Security & Compliance

Bank-grade security.
Crypto-native posture.

Aurum operates under three layers of oversight: the Wyoming Division of Banking, an annual SOC 2 Type II audit by Ernst & Young, and a public monthly cryptographic attestation of client reserves.

01 — Custody

Held by the bank.

Aurum is a qualified custodian under the SEC Custody Rule (Advisers Act §206(4)-2). Client assets sit on the bank's balance sheet as bailment liabilities, not as Aurum's own property.

02 — Reserves

Verifiable, monthly.

Each month Aurum publishes a Merkle-tree attestation linking on-chain reserves to client liabilities. Anyone can verify inclusion of their own balance in the tree.

03 — Insurance

$250M in coverage.

Custody and crime coverage syndicated through Lloyd's of London. Covers cold-storage compromise, MPC key extraction, and insider collusion up to the policy limit, per occurrence.

The full posture

Every control, on one page.

SPDI

Wyoming Special Purpose Depository Institution charter

Aurum Reserve, Inc. operates under a Wyoming SPDI charter granted by the Wyoming Division of Banking under W.S. §13-12-101 et seq. Supervised by state examiners on an 18-month cycle. The SPDI framework requires 100% reserve backing of all deposits — full-reserve banking, not fractional.

#2021-04
Cold

98% cold storage

The minimum 2% hot operating float is set by the bank's Risk Committee based on five-day rolling outflow at the 99th percentile. Everything else lives in air-gapped, geographically segregated cold storage. No machine on the public internet ever holds a complete key.

98% / 2%
MPC

3-of-5 threshold signing

Aurum uses a 3-of-5 GG20 threshold signing scheme operated across five Tier-3 data centers in Wyoming, Virginia, Texas, Singapore, and Switzerland. Key shares are generated in HSMs that have never been online and rotate every 18 months under dual-officer ceremony.

GG20 · TSS
PoR

Monthly proof-of-reserves

A Merkle-tree commitment of all client balances is published on the first business day of each month, alongside signed attestations of the on-chain reserve addresses. Each client can verify inclusion of their own balance under their account hash using the open-source verifier.

1st of month
SOC

SOC 2 Type II — annual

Audited annually by Ernst & Young LLP under the Trust Services Criteria (Security, Availability, Processing Integrity, Confidentiality). Report available to clients under NDA. Examined controls include 187 distinct policies.

EY · 187 controls
KYC

KYC, AML, and sanctions

Tier-1 KYC at account opening: government ID, address proof, source-of-funds for balances over $250K. All transactions screened against OFAC, EU, and UK sanctions lists in real time via a Chainalysis KYT subscription. Suspicious activity reported to FinCEN under our MSB and SPDI BSA program.

FinCEN registered
Ins

$250M crime & custody insurance

Syndicated through Marsh JLT at Lloyd's of London. Coverage includes physical loss of HSMs, MPC key extraction by external attackers, insider collusion exceeding the bank's own threshold quorum, and on-chain theft of hot operating float. Loss event triggers a 72-hour disclosure to clients.

Lloyd's · $250M
2FA

Hardware-key 2FA & allow-listing

Mandatory FIDO2 / WebAuthn for every account — no SMS codes, no authenticator apps. Outbound on-chain transactions require a destination on the account's allow-list, with a 24-hour cooling period for new entries.

WebAuthn · 24h cool
Sgr

Segregation under §13-12-103

Under Wyoming Statute §13-12-103, client digital assets held in custody are the property of the client, not the bank, and are not subject to creditor claims against Aurum Reserve, Inc. in the event of insolvency or receivership.

WY §13-12-103
Pen

Annual penetration testing

Independent red-team engagement annually with NCC Group; a second cycle with Trail of Bits for the smart contract layer and MPC software. Critical findings remediated under a 30-day SLA tracked in the SOC 2 evidence pack.

NCC · Trail of Bits
Operating record

Five years of operation. Zero loss events.

5yrs
In production
0
Loss events
$250M
Insurance coverage
98%
Assets in cold storage
Attestation history

Twelve months. Every commitment.

Open the verifier
Period Published Reserves (USD eq.) Liabilities Ratio Merkle root
May 202602 Jun 2026$4,214,810,221$4,202,488,5171.00290xa3c2…b8e1
Apr 202601 May 2026$4,088,217,440$4,074,901,2331.00330x7f41…02ce
Mar 202601 Apr 2026$3,902,118,005$3,887,224,1181.00380x12b9…44a0
Feb 202603 Mar 2026$3,711,420,802$3,697,090,5141.00390x9da2…1f57
Jan 202602 Feb 2026$3,540,802,217$3,526,108,3291.00420x44ec…7b08
Dec 202502 Jan 2026$3,402,118,907$3,389,710,2251.00370xb1aa…cc32
Nov 202502 Dec 2025$3,210,408,011$3,198,142,9011.00380x5510…91d4
Oct 202503 Nov 2025$3,084,217,210$3,072,408,9011.00380xe2f1…40bc

Reserves include both on-chain and off-chain (cash) holdings. Liabilities are end-of-month client balances. Ratio is reserves / liabilities; the bank targets ≥ 1.0025 at all times.

Aurum Reserve is a Wyoming Special Purpose Depository Institution. Deposits and digital-asset balances held by Aurum Reserve are not insured by the Federal Deposit Insurance Corporation (FDIC) or the National Credit Union Administration (NCUA). Under Wyoming Statute §13-12-103, client digital assets held in custody are the property of the client and are not part of the bank's estate in the event of resolution.

The $250M crime and custody insurance program covers Aurum's institutional liability and is not a guarantee of client recovery in all loss scenarios. Coverage is per-occurrence, not per-client, and is subject to the policy's terms, exclusions, and limits.

Past attestations are not a guarantee of future reserve coverage. Aurum Reserve provides reasonable but not absolute assurance of continuous solvency and reserves the right to suspend on-chain withdrawals under extraordinary circumstances as defined in our Account Disclosures.