Google Previews MPC Custody Stack for Crypto and Tokenized Assets
By Node Zero
October 28, 2026
Google is previewing a dedicated multi-party computation custody stack for banks and other institutions that need to safeguard and move cryptocurrencies and tokenized assets, CoinDesk reported Wednesday from the company’s first digital-assets symposium in New York. The product, branded Google Multi-Party Compute (MPC), is in private preview with design partners and major financial institutions testing it; Alphabet has already begun using the system to secure its own digital assets on Ethereum and Solana. Commercial availability is targeted for early 2027. Google did not name the testers, the assets Alphabet is securing, or pricing.
MPC splits a private key into fragments held across separate environments so no single compromised machine can authorize a transfer. Google said customers retain control of key material and that the company cannot access it in unencrypted form even when shares sit on Google infrastructure. A bank could, for example, keep one share in Google Cloud, another on its own hardware, and a third with a rival cloud, then require thresholds such as two-of-three or five-of-seven before a signature is produced. Before signing starts, transactions enter Google’s Confidential Space, where a policy engine can enforce amount limits, destination-wallet allowlists, and multi-department approvals.
The push lands as private-key theft remains the industry’s most expensive failure mode. Chainalysis attributed 43.8% of cryptocurrency stolen in 2024 to compromised private keys. DeFiLlama tallies put cumulative hack and exploit losses near $16.69 billion as of June, with roughly 40% tied to private-key compromises. Recent named hits include Resolv’s March privileged-key incident (~$25 million) and a June Humanity Protocol foundation-key drain of more than $32 million across at least 17 wallets. Those figures are attributed research context — not a claim that Google’s preview would have blocked every past incident.
Google already published guidance in 2023 on building MPC systems with Confidential Space, and institutions already use Cloud KMS and Cloud HSM for keys. What is new, per the company, is a purpose-built digital-asset service that packages MPC signing, transaction policies, and key recovery instead of forcing each bank to assemble the stack. Rich Widmann, Google Cloud’s director of digital assets strategy, told CoinDesk that tokenization is at an “inflection point” and that regulated institutions need scalable infrastructure to secure client assets as they adopt blockchains.
The roadmap also nods at longer-horizon cryptography risk. Google said the architecture is designed to support future post-quantum upgrades without forcing institutions to redesign custody workflows, while general availability will focus on conventional ECDSA and Ed25519 signing. Current protections target compromised credentials and unauthorized transactions rather than a hypothetical AI break of wallet signatures — a distinction the desk should keep clear when AI scare headlines circulate. Google researchers have previously estimated a future quantum machine could derive a bitcoin key from an exposed public key in roughly nine minutes under advanced preparation assumptions; about 6.9 million bitcoin have been flagged as potentially exposed via published public keys. That remains a research estimate, not an imminent mainnet event.
Google’s entry puts a hyperscaler next to specialist custody stacks such as Fireblocks, Fordefi, and BitGo. The company argues banking relationships and a “neutral infrastructure” posture help banks that do not want a custody vendor that also competes for the same clients. Configuration still matters: institutions must protect their own signing participants and control who can rewrite approval policies. Prefer Google’s dated product statements and independent loss tallies over marketing claims that MPC alone ends key risk.
Next protocol beat: Watch for Google’s early-2027 general-availability date, any named bank design-partner case studies with measurable signing latency or policy-engine receipts, and whether post-quantum signing lands only after chains adopt the underlying cryptography — those three checkpoints tell builders whether this preview becomes production custody rail or stays symposium vapor.
Bottom line: Google is privately previewing an MPC custody service for institutional crypto and tokenized-asset flows, with Alphabet already using it on Ethereum and Solana and a commercial target of early 2027.
Disclaimer: This article is provided for informational and educational purposes only. It does not constitute financial, investment, legal, or trading advice. The NFT market is highly volatile, and past performance is not indicative of future results. Readers should conduct their own research and consult qualified professionals before making any decisions related to digital assets. The cover image for this article may have been created using artificial intelligence (AI).
