Google to preview crypto custody security system as AI threats grow

Google is previewing a crypto custody security system utilizing multi-party computation (MPC). Several major financial institutions are currently testing this technology, and Alphabet, the parent corporation, is using it to safeguard its own digital assets on the Ethereum and Solana blockchains.

The system functions by fragmenting private keys and distributing these pieces across distinct environments. Institutional rules are applied before any transaction is finalized, which mitigates the danger that a single compromised machine could expose assets.

Google intends to make Google Multi-Party Compute (MPC) commercially available by early 2027, though pricing details remain undisclosed. This offering goes beyond Google's existing services like Google Cloud Key Management Service (KMS) and Cloud HSM, integrating MPC-based signing, transaction policies, and key recovery into a dedicated digital asset service.

This development occurs as financial entities explore using blockchains for issuing tokenized assets, processing payments, and providing digital asset custody. These activities necessitate secure transaction authorization, as blockchain actions are generally irreversible.

The technology aims to reduce reliance on a single private key by distributing control across multiple parties or computers. This means authorizing a transaction requires several distinct pieces of cryptographic information to cooperate, and the full private key is never stored in one location.

The company states that customers maintain control over their key material, and Google cannot access it in an unencrypted state, even when key shares reside on Google's infrastructure. The system's current defenses target issues like unauthorized transactions and compromised credentials.

Market participants are increasingly confronted with significant financial losses due to private-key compromises. Chainalysis reported that compromised private keys accounted for 43.8% of cryptocurrency stolen in 2024. Furthermore, DeFiLlama data indicated that as of June of this year, blockchain projects lost a cumulative $16.69 billion to hacks and exploits, with approximately 40% of those losses stemming from private-key compromises.

The introduction of this service positions Google against specialized crypto security firms such as Fireblocks, Fordefi, and BitGo. Google asserts that its banking relationships and security expertise provide a competitive advantage, while also offering a neutral infrastructure option for banks wary of reliance on competitors.

The broader trend reflects the critical need for scalable, proven infrastructure as regulated financial institutions begin adopting blockchain and tokenization. The evolving threat landscape, including AI-driven scams and potential quantum computing advancements, underscores the necessity for robust, distributed key management solutions within DeFi and L2 ecosystems.