Every fintech that adds digital assets runs into the same list: an address for every customer, deposits you can trust, payouts that can't be sent twice, network fees, sweeps, approvals, and the hardest part of all, the keys. Valtu takes care of that list, so your team can work on the product instead.
What Valtu does
Valtu is custodial wallet infrastructure. Through one API and one dashboard you get:
- Wallets for every customer. One call gives a customer an address on every network: one EVM address for Ethereum, BNB Chain, Polygon, Base and Lisk, plus Tron and Bitcoin addresses.
- Deposits credited when they're final. Valtu watches each chain, waits for enough confirmations, and tells your server with a signed webhook.
- Sweeps and network fees. Funds are collected from customer wallets into your treasury on a schedule, and a gas wallet pays the fees, so customers never need to hold a network's own coin.
- Payouts your team approves. Your policies decide whether a payout goes straight to signing, waits for approvals from your team, or is blocked.
- Screening, payment links, analytics and alerts around all of it.
Keys you can verify, not just trust
Wallet seeds are generated and used only inside hardware enclaves: isolated machines with no disk, no network and no operator access. Every enclave image is built reproducibly, and its measurement is published. At any moment you can ask the running enclave to prove which image it is, and compare the answer with the published release. You don't have to take our word for how your keys are kept.
Production keys were created in an offline key ceremony on 13 October 2026, on a machine that has never been connected to a network.
Your rules, your approvals
Valtu runs the infrastructure; it doesn't co-sign your transfers. Each workspace has its own policies, approval groups and passkeys. With team signing turned on, the enclave itself checks your team's passkey approvals before it signs, so not even Valtu's servers can send a payout your rules don't allow.
Where we are
We publish what's in place and what isn't yet. Attestation, reproducible builds and the production key ceremony are done, and an internal security review has been completed. An external security audit has not been done yet; it's required before the service holds significant customer funds. The security page keeps this list current.
Getting started
Every workspace starts on testnets with free test coins, the same dashboard and the same API you'll use live. When you're ready, open a live workspace and switch keys.
- Read the integration guide
- Browse the API guide
- Or talk to the team about your use case