Open-source decentralized infrastructure: what changes for security teams?

TL;DR: Blockchain security is moving deeper into open, standards-based infrastructure as CertiK has joined LF Decentralized Trust, while its research says audits are increasingly mandated or indirectly required in most major jurisdictions and AML enforcement is now the industry’s biggest regulatory headache. Compliance and security are no longer adjacent concerns in decentralized systems; they are becoming the operating baseline.

Editorial analysis by NHI Mgmt Group, based on content published by CertiK: “CertiK Joins LF Decentralized Trust to Advance Security Standards for Enterprise Blockchain”.

By the numbers:

• Related fines and settlements topped $900 million in H1 2025 alone, according to CertiK.
• CertiK says it has secured more than $600 billion in digital assets across more than 5,000 enterprise engagements.

Key questions

Q: What governance gap appears when blockchain infrastructure moves into regulated enterprise use?

A: The main gap is that technical correctness is not the same as governed trust.

Q: Why does regulatory pressure change how digital asset security is managed?

A: Because compliance becomes part of the operating model rather than an external review.

Q: What are the signs that non-human trust objects are not being governed properly?

A: Common warning signs include unclear ownership of signing keys, weak revocation processes, inconsistent rotation, and automation accounts that cannot be tied back to a control owner.

Practitioner guidance

• Map decentralized workloads to control owners Assign ownership for security, compliance, and audit evidence across the full lifecycle of blockchain-related systems, including development, deployment, and operating governance.
• Treat keys and signing processes as governed non-human identities Inventory wallets, signing keys, service credentials, and automation accounts so their issuance, rotation, and revocation can be controlled and reviewed.
• Build repeatable assurance evidence into platform selection Ask for audit artefacts, security review records, and standards alignment evidence before approving decentralized infrastructure for regulated workloads.

Bottom line: CertiK’s move into LF Decentralized Trust reflects a broader shift: blockchain security is becoming a governance and assurance issue as much as a code-security issue.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →