Fireblocks Public-Source Startup Diligence Report
Proceed only to data-room diligence: validate ARR quality, valuation support, security controls, legal/regulatory status, cap-table economics and customer references before pricing or committing capital.
Fireblocks Public-Source Startup Diligence Report
Fireblocks is public-source eligible as a late-stage private unicorn with a credible institutional digital-asset infrastructure platform, strong public investor/customer/regulatory signals, and material private-data gaps. The report supports continued diligence, not a final investment decision.
Fireblocks value proposition depends on secure key management and policy controls; StakeHound allegations heighten diligence need.
Diligence request: Request SOC 2, pen tests, incident register, key ceremony evidence, backup controls, insurance and remediation history.
Latest public valuation anchor is $8B from 2022/CB Insights; current ARR, growth, margin, burn and secondary pricing are non-public.
Diligence request: Request audited financials, monthly ARR bridge, cash/debt, budget-vs-actuals and recent primary/secondary transactions.
Multiple late-stage rounds likely create preferences, pro-rata, veto and information rights that are not public.
Diligence request: Request fully diluted cap table, financing documents, investor-rights agreement and exit waterfall.
NYDFS licensing is positive, but global custody/payment/tokenization activity requires jurisdiction-specific compliance.
Diligence request: Request jurisdiction/license matrix, regulator correspondence, exam findings and AML model validation.
Named logos and self-reported customer counts do not reveal ARR concentration, retention, contract terms or module usage.
Diligence request: Request ARR by customer/segment/module, top-20 contracts, NRR/GRR and reference calls.
Public StakeHound dispute information is incomplete and could imply unresolved legal, insurance or reputational liabilities.
Diligence request: Request counsel letter, litigation schedule, settlement/reserve status, insurance coverage and board minutes.
Founder-market fit is credible, but global regulated infrastructure requires institutionalized controls beyond founders.
Diligence request: Request org chart, executive scorecards, succession plans, attrition data and reference checks.
Institutional digital-asset infrastructure remains competitive and cyclical.
Diligence request: Request win/loss analysis, competitor displacement data, pricing history and market-cycle sensitivity.
Public sources do not provide audited or quarterly financial statements; only funding announcements and self-reported ARR growth are available. Public rounds show rapid capital formation through an $8B Series E, but share-class terms remain private. No public debt, tax or off-balance-sheet schedules were found; request complete company records. The public valuation anchor is $8B, but current fair value cannot be underwritten without financials and recent transaction data.
not publicly verifiable confidence: medium
Public sources do not provide audited or quarterly financial statements; only funding announcements and self-reported ARR growth are available.
| Input | Public status | Why needed | Priority |
|---|---|---|---|
| Audited financials | Not found | Revenue, margin, burn, cash validation | High |
| ARR and retention | Only self-reported growth signal | Recurring quality and valuation | High |
| Debt/tax/commitments | Not found | Runway and obligations | High |
| Question | Public evidence | Needed private evidence | Risk |
|---|---|---|---|
| Is $8B still supportable? | 2022 Series E / CB Insights | Current ARR, growth, comparables, secondary trades | R-001 |
| What are exit economics? | Large late-stage syndicate | Cap table and liquidation preferences | R-002 |
partially verified confidence: medium
Public rounds show rapid capital formation through an $8B Series E, but share-class terms remain private.
| Date | Event | Amount | Valuation | Evidence |
|---|---|---|---|---|
| 2022-01-27 | Series E | $550M | $8B | Company PR and CB Insights |
| 2021-07-27 | Series D | $310M | $2B | Company PR |
| 2019-2021 | Earlier rounds | $16M / $30M / $133M | Not public | Globes/PR |
| Round | Lead or notable investors | Public notes | Diligence implication |
|---|---|---|---|
| Series E | D1, Spark, General Atlantic, Index, CapitalG, Sequoia, others | $550M at $8B | Investor rights and preferences likely material |
| Series D | Sequoia, Stripes, Spark, Coatue and others | $310M at $2B | Step-up valuation requires support |
| Series B/C | Paradigm, Coatue, Ribbit, Stripes | $30M and $133M | Trace dilution and option pool |
not publicly verifiable confidence: medium
No public debt, tax or off-balance-sheet schedules were found; request complete company records.
partially verified confidence: medium
The public valuation anchor is $8B, but current fair value cannot be underwritten without financials and recent transaction data.
Public docs support an MPC/API/platform thesis, but independent control testing is not public. Product pages show expansion into payments, tokenization and compliance workflows; adoption by module is not public. Security pages and docs are positive signals, but SOC reports, pen tests and incident history remain required.
partially verified confidence: medium
Public docs support an MPC/API/platform thesis, but independent control testing is not public.
| Module | Public claim | Diligence question |
|---|---|---|
| Wallets / MPC custody | MPC-based security infrastructure | Controls, audits and incident history |
| Payments / treasury | Digital-asset movement and operations | ARR by module and customer adoption |
| Tokenization / compliance | Tokenization and AML workflows | Regulatory coverage and unit economics |
| Area | Public signal | Private test |
|---|---|---|
| MPC/key management | MPC-CMP docs | Key ceremony, backups, audit reports |
| Policy engine | Policy/product docs | Approval logs, SoD and override controls |
| APIs | API reference | SLA, uptime, incident and support metrics |
partially verified confidence: medium
Product pages show expansion into payments, tokenization and compliance workflows; adoption by module is not public.
| Theme | Evidence | Open question |
|---|---|---|
| Payments/stablecoins | Product pages | Real customer volume and regulatory path |
| Tokenization | Product pages and Wyoming relationship | Revenue conversion and compliance load |
| Compliance integrations | Compliance page | Production effectiveness and false-positive handling |
partially verified confidence: medium
Security pages and docs are positive signals, but SOC reports, pen tests and incident history remain required.
Named logos support enterprise credibility, but ARR concentration and contract economics are private. Public sources show segment breadth; pipeline, conversion and pricing data are unavailable. No public churn/NRR/GRR metrics were found; references are mandatory.
partially verified confidence: medium
Named logos support enterprise credibility, but ARR concentration and contract economics are private.
| Segment | Example | Evidence type | Open diligence |
|---|---|---|---|
| Fintech/app | Revolut | Customer story | Contract size and reference |
| Payments/PSP | Worldpay | Customer/partner story | Volume and economics |
| Bank/public sector | ABN AMRO / Wyoming | Case story / PR | Production status |
| Metric | Public status | Why needed |
|---|---|---|
| Top-20 ARR concentration | Not public | Downside risk |
| NRR/GRR/churn | Not public | Revenue durability |
| Logo definition and active usage | Self-reported scale only | Quality of public logo claims |
not publicly verifiable confidence: medium
Public sources show segment breadth; pipeline, conversion and pricing data are unavailable.
| Reference type | Target | Questions |
|---|---|---|
| Fintech customer | Revolut-like app | Integration, support, ROI, alternatives |
| Bank/asset manager | ABN AMRO or WisdomTree-like institution | Compliance approvals and uptime |
| PSP/public sector | Worldpay/Wyoming-like program | Volume, token/stablecoin use cases |
not publicly verifiable confidence: medium
No public churn/NRR/GRR metrics were found; references are mandatory.
Fireblocks competes with custody, prime and infrastructure providers; differentiation must be proven by win/loss and retention. Tokenization, stablecoins and institutional adoption support optionality but remain regulated and cyclical. Crypto market cycles may affect transaction volumes, assets under custody and customer budgets.
partially verified confidence: medium
Fireblocks competes with custody, prime and infrastructure providers; differentiation must be proven by win/loss and retention.
| Competitor | Overlap | Diligence question |
|---|---|---|
| Coinbase Prime | Custody, trading, institutional platform | Win/loss and pricing |
| BitGo / Anchorage | Custody and regulated infrastructure | Regulatory differentiation |
| Copper / Taurus | Institutional infrastructure/tokenization | Feature and bank-channel comparison |
| Scenario | Trigger | Action |
|---|---|---|
| Bull | ARR growth, retention, controls and licenses support valuation | Proceed with standard protections |
| Base | Good platform proof but valuation/cap gaps persist | Price/structure for downside |
| Bear | Unresolved security, legal, concentration or license issue | Avoid or defer |
Qualitative; not a market-share estimate.
partially verified confidence: medium
Tokenization, stablecoins and institutional adoption support optionality but remain regulated and cyclical.
| Driver | Upside | Downside |
|---|---|---|
| Stablecoins/payments | More institutional workflows | Regulatory and banking dependency |
| Tokenization/RWA | New product demand | Slow enterprise adoption |
| Crypto trading cycle | Higher flows in bull markets | Budget and volume compression in downturns |
partially verified confidence: medium
Crypto market cycles may affect transaction volumes, assets under custody and customer budgets.
NYDFS licensing is verified for Fireblocks Trust Company, but global coverage and exam results are non-public. AML/compliance integrations are publicly described; effectiveness requires process evidence. StakeHound allegations make litigation and incident diligence a gating item.
verified confidence: high
NYDFS licensing is verified for Fireblocks Trust Company, but global coverage and exam results are non-public.
| Jurisdiction | Public evidence | Diligence need |
|---|---|---|
| New York | NYDFS lists Fireblocks Trust Company, LLC | Confirm scope, conditions and exams |
| Other U.S./global | Not complete in public sources | License map and counsel memo |
| Product-specific | Payments/tokenization pages | Activity-by-activity legal analysis |
| Control area | Public signal | Private evidence |
|---|---|---|
| AML/sanctions | Compliance integrations | Model validation and alerts |
| Custody governance | NYDFS license | Exams, policies, segregation |
| Privacy/data | Trust/security pages | SOC reports and DPAs |
partially verified confidence: medium
AML/compliance integrations are publicly described; effectiveness requires process evidence.
partially verified confidence: medium
StakeHound allegations make litigation and incident diligence a gating item.
| Matter | Public record | Needed evidence |
|---|---|---|
| StakeHound dispute | Public allegations regarding lost ETH; Fireblocks disputed responsibility | Counsel letter, outcome, reserves, insurance |
| Regulatory enforcement context | NYDFS enforcement can impose penalties/remediation | Any company-specific findings |
| Security incidents | Status/security pages incomplete | Incident register and root cause reports |
| Risk | Severity | Likelihood | Evidence |
|---|---|---|---|
| Valuation and current fair-value uncertainty | high | high | EC-001, EC-002, EC-019, EC-025 |
| Capital structure and investor-rights opacity | high | medium | EC-002, EC-018, EC-019, EC-025 |
| Regulatory and licensing execution | high | medium | EC-014, EC-015, EC-016, EC-026 |
| Security/key-management failure risk | critical | medium | EC-008, EC-020, EC-021, EC-025 |
| Customer concentration, churn and revenue-quality opacity | high | medium | EC-011, EC-012, EC-023, EC-025 |
| Litigation or contingent liability exposure | high | unknown | EC-020, EC-021, EC-025 |
Founder-market fit is credible from public cyber-security background; references and incentives are private. Job postings indicate active hiring, but headcount, attrition and compensation quality are unknown. Investor quality is high, but board composition, preferences and control rights are private.
verified confidence: high
Founder-market fit is credible from public cyber-security background; references and incentives are private.
| Person/group | Public evidence | Diligence need |
|---|---|---|
| Michael Shaulov | Founder/CEO, cyber-security background | Reference checks, equity, succession |
| Idan Ofrat / Pavel Berengoltz | Co-founders in public sources | Role, ownership, retention |
| Executive bench | Hiring/LinkedIn signals | Org chart and scorecards |
Requires company cap table and board list.
partially verified confidence: medium
Job postings indicate active hiring, but headcount, attrition and compensation quality are unknown.
| Signal | Public evidence | Question |
|---|---|---|
| Active hiring | Greenhouse listings | Growth vs attrition/backfill |
| Global footprint | Careers/location pages | Compliance and management span |
| Control functions | Compliance/security-related roles if open | Resourcing against regulatory load |
not publicly verifiable confidence: medium
Investor quality is high, but board composition, preferences and control rights are private.
| Document | Why needed | Priority |
|---|---|---|
| Cap table and financing docs | Ownership, dilution, preference stack | High |
| Board/investor rights | Control, vetoes, information rights | High |
| Option pool and grants | Retention and future dilution | Medium |
No renderer is wired up for this figure type yet. Source data remains in the report YAML.
Critical risk centers on security/key management, with high financial, regulatory, customer and legal risks. Diligence should model valuation compression, crypto downturn, regulator shock and major incident cases. Proceed only if private data validates ARR quality, controls, license coverage and valuation support.
partially verified confidence: medium
Critical risk centers on security/key management, with high financial, regulatory, customer and legal risks.
Scoring is not a probability model.
not publicly verifiable confidence: medium
Diligence should model valuation compression, crypto downturn, regulator shock and major incident cases.
No renderer is wired up for this figure type yet. Source data remains in the report YAML.
not publicly verifiable confidence: medium
Proceed only if private data validates ARR quality, controls, license coverage and valuation support.
The public record leaves major financial, cap table, security, customer and legal gaps. If proceeding, structure should reflect valuation, regulatory, security and information-rights risk. Monitoring should include ARR/retention, security incidents, compliance findings, customer concentration and liquidity.
not publicly verifiable confidence: medium
The public record leaves major financial, cap table, security, customer and legal gaps.
| Area | Request | Owner |
|---|---|---|
| Financial | Audited statements, ARR, retention, cash, debt, burn | CFO |
| Security/legal | SOC reports, incident register, counsel letter, insurance | CISO/GC |
| Commercial | Top customers, contracts, churn, pipeline, references | CRO |
No renderer is wired up for this figure type yet. Source data remains in the report YAML.
not publicly verifiable confidence: medium
If proceeding, structure should reflect valuation, regulatory, security and information-rights risk.
| Risk | Protection | Monitoring |
|---|---|---|
| Valuation/cap table | Price discipline, preference/warrant/ratchet or tranche | Monthly ARR/cash and secondary comps |
| Security/legal | Special indemnity, insurance, escrow, closing conditions | Incident and litigation reporting |
| Regulatory/customer | Information rights and covenants | License findings and customer concentration |
not publicly verifiable confidence: medium
Monitoring should include ARR/retention, security incidents, compliance findings, customer concentration and liquidity.
| ID | Claim | Status | Sources |
|---|---|---|---|
| EC-001 | CB Insights lists Fireblocks as a private fintech unicorn valued at approximately $8.0 billion. | verified high | SRC-001 |
| EC-002 | Fireblocks announced a $550 million Series E in January 2022 at an $8 billion valuation. | verified high | SRC-002 |
| EC-003 | Fireblocks announced a $310 million Series D in July 2021 at a $2 billion valuation. | verified high | SRC-003 |
| EC-004 | Fireblocks announced a $133 million Series C in March 2021. | verified high | SRC-004 |
| EC-005 | Fireblocks was founded by Michael Shaulov, Idan Ofrat and Pavel Berengoltz and announced $16 million of early funding in 2019. | verified high | SRC-005 |
| EC-006 | Fireblocks announced a $30 million Series B in November 2020. | verified high | SRC-006 |
| EC-007 | Fireblocks remains active with public product, developer and customer-facing pages. | verified high | SRC-007SRC-010SRC-011 |
| EC-008 | Fireblocks publicly documents an MPC-based wallet platform, policy engine and network/integration model. | partially verified medium | SRC-008SRC-009 |
| EC-009 | Public developer materials indicate Fireblocks offers APIs/SDKs for customer integration. | verified high | SRC-009 |
| EC-010 | Fireblocks markets product lines beyond custody, including payments, tokenization, wallets and treasury workflows. | partially verified medium | SRC-002SRC-010SRC-011 |
| EC-011 | Fireblocks publicly claims substantial customer and asset-transfer scale. | partially verified medium | SRC-013 |
| EC-012 | Named public customers/partners include Revolut, Worldpay, ABN AMRO, WisdomTree and the Wyoming Stable Token Commission. | verified high | SRC-014SRC-015SRC-016SRC-017SRC-018 |
| EC-013 | Public hiring pages indicate Fireblocks continues to hire globally across commercial, engineering, compliance and operations roles. | verified high | SRC-039 |
| EC-014 | NYDFS lists Fireblocks Trust Company, LLC as licensed to conduct virtual currency business activity. | verified high | SRC-022 |
| EC-015 | Digital-asset custody and virtual-currency businesses are subject to evolving jurisdiction-specific regulatory obligations. | verified high | SRC-023 |
| EC-016 | Regulator enforcement actions in digital-asset custody illustrate material downside from control failures. | verified medium | SRC-024 |
| EC-017 | Public sources identify Fireblocks founding team and cyber-security background. | verified high | SRC-005SRC-025 |
| EC-018 | Fireblocks investor syndicate includes multiple late-stage venture and strategic investors. | verified high | SRC-002 |
| EC-019 | Fireblocks does not publish audited financial statements, quarterly financials, cap table, debt schedule, tax filings or board materials. | not publicly verifiable high | SRC-001SRC-002SRC-007 |
| EC-020 | The StakeHound dispute publicly alleged loss of ETH linked to key-management backup/control failures involving Fireblocks; Fireblocks disputed responsibility. | partially verified medium | SRC-028 |
| EC-021 | The public record does not establish the current status, reserves or remediation history for all historical legal/security matters. | inconclusive medium | SRC-028SRC-007 |
| EC-022 | Fireblocks faces competition from Coinbase Prime, BitGo, Anchorage Digital, Copper and Taurus. | verified high | SRC-032SRC-033SRC-034SRC-035SRC-036 |
| EC-023 | Fireblocks customer demand is exposed to digital-asset market cycles and institutional crypto activity. | partially verified medium | SRC-037SRC-038 |
| EC-024 | Tokenization, stablecoins and institutional digital-asset adoption create positive market tailwinds for Fireblocks platform thesis. | partially verified medium | SRC-011SRC-018SRC-038 |
| EC-025 | Key investment decision inputs remain non-public, including ARR, retention, margin, burn, cash, debt, customer concentration, security audits, insurance, cap table and legal reserves. | not publicly verifiable high | SRC-001SRC-002SRC-007SRC-013 |
| EC-026 | Fireblocks public materials describe AML/compliance integrations and workflows. | partially verified medium | SRC-012 |
This report is a public-evidence diligence snapshot, not investment advice. Important financial, legal, technical, and contractual facts remain non-public and should be verified directly with management and primary documents before any investment decision.