Hacks & Exploits
Google Introduces Multi-Party Compute for Crypto Custody at New York Symposium
At its first digital assets symposium in New York City, Google announced its new security product, Multi-Party Compute (MPC), designed to assist banks and financial institutions in safeguarding and transferring cryptocurrency and tokenized assets.
The MPC system addresses the critical issue of private key management by splitting the key into separate shares held by different parties. This approach minimizes the risk of a single point of failure, as an attacker would only obtain a fragment of the key rather than the entire access.
Google's current focus with MPC is on mitigating threats from compromised credentials and unauthorized transactions. The service is currently in private preview, with a wider launch expected around 2027. Additionally, Google aims to incorporate post-quantum cryptography capabilities in the future, as it actively researches quantum threats to existing cryptographic methods.
Google's MPC architecture has been developed in collaboration with Anchorage Digital, a federally chartered crypto bank, and is integrated with Google Cloud Universal Ledger (GCUL) to support tokenized deposits and continuous settlement.
As the crypto market evolves, other players like Gemini Custody are also adopting MPC solutions, indicating a growing trend towards enhanced security measures in the custody of digital assets.
New Developments in Google Multi-Party Compute for Crypto Custody
- Google is unveiling its Multi-Party Compute (MPC) crypto custody system at a digital assets symposium in New York.
- The product is currently in private preview with several financial institutions.
- Google plans to make the system commercially available in early 2027.
- The MPC system splits signing keys into fragments held by different parties or machines, requiring a set number of fragments to sign transactions.
- Institutions can set customizable thresholds for signing, such as two-of-three or five-of-seven fragments.
- Google's policy engine checks transactions against predefined limits and approval rules before signatures are made.
- Chainalysis reported that 43.8% of cryptocurrency theft in 2024 was due to compromised private keys.
- Google's MPC design aims to address issues of stolen credentials and unauthorized transfers, rather than vulnerabilities in cryptographic methods.
- Google's architecture is designed to adopt post-quantum signatures in the future without requiring institutions to overhaul their systems.
- Google enters a competitive market that includes established players like Fireblocks, Fordefi, and BitGo, leveraging its banking relationships and security expertise.
FAQ
What is Multi-Party Compute (MPC)?
Multi-Party Compute (MPC) is a security product introduced by Google that helps banks and financial institutions safeguard and transfer cryptocurrency and tokenized assets by splitting private keys into separate shares held by different parties.
How does MPC enhance security for cryptocurrency custody?
MPC enhances security by minimizing the risk of a single point of failure, as an attacker would only obtain a fragment of the key rather than the entire access, thus safeguarding against compromised credentials and unauthorized transactions.
When is Google planning to launch the MPC service to the public?
The MPC service is currently in private preview, with a wider launch expected around 2027.
What future capabilities does Google plan to incorporate into MPC?
Google aims to incorporate post-quantum cryptography capabilities into MPC, as it actively researches quantum threats to existing cryptographic methods.
Who collaborated with Google in developing the MPC architecture?
Google developed the MPC architecture in collaboration with Anchorage Digital, a federally chartered crypto bank, and it is integrated with Google Cloud Universal Ledger (GCUL) to support tokenized deposits and continuous settlement.