What Blockchain Security Standards Council does

The Blockchain Security Standards Council (BSSC), incorporated as Blockchain Security Standards Council, Inc. in Massachusetts in 2024, is a nonprofit consortium dedicated to strengthening end-to-end security across blockchain ecosystems. BSSC develops and publishes a suite of security standards covering the primary attack surfaces of blockchain systems: the Node Operation Standard (NOS) for node operators and validators, the Token Integration Standard (TIS) for safe token custody and listing, the Key Management Standard (KMS) for cryptographic key lifecycle, the General Security and Privacy Guidelines (GSP) as a NIST CSF-aligned baseline, and the Smart Contract Security Standard (SCS) for smart contract development, deployment, and governance. Companion audit frameworks extend the standards to enable third-party verification, and BSSC pursues additional mandates in regulatory engagement, ecosystem education, and security-organization partnerships (notably with Crypto ISAC).

BSSC operates a tiered membership model. Charter members pay USD $50,000 annually and receive board representation; Contributor members pay USD $15,000 annually for full participation in technical working groups; General members receive free access to draft standards. The founding member cohort spans exchanges (Coinbase, Kraken), digital-asset custodians and infrastructure (Anchorage Digital, Fireblocks, BitGo, Turnkey, Figment, Bastion), security auditors (Halborn, OpenZeppelin), and venture capital (Ribbit Capital), with Mastercard joining as a Charter-level member in April 2026. Standards are published publicly at specs.blockchainssc.org.

The organization is governed by a board comprising senior security and risk leaders from member organizations, with Co-Presidents Annalea Sanders (Figment) and Frieder Weichelt (Anchorage Digital), and Adam Rak serving as Executive Director. BSSC reports 1-10 employees and is headquartered in Wakefield, Massachusetts, with operations supported through membership dues rather than external capital.

Name

Blockchain Security Standards Council

Legal name

Blockchain Security Standards Council, Inc.

Website

https://blockchainssc.org

Company type

Private

Founded year

2024

Operating status

Operating

Headcount range

1–10 employees

Short description

The Blockchain Security Standards Council (BSSC) is a 2024-founded nonprofit consortium developing and publishing security standards and audit frameworks (NOS, TIS, KMS, GSP, SCS) for blockchain node operators, custodians, token issuers, key managers, and smart contract developers, funded through tiered annual membership dues.

Ownership category

akta.pro rank

Product category

Blockchain Security Standards

akta.pro primary industry

Digital Asset Risk, Security & Audit Tooling (Smart Contract Audit, Threat Monitoring) (FSAGAMAJ)

akta.pro secondary industries

Regulatory Reporting, Tax & Audit Trails (reconciliation, provenance) (FSAPAJAI), Smart Contract Auditing & Formal Verification (FSAPAJAA), Compliance, Risk & RegTech for Tokenized Assets (KYC/AML, sanctions, travel rule, reporting) (FSAPAIAH)

Keywords

• Blockchain security standards
• Security audit frameworks
• Node operation standards
• Cryptographic key management
• Smart contract security

Headquarters

HQ city

Wakefield

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure

Revenue model

1. Membership Dues: The BSSC generates revenue through tiered membership dues. Charter-level members pay USD $50,000 annually and receive board representation plus all Contributor and General member privileges. Contributor members pay USD $15,000 annually with full participation in technical working groups. General members receive free access to review and comment on draft standards before public release.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels8 records

Core offering

Blockchain Security Standards Council is a nonprofit consortium that develops, publishes, and maintains security standards and audit frameworks for blockchain ecosystems. It offers five core standards covering node operations (NOS), token integration (TIS), cryptographic key management (KMS), general security and privacy (GSP), and smart contracts (SCS), along with companion audit programs that let third-party auditors verify compliance. Distribution is via paid tiered membership (Charter and Contributor) and free public access to the standards for industry-wide adoption.

Product overview

BSSC is a nonprofit consortium that develops and maintains a comprehensive suite of blockchain security standards and audit frameworks. The organization offers five core security standards: Node Operation Standard (NOS) for secure blockchain node operations, Token Integration Standard (TIS) for safe token custody and integration, Key Management Standard (KMS) for cryptographic key lifecycle management, General Security and Privacy Guidelines (GSP) as a foundational baseline for all blockchain participants, and Smart Contract Security Standard (SCS) for secure smart contract development and evaluation. These standards are accompanied by audit frameworks that enable third-party verification of compliance, addressing critical security needs across the blockchain ecosystem from protocol-level defenses to wallet security to key management practices.

Differentiator

Problem solved

Functional benefit

Products and services

• Node Operation Standard (NOS) A comprehensive set of security and operational requirements for organizations operating blockchain nodes, defining baseline security criteria across protocol onboarding, security and compliance, operational resilience, access control, and system hardening. Used by node operators, exchanges, custodians, and infrastructure providers to enable clients and third parties to perform safe and confident integrations.
• Token Integration Standard (TIS) A set of security requirements for tokens that helps determine whether integrating specific tokens poses known and unacceptable security risks, addressing technical robustness, operational resilience, and economic integrity. Used by digital asset custodians, exchanges, and integration partners to evaluate tokens before listing, custody, or integration.
• Key Management Standard (KMS) Guidelines for securely managing blockchain cryptographic keys throughout their entire lifecycle, from generation and use to retirement, covering state transitions of key material. Used by custodians, exchanges, and key management infrastructure providers to balance theft prevention against destruction prevention.
• General Security and Privacy Guidelines (GSP) A foundational baseline of risk management, security, and privacy practices for all participants in blockchain ecosystems, categorized according to the NIST Cybersecurity Framework and serving as a practical bridge toward ISO 27001 and SOC 2. Acts as the foundational layer underpinning the other BSSC standards.
• Smart Contract Security Standard (SCS) A blockchain-agnostic standard providing guidance for developers to build secure blockchain applications that operate as intended, along with a framework to evaluate the security posture of smart contract systems. Used by smart contract developers to apply institutional-grade security across development, deployment, upgrades, and governance.
• BSSC Audit Frameworks Companion audit programs developed in support of BSSC's security standards that align with the published standards and allow third-party auditors to verify that best practices are being followed, providing validation processes consistent with existing network and security audit practices.

Quantifiable outcome

• Standards enable organizations to demonstrate security expertise, reliability, and accountability to clients and partners
• +2 more outcomes

Named customers13 records

Segments6 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature5 records

Partnerships

13 partnerships are on record, tiered core.

• MastercardcoreStrategic or Co-development Partner · 21 April 2026Mastercard joined BSSC as a Charter-level member on April 21, 2026. The company brings decades of experience in secure payments, identity verification, and trusted digital infrastructure. Claire Le Gal (SVP, Integrity & Standards) represents Mastercard on the BSSC board. Mastercard contributes to working groups on security and privacy, providing technical guidance and operational insights from global payments security and risk management.
• Crypto ISACcoreStrategic or Co-development PartnerBSSC maintains an active partnership with the Crypto ISAC (Information Sharing and Analysis Center). Crypto ISAC is a member-driven, not-for-profit organization that works together to curb malicious actors, address vulnerabilities, share intelligence, and move security forward to protect the crypto ecosystem.
• Anchorage DigitalcoreStrategic or Co-development PartnerFounding member of BSSC. Nathan McCauley (CEO and Co-founder) serves as executive sponsor. Frieder Weichelt (CISO) served as inaugural President of BSSC board.
• CoinbasecoreStrategic or Co-development PartnerFounding member of BSSC. Adrienne Allen (Head of Security GRC and Privacy) served as inaugural Secretary of the board. Joe D'Annolfo contributed to GSP standard development. Joel Kerr (Head of DeFi Security) contributed to Token Integration Standard.
• FigmentcoreStrategic or Co-development PartnerFounding member of BSSC. Annalea Sanders (previously Annalea Ilg, CISO) served as inaugural Vice President and now Co-President of BSSC board. Max Courchesne-Mackie (Security Architect) serves as editor of Node Operation Standard.
• FireblockscoreStrategic or Co-development PartnerMember of BSSC. Shahar Madar (VP, Security & Trust Products) serves on the board of directors.
• KrakencoreStrategic or Co-development PartnerMember of BSSC. Nick Percoco (CSO) and Ruth Sandescu (Senior Director of Security Strategy and Governance) serve as representatives. Kraken is proud to play its part in designing standards that the industry will adhere to.
• BitGocoreStrategic or Co-development PartnerMember of BSSC. Part of the consortium developing security standards for blockchain and digital asset adoption.
• HalborncoreStrategic or Co-development PartnerTechnical audit firm founding member of BSSC. Rob Behnke (Co-Founder and CEO) serves as representative. Recognizes the critical need for robust security standards to safeguard blockchain integrity.
• OpenZeppelincoreStrategic or Co-development PartnerTechnical audit firm founding member of BSSC. John Neufeld serves as editor of the Smart Contract Security Standard. Jota Carpanelli (Head of Security Research) serves as panelist at DeFi Security Summit.
• TurnkeycoreStrategic or Co-development PartnerMember of BSSC. Mark Nesbitt (Head of Security) contributed to Key Management Standard development. Focus on cryptographic key lifecycle guidance.
• BastioncoreStrategic or Co-development PartnerFounding member of BSSC. Riyaz Faizullabhoy (Co-Founder) serves on the board of directors. Committed to collaborating with other industry players to make the blockchain ecosystem safer.
• Sentinel GlobalcoreStrategic or Co-development PartnerFounding member of BSSC. Part of the consortium of industry leaders working to establish blockchain security standards.

Scale indicators3 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Crypto ISAC: Crypto ISAC is a nonprofit, member-driven information sharing and analysis center for the crypto ecosystem. Most directly comparable to BSSC in scope (blockchain-focused, nonprofit, consortium-style governance) and mission (improving security through collaboration), though it emphasizes threat-intelligence sharing rather than published standards.

Broad incumbents

• Center for Internet Security (CIS): CIS is a nonprofit that publishes widely adopted security benchmarks and controls used by enterprises and governments. Comparable to BSSC as a nonprofit consortium producing prescriptive security standards that drive third-party assessment, though CIS targets operating systems and cloud platforms rather than blockchain.
• IEEE Standards Association: IEEE SA is the standards-setting body of IEEE, including the IEEE Blockchain Initiative. Comparable to BSSC as a consortium-driven standards publisher with formal standards processes and broad industry engagement, but operating globally with a much larger member base and formal ISO-IEC passthrough.
• ISO TC 307 (Blockchain and Distributed Ledger Technologies): ISO TC 307 is the international standards technical committee that develops blockchain and DLT standards. Directly comparable to BSSC in mission (blockchain security and interoperability standards), though operating as a formal intergovernmental body with a much slower, more rigorous consensus process.
• ISACA: ISACA is a long-established global nonprofit that develops cybersecurity, audit, risk, and governance frameworks (e.g., COBIT). Comparable to BSSC as a nonprofit standards-setting body with paid professional certifications and global enterprise adoption, though it operates in broader IT/cybersecurity rather than blockchain specifically.
• OWASP Foundation: OWASP is a nonprofit foundation that produces open security standards and best-practice guidance (e.g., OWASP Top 10). Comparable to BSSC as a standards-producing nonprofit whose freely accessible frameworks shape practitioner behavior industry-wide, though OWASP is broadly horizontal rather than blockchain-specific.
• Cloud Security Alliance: CSA is a global nonprofit that publishes cloud and broader cybersecurity standards, controls, and certifications. Comparable to BSSC in nonprofit/standards-body model with industry coalition governance and member-supported frameworks, though focused on cloud rather than blockchain security.

Others

• NIST (National Institute of Standards and Technology): NIST publishes the Cybersecurity Framework that BSSC explicitly maps its General Security & Privacy Guidelines to. Comparable as an authoritative cybersecurity standards authority referenced by regulators and enterprises, though NIST is a U.S. government agency rather than a private consortium.
• The Linux Foundation (Hyperledger): The Linux Foundation hosts Hyperledger and other open-source blockchain/enterprise DLT projects with associated working groups. Comparable to BSSC as a nonprofit supporting open blockchain standards and tooling via industry collaboration, but more developer-tooling focused and enterprise permissioned-ledger oriented.

Emerging players

• Ethereum Foundation (Security): Ethereum Foundation funds protocol-level security research and standards initiatives for the Ethereum ecosystem. Comparable to BSSC as a nonprofit funding organization shaping blockchain security norms, though ecosystem-scoped (Ethereum) and operating through grants rather than membership dues.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/blockchainssc
• YouTubeyoutube.com/@BlockchainSecurityStandardsCou
• LinkedInlinkedin.com/company/blockchain-security-standards-council

Revenue estimate

Valuation estimate

Number of profiles

Profiles6 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Blockchain Security Standards Council