AEREDIUM Launches AERSeal to Eliminate Single Private Key Risk in Smart Contracts
Austin, Texas, September 2nd, 2026, Chainwire
AEREDIUM today announced AERSeal, its first end-to-end product built using AERKey, the company’s threshold key infrastructure. AERSeal is designed to remove the single private key that commonly controls privileged functions within smart contracts and replace it with threshold signing governed by multiple authorized approvers.
Smart contracts can carry powerful administrative permissions, including the ability to mint assets, upgrade contracts, or execute other privileged actions. When those permissions depend on a single private key, losing that key can mean permanently losing access, while theft or compromise can give an attacker control over the contract.
AERSeal addresses this by transferring those privileged powers to a threshold key, with key shares held separately inside hardware-attested enclaves. The shares are never reconstructed into a complete private key in one place. Instead, signatures are produced through the CGGMP24 threshold signing protocol.
The smart contract itself does not move. AERSeal currently supports smart contracts on EVM and EVM-compatible chains.
From a Single Key to Approval-Based Governance
AERSeal allows organizations to define who is authorized to approve actions and how many approvals are required through an M-of-N policy.
Once custody is active, privileged actions such as contract upgrades or minting must follow that predefined approval process. Authorized signatories approve actions using their passkeys, after which the threshold cluster produces the required signature.
This structure is designed so that no single individual, device, or complete private key is responsible for exercising the contract’s privileged powers.
Before custody is activated, AERSeal identifies the privileged powers associated with the contract and requires them to be transferred to the threshold key. The system then verifies onchain that those powers have been transferred completely.
Cryptographic Verification Without Blind Trust
AERSeal also allows customers to independently verify the threshold key assigned to them.
Using address derivation and a signed fresh challenge, customers can verify both the derivation and possession of the key themselves, including offline, rather than relying solely on AEREDIUM’s assertion that the key is valid.
The onboarding process includes KYC for individuals or KYB for organizations, contract registration, cryptographic key verification, transfer of privileged contract powers, onchain verification, and activation of the customer’s approval policy.
“AERSeal is the first complete product to put AERKey into operation from end to end,” said Albert Dadon, Founder and CEO of AEREDIUM. “The goal is to remove the idea that control over an entire smart contract should depend on one private key. With threshold signing and defined approval policies, control can be distributed and independently verified rather than concentrated in a single point.”
AERSeal is part of the AER360 family of products and is provided by Aeredium Network LLC using AERKey by AEREDIUM.
For more information about AERSeal, visit the AERSeal website.
About AEREDIUM
AEREDIUM Holdings Inc. builds The Trust Layer: blockchain infrastructure for institutional settlement in which correctness is enforced by hardware, cryptography and autonomous oversight rather than promised by intermediaries. AEREDIUM operates from Melbourne, Tel Aviv and Austin, Texas.