MoonPay Buys Israeli Key Management Firm Sodot for $100M, Taps Former Acting CFTC Chair to Lead Institutional Push
MoonPay has acquired Tel Aviv-based crypto security startup Sodot in an all-stock deal valued at approximately $100 million, the company announced April 29. The acquisition anchors a new division called MoonPay Institutional, which will be led by Caroline D. Pham, the former acting chair of the U.S. Commodity Futures Trading Commission.
The deal brings Sodot's private key management technology inside MoonPay's platform, giving the company the cryptographic infrastructure it needs to pursue banks, asset managers, trading firms, and exchanges as customers. MoonPay, which started as a fiat-to-crypto on-ramp and now serves more than 30 million direct customers across 180 countries and an estimated 100 million indirect users through integrations with PayPal, Paysafe, and Deel, has been building toward institutional markets through a series of acquisitions. It previously bought stablecoin platform Iron for an undisclosed amount and crypto checkout processor Helio for $175 million.
Sodot was founded in 2023 by Ido Sofer, Shalev Keren, Matan Hamilis, and Elichai Turkel. The company's core product is a self-hosted key management system that combines multi-party computation (MPC) and Trusted Execution Environment (TEE) technology. In standard crypto wallets, a single private key controls access to funds and represents a single point of failure. MPC distributes key material across multiple secure locations so the complete key is never reconstructed during a transaction; TEE adds a layer of hardware-level isolation for key operations. Sodot's system is designed to run on a client's own servers rather than on a vendor's cloud, a distinction that matters considerably in markets with strict data localisation requirements. The startup secured audits from Trail of Bits, NCC Group, and Halborn, and holds SOC 2 Type 2 certification. Its clients include eToro, BitGo, Flow Traders, and Exodus. According to MoonPay, Sodot's infrastructure has processed more than $50 billion in transactions and protected over 10 million wallets. MoonPay enters a market where established MPC custody providers including Fireblocks, Safeheron, and Copper already serve institutional clients; Sodot's self-hosted architecture and independent audit credentials are its primary points of differentiation.
Pham, who joined MoonPay in December 2025 as chief legal officer and chief administrative officer, will now serve as CEO of Moon Global Markets and head MoonPay Institutional. A Republican CFTC commissioner before becoming acting chair, she advanced a "Crypto Sprint" initiative to accelerate market access to spot crypto products and piloted the use of Bitcoin, Ether, and USDC as collateral in derivatives markets. MoonPay CEO Ivan Soto-Wright said in a statement that "there is no one better suited to lead this business than Caroline, who brings decades of expertise." Pham framed the institutional moment in concrete terms: "2026 will mark the moment when crypto, tokenization, and blockchain move from testing to full-scale institutional use."
Her appointment has drawn criticism. Better Markets, a financial reform advocacy group, stated that Pham "was hopelessly conflicted throughout this time" and that several of her CFTC actions appeared to benefit the industry she planned to join rather than the American people she was sworn to serve.
The concern carries weight in markets beyond the United States. In India, Kenya, and Nigeria, where regulators are actively drafting digital asset frameworks and have historically referenced U.S. regulatory developments as comparison points, the movement of a sitting derivatives regulator into a private-sector role draws scrutiny. Better Markets has argued that the pattern reflects a structural conflict of interest in how U.S. financial regulators shape the rules of markets they later join.
For markets outside the United States, the Sodot acquisition may be the more consequential part of this announcement. South Africa's Financial Sector Conduct Authority has approved 310 crypto asset service provider licences as of March 2026, and the country exited the FATF grey list in October 2025, a development that cleared a significant barrier to institutional capital flows. On-chain activity in South Africa reached an estimated $35 billion to $40 billion in Sub-Saharan volume over the past year, with stablecoins accounting for more than 45 percent of South Africa's regional crypto volume. Kenya passed its first comprehensive digital asset law in late 2025. Across the continent, traditional remittances still cost around $6 per $100 sent; stablecoins offer a materially cheaper alternative, which is part of why 43 percent of Sub-Saharan African crypto transactions now involve stablecoins, a figure that covers a wider geographic scope than the South African regional measure. MoonPay already has demonstrable traction in the region: its partnership with Deel, the global workforce platform serving more than 40,000 businesses in over 150 countries, enables stablecoin payroll disbursements across Africa, with U.S. expansion planned following an initial UK and EU launch.
African banks and fintechs seeking to build compliant custody infrastructure cannot, in many cases, rely on U.S.-hosted systems. Sodot's self-hosted model gives those institutions a path to institutional-grade key management without routing sensitive cryptographic data through foreign infrastructure.
South Asia presents a similarly significant opportunity shaped by distinct constraints. India is the world's largest recipient of remittances and a growing institutional crypto market, yet a 30 percent flat tax on crypto gains has tempered retail participation even as professional investor interest rises. Data localisation requirements mean that Indian institutions operating under domestic regulatory frameworks cannot readily depend on foreign-hosted key management infrastructure, making Sodot's self-hosted design a practical necessity rather than merely a competitive feature. Pakistan ranks among the top ten countries globally for grassroots crypto adoption according to Chainalysis, driven by remittance demand and a large, digitally connected population. In both markets, a key management architecture that avoids cross-border data exposure addresses regulatory requirements that alternative custody models cannot easily meet.
The broader market context supports the timing of the push. According to figures cited in MoonPay's announcement, global stablecoin transaction volume reached $33 trillion in 2025, and in the first quarter of 2026 alone that figure exceeded $28 trillion. The total stablecoin market cap stood at $317 billion in April 2026, up roughly 50 percent since early 2025. A Goldman Sachs survey, also surfaced via MoonPay's announcement, found that 71 percent of institutional asset managers plan to increase digital asset exposure within the next 12 months. Sofer, Sodot's co-founder, said the deal gives his team "the scale to expand our reach and make our technology central."
MoonPay holds a New York Trust Charter and BitLicense obtained in late 2025, allowing it to operate as an institutional custodian under New York Department of Financial Services oversight. Whether the combined platform can translate that U.S. regulatory foundation into traction in Nairobi, Lagos, Mumbai, or Karachi will depend on whether Sodot's self-hosted architecture performs as described in markets where data sovereignty requirements and local regulatory expectations are operationally binding. The clearest validation milestones will be the signing of first regional institutional clients, specific regulatory approvals in target jurisdictions, and live deployments that demonstrate the infrastructure functions reliably outside controlled conditions.