Visa funds $40M for no-password crypto vault Anchorage

Visa and Andreessen Horowitz are betting even bigger on cryptocurrency, funding a big round for fellow Facebook Libra Association member Anchorage’s omnimetric blockchain security system. Instead of using passwords that can be stolen, Anchorage requires cryptocurrency withdrawals to be approved by a client’s other employees. Then the company uses both human and AI review of biometrics and more to validate transactions before they’re executed, while offering end-to-end insurance coverage.

This new-age approach to cryptocurrency protection has attracted a $40 million Series B for Anchorage, led by Blockchain Capital and joined by Visa and Andreessen Horowitz. The round adds to Anchorage’s $17 million Series A that Andreessen led just six months ago, demonstrating extraordinary momentum for the security startup.

As a custodian, our work is focused on building financial plumbing that other companies depend on for their operations to run smoothly. In this regard we have always looked at Visa as a model,” Anchorage co-founder and president Diogo Mónica tells me.

“Visa was ‘fintech’ before the term existed, and has always been on the vanguard of financial infrastructure. Visa’s investment in Anchorage is helpful not only to our company but to our industry, as a validation of the entire ecosystem and a recognition that crypto will play a key role in the future of global finance.”

Anchorage Crypto 1

Cold-storage, where assets are held in computers not connected to the internet, has become a popular method of securing Bitcoin, Ether and other tokens. But the problem is that this can prevent owners from participating in governance of certain cryptocurrency where votes are based on their holdings, or earning dividends. Anchorage tells me it’s purposefully designed to permit this kind of participation, helping clients to get the most out of their assets like capturing returns from staking and inflation, or joining in on-chain governance.

As three of the 28 founding members of the Libra Association that will govern the new Facebook-incubated cryptocurrency, Anchorage, Visa and Andreessen Horowitz will be responsible for ensuring the stablecoin stays secure. While Facebook is building its own custodial wallet called Calibra for users, other Association members and companies hoping to dive into the ecosystem will need ways to protect their Libra stockpiles.

“Libra is exactly the kind of asset that Anchorage was created to hold,” Mónica wrote the day Libra was revealed. “Our custody solution , so that asset-holders don’t face a trade-off between security and usability.” The company believes that custodians shouldn’t dictate which coins their clients hold, so it’s working to support all types of digital assets. Anchorage tells me that will include support for securing Libra in the future.

Libra Association Founding Partners

You’ve probably already used technology secured by Anchorage’s founders, who engineered Docker’s containers that are used by Microsoft, and Square’s first encrypted card reader. Mónica was at Square when he met his future Anchorage co-founder Nathan McCauley, who’d been working on anti-reverse-engineering tech for the U.S. military. When a company that had lost the password to a $1 million cryptocurrency account asked for their help with security, they recognized the need for a more idiot-proof take on asset protection.

“Anchorage applies the best of modern security engineering for a more advanced approach: we generate and store private keys in secure hardware so they are never exposed at any point in their life cycle, and we eliminate human operations that expose assets to risk,” Mónica says. The startup competes with other crypto custody firms like Bitgo, Ledger, Coinbase and Gemini.

Anchorage CryptocurrencyLast time we spoke, Anchorage was cagey about what I could reveal regarding how its transaction validation system worked. With the new funding, it’s feeling a little more secure about its market position and was willing to share more.

Anchorage ditches usernames, passwords, email addresses and phone numbers completely. That way a hacker can’t just dump your coins into their account by stealing your private key or SIM-porting your number to their phone. Instead, clients whitelist devices held by their employees, who use the Anchorage app to submit transactions. You’d propose selling $10 million worth of Bitcoin or transferring it to someone else as payment, and a minimum of two-thirds of your designated co-workers would need to concur to form a quorum that approves the transfer.

But first, Anchorage’s artificial intelligence and human staff would check for any suspicious signals that might indicate a hack in progress. It uses behavioral analysis (do you act like a real human and similar to how you have before), biometric signals (do you look like you) and network signals (is your device what and where it should be) to confirm the transaction is legitimate. The same process goes down if you try to add a new whitelisted device or change who has permission to do what.

The challenge will be scaling security to an ever-broadening range of digital assets, each with their own blockchain quirks and complex smart contracts. Even if Anchorage keeps coins safely in custody, those variables could expose assets to risk while in transit. Now with deeper pockets and the Visa vote of confidence, Anchorage could solve those problems as clients line up.

While most blockchain attention has focused on the cryptocurrencies themselves and the exchanges where you can buy and sell them, a second order of critical infrastructure startups is emerging. Companies like Anchorage could make Bitcoin, Ether, Libra and more not just objects of speculation or the domain of experts, but safely functioning elements of the new world economy.


Anchorage emerges with $17M from a16z for ‘omnimetric’ crypto security

I’m not allowed to tell you exactly how Anchorage keeps rich institutions from being robbed of their cryptocurrency, but the off-the-record demo was damn impressive. Judging by the $17 million Series A this security startup raised last year led by Andreessen Horowitz and joined by Khosla Ventures, #Angels, Max Levchin, Elad Gil, Mark McCombe of Blackrock and AngelList’s Naval Ravikant, I’m not the only one who thinks so. In fact, crypto funds like Andreessen’s a16z crypto, Paradigm and Electric Capital are already using it.

They’re trusting in the guys who engineered Square’s first encrypted card reader and Docker’s security protocols. “It’s less about us choosing this space and more about this space choosing us. If you look at our backgrounds and you look at the problem, it’s like the universe handed us on a silver platter the Venn diagram of our skill set,” co-founder Diogo Monica tells me.

Today, Anchorage is coming out of stealth and launching its cryptocurrency custody service to the public. Anchorage holds and safeguards crypto assets for institutions like hedge funds and venture firms, and only allows transactions verified by an array of biometrics, behavioral analysis and human reviewers. And because it doesn’t use “buried in the backyard” cold storage, asset holders can actually earn rewards and advantages for participating in coin-holder votes without fear of getting their Bitcoin, Ethereum or other coins stolen.

The result is a crypto custody service that could finally lure big-time commercial banks, endowments, pensions, mutual funds and hedgies into the blockchain world. Whether they seek short-term gains off of crypto volatility or want to HODL long-term while participating in coin governance, Anchorage promises to protect them.

Evolving past “pirate security”

Anchorage’s story starts eight years ago when Monica and his co-founder Nathan McCauley met after joining Square the same week. Monica had been getting a PhD in distributed systems while McCauley designed anti-reverse engineering tech to keep U.S. military data from being extracted from abandoned tanks or jets. After four years of building systems that would eventually move more than $80 billion per year in credit card transactions, they packaged themselves as a “pre-product acqui-hire” Monica tells me, and they were snapped up by Docker.

As their reputation grew from work and conference keynotes, cryptocurrency funds started reaching out for help with custody of their private keys. One had lost a passphrase and the $1 million in currency it was protecting in a display of jaw-dropping ignorance. The pair realized there were no true standards in crypto custody, so they got to work on Anchorage.

“You look at the status quo and it was and still is cold storage. It’s the same technology used by pirates in the 1700s,” Monica explains. “You bury your crypto in a treasure chest and then you make a treasure map of where those gold coins are,” except with USB keys, security deposit boxes and checklists. “We started calling it Pirate Custody.” Anchorage set out to develop something better — a replacement for usernames and passwords or even phone numbers and two-factor authentication that could be misplaced or hijacked.

This led them to Andreessen Horowitz partner and a16z crypto leader Chris Dixon, who’s now on their board. “We’ve been buying crypto assets running back to Bitcoin for years now here at a16z crypto. [Once you’re holding crypto,] it’s hard to do it in a way that’s secure, regulatory compliant, and lets you access it. We felt this pain point directly.”

Andreessen Horowitz partner and Anchorage board member Chris Dixon

It’s at this point in the conversation when Monica and McCauley give me their off-the-record demo. While there are no screenshots to share, the enterprise security suite they’ve built has the polish of a consumer app like Robinhood. What I can say is that Anchorage works with clients to whitelist employees’ devices. It then uses multiple types of biometric signals and behavioral analytics about the person and device trying to log in to verify their identity.

But even once they have access, Anchorage is built around quorum-based approvals. Withdrawals, other transactions and even changing employee permissions requires approval from multiple users inside the client company. They could set up Anchorage so it requires five of seven executives’ approval to pull out assets. And finally, outlier detection algorithms and a human review the transaction to make sure it looks legit. A hacker or rogue employee can’t steal the funds even if they’re logged in because they need consensus of approval.

That kind of assurance means institutional investors can confidently start to invest in crypto assets. That swell of capital could help replace the retreating consumer investors who’ve fled the market this year, leading to massive price drops. The liquidity provided by these asset managers could keep the whole blockchain industry moving. “Institutional investing has had centuries to build up a set of market infrastructure. Custody was something that for other asset classes was solved hundreds of years ago, so it’s just now catching up [for crypto],” says McCauley. “We’re creating a bigger market in and of itself,” Monica adds.

With Anchorage steadfastly handling custody, the risk these co-founders admit worries them lies in the smart contracts that govern the cryptocurrencies themselves. “We need to be extremely wide in our level of support and extremely deep because each blockchain has details of implementation. This is inherently a very difficult problem,” McCauley explains. It doesn’t matter if the coins are safe in Anchorage’s custody if a janky smart contract can botch their transfer.

There are plenty of startups vying to offer crypto custody, ranging from Bitgo and Ledger to well-known names like Coinbase and Gemini. Yet Anchorage offers a rare combination of institutional-since-day-one security rigor with the ability to participate in votes and governance of crypto assets that’s impossible if they’re in cold storage. Down the line, Anchorage hints that it might serve clients recommendations for how to vote to maximize their yield and preserve the sanctity of their coin.

They’ll have crypto investment legend Chris Dixon on their board to guide them. “What you’ll see is in the same way that institutional investors want to buy stock in Facebook and Google and Netflix, they’ll want to buy the equivalent in the world 10 years from now and do that safely,” Dixon tells me. “Anchorage will be that layer for them.”

But why do the Anchorage founders care so much about the problem? McCauley concludes that, “When we look at what’s potentially possible with crypto, there a fundamentally more accessible economy. We view ourselves as a key component of bringing that future forward.”

Powered by WordPress | Theme: Aeros 2.0 by TheBuckmaker.com