{"id":610978,"date":"2026-08-31T09:51:33","date_gmt":"2026-08-31T09:51:33","guid":{"rendered":"https:\/\/www.olympiajournal.com\/news\/story\/610978\/anam145-advances-presigning-security-with-signtrail.html"},"modified":"2026-08-31T09:51:33","modified_gmt":"2026-08-31T09:51:33","slug":"anam145-advances-presigning-security-with-signtrail","status":"publish","type":"post","link":"https:\/\/www.pennsylvania-magazine.com\/news\/story\/610978\/anam145-advances-presigning-security-with-signtrail.html","title":{"rendered":"ANAM145 Advances Pre-Signing Security with SignTrail"},"content":{"rendered":"
The South Korean cybersecurity company reports median policy-gate verification latency of 63.9 microseconds as it advances SignTrail for institutional digital-asset infrastructure.<\/div>\n

BUSAN, South Korea – August 31, 2026<\/strong> – <\/strong>ANAM145 is advancing SignTrail, a pre-signing security layer designed to verify the origin and execution path of a digital-asset signing request before a signature is created.<\/p>\n

SignTrail operates in front of existing signing infrastructure, including hardware security modules (HSMs), multi-party computation (MPC) systems and custody platforms. It is designed to complement these systems rather than replace them and does not receive or access customers’ private keys.<\/p>\n

The product addresses a security gap that exists upstream from private-key protection. Even when a signing key remains secure and a signature is cryptographically valid, the application or workflow requesting that signature may already have been compromised.<\/p>\n

SignTrail verifies where a transaction request originated, how it was generated and whether its execution path complies with institutional policy. If the required runtime evidence is missing, invalid or inconsistent with policy, the request is not released to the signer.<\/p>\n

\"\"<\/p>\n

[Image 1: SignTrail Primary Dashboard]<\/em><\/p>\n

Verifying the Path Before Signing<\/strong><\/p>\n

SignTrail’s Linux implementation uses eBPF-based telemetry to collect runtime evidence directly from the kernel. This evidence can include process identity, executable provenance, relevant system activity and execution-path information associated with a signing request.<\/p>\n

A policy engine evaluates the request and its runtime evidence against an approved baseline. It then produces a signed, machine-readable decision such as allow, review, hold or reject, together with a reason code. The gateway operates as a fail-closed enforcement point in front of the signer and releases only requests that satisfy the required policy.<\/p>\n

SignTrail also creates a signed, hash-chained Evidence Pack covering runtime evidence, policy evaluation and enforcement. This provides institutions with a verifiable record that can support compliance reviews, audits and incident investigations.<\/p>\n

“Key-management systems confirm whether the correct key produced a valid signature. SignTrail addresses a different question: whether the software path requesting that signature can be trusted,” said June Sim, co-CEO of ANAM145. “For high-value digital-asset operations, institutions need to answer both questions.”<\/p>\n

\"\"<\/p>\n

[Image 2: Same Request, Different Runtime Origin]<\/em><\/p>\n

The importance of this distinction became visible following the February 2025 theft from Bybit. The FBI attributed the theft of approximately $1.5 billion in virtual assets to North Korean cyber actors. The Safe Ecosystem Foundation subsequently reported that the incident involved a compromised developer machine and a disguised malicious transaction proposal, while identifying no vulnerability in Safe’s smart contracts or frontend source code.<\/p>\n

ANAM145 does not claim that SignTrail would necessarily have prevented that specific incident. The company points to the case as evidence that protecting a private key is not the same as verifying the software path asking that key to sign.<\/p>\n

Microsecond-Level Verification<\/strong><\/p>\n

In an internal benchmark conducted on August 3, 2026, SignTrail recorded median policy-gate verification latency of 63.9 microseconds. The combined core decision and gate-verification path measured approximately 119.4 microseconds, while the system processed about 9,000 verifications per second on two vCPUs.<\/p>\n

The benchmark was conducted on a non-burstable AWS c6i.large instance running Linux kernel 6.17, and the results were cross-checked using two independent internal measurement methods. Actual performance may vary depending on policy complexity, workload and deployment architecture.<\/p>\n

ANAM145’s objective is to make execution-path verification fast enough to operate in front of institutional signing infrastructure without creating a material transaction bottleneck.<\/p>\n

Institutional Cybersecurity Engagement<\/strong><\/p>\n

ANAM145 is providing cybersecurity services under contract with DB Securities in connection with a blockchain-based carbon-reduction security token offering platform being developed by MarinaChain and DB Securities.<\/p>\n

Once development of the platform is completed, ANAM145 will conduct a vulnerability assessment and security review. This engagement is separate from any claim that SignTrail has been deployed within the platform.<\/p>\n

ANAM145 was also selected for Trust My Tech, the Thales-led deep-tech track of the Ministry of SMEs and Startups’ 2026 AroundX Global Corporate Collaboration Program.<\/p>\n

Through the program, ANAM145 and Thales are discussing potential technical cooperation, including how SignTrail’s execution-path verification could complement HSM-based key-protection infrastructure. The selection does not constitute a direct bilateral services contract between ANAM145 and Thales.<\/p>\n

\"\"<\/p>\n

[Image 3: SignTrail Technology and Collaboration Overview]<\/em><\/p>\n

Patent Filing and CES 2027 Submission<\/strong><\/p>\n

ANAM145 filed a Korean patent application covering SignTrail’s core technology on July 10, 2026. The pending application concerns a system and method for controlling digital-asset signing through the verification of runtime evidence before authorization.<\/p>\n

ANAM145 has submitted SignTrail to the CES 2027 Innovation Awards in the Cybersecurity category. The submission positions SignTrail as a complementary security layer for institutional wallets, custodians, exchanges and digital-asset service providers.<\/p>\n

Rather than replacing established key-management systems, SignTrail introduces an additional control at the point where software intent becomes cryptographic authorization.<\/p>\n

As digital assets move further into regulated finance, enterprise systems and public infrastructure, ANAM145 believes security controls must extend beyond possession of the private key to the integrity of the complete execution path.<\/p>\n

No verified execution path, no signature.<\/strong><\/p>\n

About ANAM145<\/strong><\/p>\n

ANAM145 is a South Korean cybersecurity company developing secure Web3 infrastructure for enterprises, governments and digital-asset service providers. Its technologies focus on wallet security, transaction-signing controls and the protection of digital-asset operations against advanced cyber threats.<\/p>\n

Media Contact<\/span>
Company Name:<\/strong> ANAM145<\/a>
Contact Person:<\/strong> Dawoon Jung
Email:<\/strong> Send Email<\/a>
Country:<\/strong> South Korea
Website:<\/strong> https:\/\/signtrail.io<\/a><\/p>\n

\"\"<\/p>\n","protected":false},"excerpt":{"rendered":"

The South Korean cybersecurity company reports median policy-gate verification latency of 63.9 microseconds as it advances SignTrail for institutional digital-asset infrastructure. BUSAN, South Korea – August 31, 2026 – ANAM145 is<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.pennsylvania-magazine.com\/news\/wp-json\/wp\/v2\/posts\/610978"}],"collection":[{"href":"https:\/\/www.pennsylvania-magazine.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.pennsylvania-magazine.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.pennsylvania-magazine.com\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.pennsylvania-magazine.com\/news\/wp-json\/wp\/v2\/comments?post=610978"}],"version-history":[{"count":0,"href":"https:\/\/www.pennsylvania-magazine.com\/news\/wp-json\/wp\/v2\/posts\/610978\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.pennsylvania-magazine.com\/news\/wp-json\/wp\/v2\/media?parent=610978"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.pennsylvania-magazine.com\/news\/wp-json\/wp\/v2\/categories?post=610978"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.pennsylvania-magazine.com\/news\/wp-json\/wp\/v2\/tags?post=610978"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}