reduce risk. Secure hardware, on the other hand, reduces risk theoretically and in practice. Interested in learning more about the security properties of HSMs? Our CEO Riad S. Wahby gave a great summary on a recent episode of The Index Podcast with Alexander Kehaya 👇 Podcast: https://lnkd.in/gvCMEqFa YouTube: https://lnkd.in/gUdeGt9u #hardwaresecurity #securehardware #cryptowallet #keymanagement #web3hacks #blockchainsecurity

In a recent conversation with The Index Podcast’s Alexander Kehaya, Cubist Co-Founder & CEO Riad S. Wahby dives into the fundamentals of secure hardware and compares its security model to MPC’s under different custody setups. Riad explains how security should make life easier, not harder. For example, you should be able to use your company’s existing SSO to manage access to sensitive keys stored in secure hardware. Combined with per-key transaction policies, this gives extremely strong guarantees about who can use which keys in which ways. Watch the (very approachable!) conversation here:  https://lnkd.in/gUdeGt9u Listen here and on all podcast platforms: https://lnkd.in/gvCMEqFa #crypto #security #keymanagement #mpc #multipartycomputation #web3

We're proud that Bridgetower Capital has chosen Cubist as the exclusive wallet provider for their Web3 Commerce Platform. Bridgetower will use CubeSigner embedded wallet infrastructure to power gas relaying, permissioning, self-custody staking, and other security-critical functionality for their customers. Partnering together was an easy decision for us. We designed CubeSigner as a single solution that can securely and seamlessly power the many use cases Bridgetower supports. The projects that the Web3 Commerce Platform is powering are interesting and forward-thinking—they bring digital ownership, provenance, and content monetization to reality—and we're excited to be part of Bridgetower’s initiative to drive the Web3 industry forward in these different markets. Learn more about how we’re working together: https://lnkd.in/gEWpPzhB

This week Babylon Labs co-founder David Tse and Cubist co-founder Riad S. Wahby sat down with Blockworks to chat about Babylon’s principled approach to security and how CubeSigner’s newest release brings secure key management to developers working with Babylon. As Macauley Peterson notes in the article, our goal is two-fold: to bolster the workflows of those building on top of Babylon, and to help developers create new DeFi applications that are safer for end-users. “In fact, the risk is very decentralized because every staker manages their own key. So therefore if you do manage to hack into someone’s key, it only affects that particular staker’s funds — and even that risk will [be] minimized if they use Cubist,” said David Tse on how his team thinks about the security of the Babylon protocol. Read the full story here: https://lnkd.in/eVF8hFMJ #bitcoin #btc #staking #babylonchain #keymanagement

Today we launched key management support for Babylon! CubeSigner is the first and only key management solution for the Babylon Labs ecosystem, offering policy-protected workflows for Babylon deposits, withdrawals, and early unbonding. Teams can use these simple APIs to safely build protocols, apps, and end-user wallets on top of Babylon and attach staking policies to hardware-bound keys to provide security guarantees on par with on-chain smart contracts. Lombard is one of the first using “CubeSigner for Babylon” to safeguard the funds in their protocol. How does it work? When a Babylon staking policy is attached to a key, CubeSigner enforces that the key cannot be used to sign any transaction that is not a Babylon deposit, withdrawal, or early unbond. Developers can further constrain what constitutes an allowable transaction by setting Babylon-specific parameters such as the withdrawal address, choice of finality provider, staking lock time, etc. Our threat model assumes the worst: that every system will eventually get compromised. Coupling such protocol-specific policies with hardware keys is designed to exactly minimize potential damage. All a malicious actor could do with access to your system is stake on your behalf with a finality provider of your choosing. Lots more detail here: https://lnkd.in/d3nxzFkF #bitcoin #btc #staking #babylonchain #keymanagement