Google is unveiling Google Multi-Party Compute (MPC), a custody security system designed to help financial institutions safeguard and transfer cryptocurrencies and tokenized assets. The service will be showcased at an inaugural digital assets symposium in New York City on October 28, 2026, with commercial availability planned for early 2027.
The system distributes private-key fragments across separate environments and applies institutional transaction rules before signing. Google previously offered Cloud Key Management Service and Cloud HSM for cryptographic key management but had not offered a dedicated MPC custody product for cryptocurrencies.
“Digital asset adoption and tokenization are at an inflection point. As regulated financial institutions begin adopting blockchains and tokenization, they need scalable, proven infrastructure to secure their clients’ assets,” said Rich Widmann, director of digital assets strategy at Google Cloud.
Private-Key Theft as a Security Driver
Compromised private keys accounted for 43.8% of cryptocurrency stolen in 2024. As of June 2026, cumulative losses to blockchain hacks and exploits reached $16.69 billion, with 40% of that total attributed to private-key compromises.
Recent high-profile breaches underscore the threat. In March 2026, Resolv suffered an attack involving a compromised private key controlling a privileged account. Combined with minting system weaknesses, the breach allowed extraction of $25 million. In June 2026, attackers compromised Humanity Protocol foundation member private keys and drained $32 million from 17 or more wallets, causing the project’s token to plunge 80%.
How Google MPC Works
MPC technology splits private keys into fragments distributed across multiple systems to eliminate single points of failure. Google’s architecture is designed to support future post-quantum cryptography upgrades. The system supports conventional ECDSA and Ed25519 cryptographic signing algorithms at general availability.
Institutions can distribute key shares across Google Cloud, their own hardware, and competing cloud providers. Transaction rules can include transfer amount limits, destination wallet restrictions, and multi-department approval requirements.
Google Multi-Party Compute is currently in private preview. Several major financial institutions and design partners are testing it. Alphabet is using MPC to secure its own digital assets on Ethereum and Solana blockchains. Google did not identify testing institutions or specify which digital assets Alphabet secures.
Emerging Threats and Long-Term Risk
AI-linked cryptocurrency scams extracted an average of $3.2 million per operation in 2025, compared to $719,000 for non-AI-linked scams, according to Chainalysis. Ethereum researcher Justin Drake warned that AI advances could eventually uncover mathematical shortcuts breaking Bitcoin and Ethereum wallet digital signatures, potentially within months in a worst-case scenario. No AI system has demonstrated ability to break cryptographic signatures protecting Bitcoin or Ethereum wallets.
A sufficiently powerful quantum computer could theoretically derive a Bitcoin private key from an exposed public key in roughly 9 minutes. Approximately 6.9 million Bitcoin are potentially vulnerable to future quantum attacks due to exposed public keys.
Competitive Landscape
Existing crypto custody competitors include Fireblocks, Fordefi, and BitGo. Google positions itself as a neutral infrastructure supplier leveraging banking relationships and security expertise. The company previously published guidance on building MPC-based systems using Confidential Space in 2023.
