Google is previewing a new institutional cryptocurrency custody security service at its October 28 digital-assets symposium in New York, targeting commercial availability in early 2027.
Named Google Multi-Party Compute, the service distributes transaction-signing authority across separate computing environments rather than relying on a single private key. It combines distributed signing, transaction approval policies, and recovery tools, and is being privately tested by several unnamed financial institutions. Alphabet, Google's parent company, has already begun using the technology to secure digital assets on Ethereum and Solana.
Under Google's proposed architecture, institutions can distribute signing shares across their own equipment, Google Cloud, and competing cloud providers. A bank could require two-of-three or five-of-seven approvals before authorizing a transfer. Transaction policies can restrict destination addresses, impose transfer limits, or require additional approvals, with checks operating inside Google's Confidential Space environment. The service will support ECDSA and Ed25519 signing, while post-quantum upgrades have no announced release date.
Google is entering an established market served by Fireblocks, BitGo, and Fordefi. Those providers already offer MPC-based architectures, qualified custody, wallet infrastructure, and policy controls. Analysts caution, however, that distributing keys does not eliminate risk if signing participants share the same administrative environment or recovery systems. An attacker with sufficiently broad privileges could potentially compromise multiple participants or interfere with approval rules.
The new service arrives amid persistent private-key security failures. Chainalysis estimated that private-key compromises accounted for 43.8% of cryptocurrency stolen during 2024, when total hacking losses reached roughly $2.2 billion. That would imply around $964 million in losses linked to compromised credentials, though not all losses would necessarily have been prevented by MPC. Google is also positioning against AI-enabled threats: scams tied to AI-tool providers generated average proceeds of $3.2 million per operation in 2025, compared with $719,000 for scams without such links.
Pricing remains undisclosed, and the commercial launch depends on completing the preview program. Institutional buyers still need clearer disclosures on customer-held signing shares, administrative separation, recovery authority, and service availability before the platform can be fully compared with existing custody providers.
