Crypto Custody Tech Provider Fireblocks Receives First-of-Its-Kind Security Certificate

The CCSS was created in 2014, but until now no crypto company has met the necessary standards.

AccessTimeIconDec 19, 2022 at 2:00 p.m. UTC
Updated May 9, 2023 at 4:04 a.m. UTC

Fireblocks has received the Cryptocurrency Security Standard (CCSS), a first-of-its-kind certification that was built as a security standard for crypto wallets and custody.

Focusing on storage and usage within an organization and augmenting standard information security practices, the certification was created specifically for the crypto industry. For example, it analyzes how a provider generates keys, the hardware it uses and how the policy and workflow engine works, as well as the cybersecurity controls used.

Fireblocks received a level three certification – the highest there is – and the one most suitable for enterprises. To win the level three standard, “multiple actors are required for the all-critical actions, advanced authentication mechanisms are employed to ensure authenticity of data, and assets are distributed geographically and organizationally,” according to accounting firm Deloitte.

Fireblocks is the first company to meet all requirements for this level.

“An in-depth and rigorous audit was conducted of Fireblocks’ people, processes, and technology components for compliance with the CCSS and found that Fireblocks went above and beyond the CCSS Level 3 requirements,” said Marc Krisjanous, the CCSS auditor who led the exam.

The CCSS was built in 2014 but no company in the crypto industry has so far met the necessary standards to receive it. Specifically, startups in the space don’t follow security best practices and every system that was subject to breach in the past didn’t pass level one of the standard, Deloitte said.

“I think the reason why we were able to be the first one to get this certificate – we got it within four months of intensive interrogation – is the expertise that we have from working with leading banks that already took us through a very similar process previously,” Michael Shaulov, co-founder and CEO of Fireblocks, said.

Fireblocks’ clients include Bank of New York Mellon, Robinhood and fintech company Revolut, among others.


Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is a media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. CoinDesk is an independent operating subsidiary of Digital Currency Group, which invests in cryptocurrencies and blockchain startups. As part of their compensation, certain CoinDesk employees, including editorial employees, may receive exposure to DCG equity in the form of stock appreciation rights, which vest over a multi-year period. CoinDesk journalists are not allowed to purchase stock outright in DCG.

CoinDesk - Unknown

Helene is a U.S. markets reporter at CoinDesk, covering the US economy, the Fed, and bitcoin. She is a recent graduate of New York University's business and economic reporting program.

Learn more about Consensus 2024, CoinDesk’s longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to to register and buy your pass now.