Google Previews Institutional Crypto Custody Security System, Google MPC

Google has previewed its institutional-grade crypto custody security system, Google Multi-Party Compute (MPC), a development aimed at bolstering the security of digital assets for financial institutions. The system is designed to fragment private keys and enforce institutional rules before transactions are signed, addressing the critical risk of private key compromise.

Alphabet, Google’s parent company, is reportedly already utilizing the MPC system to secure its own Ethereum and Solana assets. The service is currently in a private preview phase, with a target commercial launch slated for early 2027. Price information for the service has not yet been announced.

The Problem: Private Key Security Risks
The core challenge institutions face with blockchain, according to interpretations of the situation, is not adoption but the irreversibility of on-chain transactions once private keys are compromised. This vulnerability has coincided with significant financial losses. According to Chainalysis, approximately 43.8% of crypto assets stolen in 2024 were related to private key compromise. Furthermore, data from DeFiLlama indicates that blockchain projects had lost approximately $16.69 billion due to hacks and vulnerabilities as of June 2026, with about 40% of these losses attributed to private key theft.

Google MPC: How It Works
Google’s MPC system operates by splitting private keys into fragments that are distributed across different systems. Institutional rules are then applied before any transaction signing occurs, a process designed to prevent credential leaks and unauthorized transfers. This approach differs from previous services like Cloud KMS and Cloud HSM, which focused more on general key management. The new MPC service is specifically tailored for digital assets.

Market Positioning and Future Outlook
Google positions itself as a neutral infrastructure provider, allowing institutions to manage their own custody services. Rich Widmann, Director of Digital Asset Strategy at Google Cloud, stated that digital assets and tokenization are at an inflection point, requiring scalable and battle-tested infrastructure for regulated financial institutions. The system is designed to support future upgrades to post-quantum cryptography, initially supporting ECDSA and Ed25519.

The system’s policy engine can enforce rules such as blocking transfers that exceed certain limits, transactions to non-whitelisted addresses, or those lacking multi-department approval. However, Google emphasizes that clients retain control over their key materials, and fragments stored on Google’s infrastructure are not readable in plaintext. The company also notes that the system does not guarantee protection if legitimate users are tricked into authorizing transactions or if internal rules are compromised.

The preview of the Google MPC system comes amid increasing concerns about sophisticated cyber threats. AI has been noted to amplify the scale of scams, with projected average scam case values linked to AI tools in 2025 being significantly higher than those not linked to AI. While no AI system has publicly demonstrated the ability to break Bitcoin or Ethereum wallet signatures, some researchers have warned about potential future vulnerabilities. Quantum computing also poses a long-term cryptographic risk. Google’s current MPC protection focuses on credential leaks and unauthorized transactions, rather than assuming the underlying cryptography has been broken, though the architecture is designed to support future post-quantum cryptography upgrades.

Uncertainties and Next Steps
Key uncertainties remain regarding the Google MPC service, including its exact pricing, the specific timeline for post-quantum cryptography adoption, and the identity of the first major banking or custody clients. The extent to which institutions will entrust critical signing and policy engines to Google’s cloud infrastructure will also be a significant factor to watch as the service approaches its target commercial launch in early 2027.

Why This Matters

The materials describe a narrow update: Google has previewed its institutional-grade crypto custody security system, Google Multi-Party Compute (MPC). The exact pricing for the Google MPC service.

Broader Context

Source materials place the factual news in this context: Google’s parent company, Alphabet, is already using the system to secure its own Ethereum and Solana assets.