Your one stop shop for a complete
crypto vault and wallet review source.

1. Overview, What Is Aveum Systems?

Aveum Systems is not a hardware wallet, not an MPC vault, and not another multi-sig platform. It is an entirely new category: a genomic identity vault that uses your DNA as the root key anchor, combined with Ethereum smart contracts for on-chain inheritance, and an institutional custody layer built on MPC platforms such as Fireblocks (or any approved WaaS provider). There is nothing like it on the market.

The platform is invisible to retail. No landing page ads, no app store listing, no browser extension. Access is strictly institutional, through a pre-onboarding portal that requires a verified address and returns a unique VAN (Vault Account Number). At this time onboarding is limited to institutional clients only — approved MPC infrastructure operators and family offices — with no retail path and none planned. The site launched on 11 July 2026 and is accepting a limited number of family office engagements for Q3 2026. Aveum has indicated the technology may become available through an MCP interface soon, and their sandbox is under development for other leading MCP platforms, extending institutional-grade vault capability to approved operators programmatically. The underlying architecture and protocol details in this review were compiled by the CryptoVault Reviews research team from the public materials at aveum.systems and aveum.id. This is the most deliberate and disciplined go-to-market strategy we have ever seen in crypto custody.

2. Genomic Identity, The Core Innovation

Aveum's authentication model replaces everything you know about crypto keys. Instead of a seed phrase, hardware token, or biometric template, the system derives a deterministic cryptographic key from the user's genome. The ArK-512P kernel transforms 512 non-coding SNP loci and mtDNA hypervariable regions through a multi-algorithm cascade of SHA-256, SHA-512 and BLAKE2b, calibrated on 3,202 human genomes at 30x depth (Illumina NovaSeq 6000).^[1]

How it works:^[2]

• A standard WGS or genotyping array is processed through the sealed ArK-512P cascade inside a hardware-isolated confidential compute enclave. A valid .VCF genome sequence file is required for GIS and sub-vault processing.
• The kernel generates a 256-bit master key K from defined genomic loci.
• The kernel splits K into a 15-character GIS key (60 bits) delivered to the user, and a K-tail (196 bits) held in a Trusted Execution Environment.
• Authentication requires both halves to reconstruct K for on-chain verification; the on-chain commitment stores only keccak256(K | nonce).
• Neither Aveum nor any third party ever holds the full key. The raw genomic data is discarded after processing.

This approach solves the two fundamental problems of biometric security: irrevocability and device dependency. Your genome is not stored anywhere (unlike a fingerprint template on a server). It is not device-dependent (unlike Face ID on a specific phone). And it cannot be spoofed with a photograph or latex mold.

3. Multiple Vault Succession, Wired Smart Contracts

This is where Aveum separates from every other platform we have reviewed. The Family Vault is not a wallet. It is a smart contract system with multiple vault slots, each with its own inheritance rules, time locks, and distribution logic. The system supports:

• Primary Vault: The main GIS-authenticated vault controlled by the family principal. Limited to three contract-enforced accesses per year.
• Sub-Vaults: Up to ten sub-vaults for heirs, each with configurable access and inheritance rules. Sub-Vault Lock Mode can block all in/out transactions, auto-unlocking only at liquidation. Adult sub-vaults require their own source wallet (their offramp) and are limited to three transfers per 12-month period.
• Trustee Vault: A special slot for a trusted third party with defined emergency powers.
• Spouse Vault: A spousal slot with its own inheritance triggers and liquidation rules.

The inheritance mechanism is fully automated and on-chain. After 12 months of inactivity plus a 30-day notice period (395 days total), the smart contract automatically distributes assets to the configured sub-vaults. If no sub-vaults exist, distribution is in equal proportion. Inheritance percentages are fixed at nomination and immutable for the contract term, and heirs must complete their own GIS verification within a 30-day window from activation. This is a dead man's switch executed at the protocol level with no human intervention, no lawyers, and no courts.

4. Super Security Ranked

We ranked Aveum against our entire Top Ranked Vault directory of platforms across nine security dimensions:

Aveum scores a near-perfect 95/100. The only deduction comes from the inherent complexity of the system, more moving parts means a larger attack surface in theory, though each component (genomic pipeline, enclave, smart contract, Fireblocks workspace) is independently hardened.^[1]

5. Institutional Only, And Worth Every Franc

Aveum no longer publishes list pricing. The website now runs a private placement: a limited number of family office engagements for Q3 2026, with pricing and OEM licensing terms available only by inquiry through the pre-onboarding channel. What is published is the revenue model: the protocol license fee is charged at the client level upon GIS issuance and collected in ETH from the issuing institution's treasury wallet when the client's GIS is activated on Ethereum mainnet, while the issuing institution pays zero platform access fees. Our July review cited 50,000 CHF (5-year) and 85,000 CHF (10-year) protocol licenses; current terms are confirmed only through onboarding. For a family office managing multi-generational wealth, this remains a protocol license, not a subscription. You are buying biological key infrastructure and on-chain inheritance, not monthly access to a dashboard.

What does that buy you?

• Institutional onboarding only — approved MPC infrastructure operators and family offices, at this time.
• A genetically-bound vault key that cannot be stolen, phished, or socially engineered.
• On-chain inheritance that executes without lawyers, courts, or human intervention.
• Up to ten sub-vaults with independent inheritance rules and lock modes.
• Smart contract succession wiring that triggers automatically on inactivity.
• Institutional MPC signing (Fireblocks or any approved provider) across Ethereum mainnet.
• Confidential compute enclaves with FIPS 140-2 Level 3 HSM estate keys under Keep Your Own Key sovereignty.
• A standard WGS or genotyping array (.VCF) for genomic enrollment.
• VAN-based secure communication with IP-verified access.
• Zero-knowledge architecture, no PII collected, no identity documents required.

Aveum has indicated the technology may become available through an MCP interface soon, with a sandbox under development for other leading MCP platforms, so approved operators and their family-office clients should watch the protocol roadmap. For a family office managing a multi-generational crypto portfolio, the cost is trivial compared to the alternative: estate lawyers, probate courts, lost keys, or a dead inheritance. This is insurance, not software.

6. The 11 Rules, A Protocol Not a Product

Aveum's pre-onboarding portal enumerates 11 rules governing the vault protocol. These are not terms of service. They are protocol invariants enforced by smart contract logic:

1. Authentication: GIS-based split-key verification only. No passwords.
2. Sub-Vault Lock Mode: Blocks in/out until liquidation date.
3. Zero-Knowledge: No PII collected or stored.
4. No Custody: Aveum never holds user funds. Keys are split between user and enclave.
5. Ethereum Only: Mainnet only. No other chains.
6. VAN-Based Communication: All correspondence via VAN suffix email addresses.
7. 395-Day Liquidation: 12mo inactivity + 30d notice period.
8. Three Accesses Per Year: The main vault is limited to three contract-enforced accesses per year.
9. Fee-Free: The issuing institution pays zero platform access fees (Aveum collects the license fee in ETH at GIS activation).
10. No Death Notices: "We do not know who you are." Inheritance is triggered by inactivity, not notification.
11. Closed-Transfer Enforcement: No API connections to exterior addresses. Enforced at the smart-contract address-check layer, the OPS /authorize gate, and the MPC TAP policy. No override, no admin bypass, no third-party whitelist.

Every rule is a deliberate design choice that prioritizes sovereignty, privacy, and automation over convenience. This is a vault for those who understand that true security is inconvenient.

7. Architecture, The Three-Layer Model

Aveum documents a three-layer "fortress" architecture running inside hardware-isolated confidential compute enclaves in a private VPC. L1 is the ArK-512P kernel (C), which produces the 256-bit canonical key K, exposing only the 15-character GIS to the user. L2 is the engine (Python), handling VCF ingest, payload normalization and deterministic GIS + K derivation. L3 is the operations layer (Python/Flask), running the portal, registry, bridge and split-key verification. All cryptographic layers are sealed inside the enclave with no operator access.^[1]

Our July review described a front-facing VPS paired with a dark IBM LinuxONE mainframe connected over WireGuard. That hardware path has since been retired: the current public architecture documents sealed enclaves (PostgreSQL 15, Node.js 20, Python 3.12) with estate keys secured by FIPS 140-2 Level 3 HSM under Keep Your Own Key sovereignty. We have revised this section to match the published stack. No other vault platform in our directory combines split-key verification with hardware-isolated confidential compute at this level.^[2]

8. Limitations & Risks

No review is complete without acknowledging the risks:

• Novelty risk: Genomic key derivation has no track record. The cryptographic community has not yet subjected it to the same level of analysis as BIP39 or SLIP39. Aveum's kernel is not yet open for public audit.
• Single-chain limitation: Ethereum mainnet only. If Ethereum undergoes a contentious fork or suffers a catastrophic failure, the vault smart contracts and inheritance logic are affected.
• No retail access: Institutional onboarding only — approved MPC infrastructure operators and family offices, at this time. Pricing is by inquiry; earlier published terms ran 50,000 CHF and up.
• Lock-in: A GIS-bound vault cannot be migrated to another platform. The vault is permanently associated with the genomic identity.
• Post-quantum uncertainty: The keccak256(K | nonce) scheme is NIST PQ Category 5, but if large-scale quantum computing materializes within the vault's lifespan, the on-chain commitments may need migration.
• Regulatory ambiguity: Genomic data processing falls under special regulations in most jurisdictions (GDPR Article 9 in the EU, HIPAA in the US). Aveum's model of processing and discarding raw data addresses this, but the regulatory landscape for genomic identity in crypto is untested.

9. Verdict

10. Categories