Google is advancing its plans to introduce a crypto custody system designed for major banks and financial institutions, aiming to enhance the security of digital assets through multi-party computation (MPC). The tech giant expects to bring the service to market in early 2027, following a period of testing with select partners.
Google’s new custody solution
The upcoming custody platform, called Google Multi-Party Compute, enables banks to safeguard and transfer digital assets without storing an entire private key on a single server. This architecture is intended to reduce the risk of credential theft and unauthorized asset transfers, which remain acute risks in the crypto sector.
Google, a subsidiary of Alphabet, has already implemented MPC technology for internal asset protection across networks such as Ethereum and Solana. However, the specific assets safeguarded using this system and their associated values have not been disclosed.
The company plans to formally present the new custody system at a digital asset security conference in New York on October 28. While several major financial institutions are actively testing the technology, Google has chosen not to name these early partners. Details regarding future pricing and client expansion are also yet to be announced.
Behind the technical structure of Google Multi-Party Compute is a service specifically developed for banks to protect crypto holdings and tokenized assets, according to individuals familiar with the platform.
Google has stated its intention to support future enhancements such as post-quantum cryptography, but no release date has been provided for those upgrades.
How multi-party computation protects assets
MPC is a cryptographic protocol that divides the control over a private key between different environments, such as the bank’s infrastructure, Google Cloud, and an external provider. These separate segments collaborate to process and validate transactions, which limits the impact of a single point of compromise.
This system is designed to address vulnerabilities exposed by recent high-profile breaches. For example, the crypto exchange CoinDCX reported the loss of approximately $16 million in USDT after a compromise involving an outdated wallet structure. Despite the attack, CoinDCX emphasized that customer funds remained unaffected.
With Google’s MPC approach, clients retain control over their pieces of the private key, even those stored within Google’s cloud infrastructure. The service is also built to check each transfer request against pre-set institutional rules before approving transactions.
Mini dictionary: Multi-Party Computation (MPC) is a cryptographic method allowing multiple parties to collectively compute and manage data, such as private keys, without revealing their individual parts. This ensures that even if one party is compromised, the overall security of the key and digital assets is maintained.
| Custody Model | Private Key Storage | Single Point of Failure | User Control |
|---|---|---|---|
| Traditional | One server/device | High | Limited |
| MPC (Google) | Distributed/shared | Reduced | Enhanced |
Ongoing security risks in digital assets
Credential theft remains a persistent challenge for crypto custodians, with attackers often gaining access to private keys that enable irreversible transfers across blockchains. Recent incidents have highlighted vulnerabilities even in established protocols.
In a separate incident, hardware wallet manufacturer Foundation disclosed a breach involving a Cloudflare API key, which allowed attackers to send spoofed emails from company addresses. Foundation reported, however, that its Bitcoin hardware wallet devices, known as Passport, and users’ funds were not impacted.
Google’s custody platform specifically addresses the risks of unauthorized withdrawals and exposure to compromised credentials, but does not claim to protect against potential future threats posed by quantum computing or advances in artificial intelligence which may undermine current cryptographic standards.
The move comes amidst broader institutional experimentation with digital asset settlement. Payments company Circle and fintech firm ACI Worldwide have launched a settlement pilot with the USDC stablecoin in Colombia, studying how banks might integrate stablecoins with existing payment infrastructure. Google notes that its new system could eventually incorporate post-quantum cryptography but has not specified a timeline for this feature.
