Articles on 808bits

The Fireblocks Recovery Tools Are Free. Here's What They Prove, and What They Don't

Fri, 12 Jun 2026 00:00:00 +0000

Fireblocks gives every workspace owner an open-source path to reconstruct their keys from the customer-held backup: the legacy fireblocks-key-recovery-tool and the current Recovery Utility. This is genuinely good design: your exit from the platform does not depend on the platform being alive.

But “the tool exists” and “we are recoverable” are different claims. This article walks through what the tooling actually does, what a successful run proves, and the gap between that proof and what a board, an auditor, or a regulator means when they ask “can you recover?”

DORA Exit Strategies for Digital-Asset Custody: What a Reviewer Actually Wants to See

Fri, 05 Jun 2026 00:00:00 +0000

DORA (Regulation (EU) 2022/2554, in application since January 2025) requires financial entities to maintain documented exit strategies for ICT third-party providers supporting critical or important functions, and to manage concentration risk on those providers. For most ICT services, firms can lean on familiar patterns: data export, parallel running, a migration plan to an alternative vendor.

Digital-asset custody platforms break those patterns in an interesting way: the thing you need to take out is not data. It’s signing capability over assets on-chain, and whether you can actually take it out depends on cryptographic facts about your setup, not on contract clauses.

How to Run a Custody Key-Recovery Drill Without Exposing a Single Private Key

Fri, 29 May 2026 00:00:00 +0000

Fire drills don’t burn the building down. A custody key-recovery drill, done right, follows the same principle: you rehearse every step of recovering from your key backup except the one step that creates risk: materializing a private key.

This matters because the most common objection to rehearsing recovery is security: “we don’t want to handle live key material more often than we must.” Correct instinct, wrong conclusion. Modern MPC recovery tooling separates verification (reconstruct internally, confirm against registered public keys, expose nothing) from revelation (export the private key). A drill built on verify-only execution gets you nearly all of the assurance with none of the exposure.