Private Key Leakage

MPC. Private keys are distributed to a share using threshold signatures on multiple servers or devices. A hacker or insider compromises the device and cannot extract the entire private key from a single device.

Hacker/insider control computers

Hardware Isolation. Use hardware isolation to protect each individual key so that even the controlling host cannot extract any individual private key.

Physical means of stealing/destroying

Physical Deployment. Deploy devices across multiple physical data centers.

Internal employee collusion fraud

Separation of functions policy. Approval of workflow .