Blockchain Infrastructure for Asset Managers and Funds

For an allocator, custody is the first question a risk committee asks. We build client-owned private vault infrastructure with VaultOS: an ERC-4626/ERC-7540 vault core plus a policy and control plane you own, so no shared protocol, third-party custodian, or external operator sits as the governance root of your assets. Roles are separated the way institutional operations require: distinct, bounded permissions for fund operators, valuation providers, risk guardians, and admins, instead of a single owner key or one undifferentiated multisig. ERC-7540 adds the asynchronous subscription and redemption flows that funds and credit pools actually need (request, settle, and NAV-gate entry and exit), which public vaults and manual scripts cannot do at institutional quality. Governance runs on Safe, which Protofire deployed on 120+ EVM networks, where it secures $2B+.

What is VaultOS? VaultOS is Protofire's client-owned private vault infrastructure for funds and allocators: an ERC-4626/ERC-7540 vault core paired with a policy and control plane the fund owns outright, rather than a shared protocol or a rented platform. It packages the controls institutional operations require into a P1-P5 module set spanning governance, policy, permissions, approvals, transfer restrictions, and redemption controls. Permissions are separated into distinct, bounded roles for fund operators, valuation providers, risk guardians, and admins, so no single owner key governs the assets. ERC-7540 supplies the asynchronous subscription and redemption flows funds and credit pools depend on (request, settle, and NAV-gate entry and exit) that public vaults cannot deliver at institutional quality. A Safe sits at the governance layer, while manager, curator, and operator tooling adds monitoring, dashboards, and bounded automation that rebalances within the policy the fund sets but can never exceed it. The fund keeps custody and control end to end.

A regulated mandate cannot hold a token that anyone can receive. We enforce eligibility on-chain for the whole life of a position, not at issuance alone: permissioned token standards (ERC-3643), an on-chain identity registry, and modular transfer rules for jurisdiction, accreditation, lock-ups, and holder caps, with an agent/issuer role model so your transfer agent keeps control after distribution. We integrate your KYC/KYB provider rather than taking custody of identity, and contracts are hardened in pre-audit before any capital moves. We maintain Solhint, the open-source Solidity linter used by 1M+ developers, and publish our audit reports, the allocator-grade security bar institutional capital expects. For Swarm Markets, a BaFin-licensed DEX at launch where only KYC-verified wallets can trade crypto and tokenized real-world assets across 50+ trading pairs, we built the DEX core and subgraph.

An allocation is only as credible as the proof behind it. We wire in Chainlink Proof-of-Reserve so the assets backing a token (treasuries in custody, fiat reserves, loan books, physical collateral) are attested on-chain continuously and independently, rather than asserted in a quarterly PDF. As a core contributor to Chainlink, we built the developer tooling other teams use to integrate Chainlink and have shipped Chainlink external adapters, including Proof-of-Reserve feeds (for example, Cache.gold), and we integrate price and NAV oracle feeds from Chainlink or DIA so valuation, mint caps, and redemptions all read from one trusted source. The same on-chain data feeds dashboards your investors, auditors, and risk committee verify directly, turning monthly reporting from a reconciliation exercise into a live, auditable feed. Once a fund token has an onchain NAV, holders ask where they can borrow against it; the venues that accept fund tokens today, with LTVs and dated amounts, are compared in lending against tokenized assets.

Institutional capital sits on the sidelines until downside is quantified. RWArmor, our live parametric protection layer for tokenized real-world assets, closes that gap: automated, oracle-triggered coverage for the operational events that audits don't prevent (redemption freezes, custody failures, NAV deviation, and operational breakdowns), with predefined triggers verified by multi-oracle consensus and on-chain payouts, not a manual claims process. It's built on Atomica and live with LandX. For an allocator, that's a structural answer to the question that most often blocks a risk committee from approving a tokenized-credit or treasury allocation: what happens if something goes wrong operationally? Protected positions also trade at tighter spreads, so protection improves liquidity as well as safety.

A position you can't exit isn't an allocation a fiduciary can hold. dOTC is our permissioned, KYC-gated decentralized OTC market for tokenized RWAs: a peer-to-peer secondary venue, live in production on Polygon and BNB Chain, with a yield toolset that rewards liquidity providers and market makers for keeping active offers on your asset. It gives large holders private execution with on-chain settlement instead of forcing block trades through a public DEX, where they incur slippage, signaling, and MEV exposure. For Swarm Markets, permissionless dOTC lets institutions execute large trades on-chain with private offers and configurable order parameters, the controlled, compliant venue an allocator needs before committing size.

Allocators want diversified, liquid yield without selecting validators, protocols, and liquidity routes network by network. We build the Liquid Staking Index: a multi-chain liquid-staking fund and distribution layer that aggregates LST exposure across emerging proof-of-stake networks through a single vehicle, with a Master Vault, per-network sub-vaults, NAV reporting, fee accrual, and redemption management, designed for distribution to institutional clients through custody partners. The same staking engineering underpins work such as our non-custodial delegation service for KyberDAO, where trustless proxy contracts cut operational costs 50% and supported 7,000+ stakers; Stake Capital built StakeDAO on top of them and reported more than $50M of TVL after launch. Institutional staking yield, without surrendering custody.

Our blueprint library documents fund and treasury architectures already running at regulated institutions: the regime that permits each one, named institutions operating it, and which layers a manager owns, rents, or has us build. Six are drawn for asset managers and corporate treasuries:

Reserve assurance is one of the hardest reporting problems an asset manager faces, and it is one Protofire has solved in production. We have built and operated real-time proof-of-reserve infrastructure at enterprise scale, covering billions in reserves. The engagement pattern is consistent: we open with strategy and assessment workshops that map the existing reporting stack and surface the reconciliation and reporting gaps holding it back, then build from that blueprint. What we deliver is the pipeline that turns attestation from a periodic manual exercise into a continuous, blockchain-backed process: custodian and exchange adapters, oracle feeds, on-chain attestation contracts, compliance dashboards, and automated reporting. That discipline is proven at scale: for a large auditing firm we delivered 15+ proof-of-reserve and real-time attestation deployments for asset-backed tokens. For an asset manager, that is the reserve-assurance and reporting layer a fiduciary and an auditor can both stand behind.