Google to preview crypto custody security system as AI threats grow

Google Unveils Multi‑Party Compute Custody Service Amid Rising Crypto Threats

Google Cloud is set to showcase a new security offering—Google Multi‑Party Compute (MPC)—designed to help banks, asset managers, and other financial institutions safeguard and transfer cryptocurrencies and tokenized assets. The service, currently in private preview with several major design partners, aims to mitigate the growing risk of private‑key compromises, AI‑enhanced fraud, and the long‑term specter of quantum attacks. Commercial availability is slated for early 2027.

Why MPC Matters for Institutional Crypto Custody

Traditional crypto wallets rely on a single private key. If that key is stolen or a machine storing it is compromised, the attacker can move the assets irreversibly. Recent industry data shows that private‑key theft accounts for roughly 44% of crypto losses, translating to billions of dollars in stolen value. By splitting a private key into multiple fragments and distributing those fragments across separate, isolated environments, MPC eliminates the single point of failure. Transactions are only signed when a predefined quorum of fragments collaborates, and institutional policy checks can be enforced before any signature is produced.

Core Features of Google Multi‑Party Compute

• Distributed Key Shares: Private‑key material is never stored in full on any single system. Each share is encrypted and isolated, reducing exposure if a node is breached.
• Policy‑Driven Transaction Controls: Institutions can define limits, approval hierarchies, and compliance rules that are evaluated automatically before a transaction is signed.
• Customer‑Owned Key Material: Google cannot access the raw key shares, ensuring that the custodian retains full control over its assets.
• Future‑Ready Architecture: While the current implementation focuses on protecting against compromised credentials, the design is built to incorporate post‑quantum cryptography once standards mature.

Addressing Emerging AI and Quantum Risks

AI tools are increasingly being leveraged by fraudsters to automate social‑engineering attacks and identify weak implementations of cryptographic software. Recent analyses suggest AI‑enhanced scams generate several times more illicit proceeds than traditional methods. Google’s MPC service counters this by requiring multiple independent approvals, making it harder for a single compromised credential to authorize a malicious transfer.

Quantum computing poses a longer‑term threat: a sufficiently powerful quantum machine could, in theory, derive private keys from public keys. Although practical quantum attacks remain speculative, Google’s architecture is designed to be extensible, allowing future integration of quantum‑resistant algorithms without overhauling the entire custody framework.

Industry Implications and Adoption Outlook

The introduction of a purpose‑built, cloud‑native MPC custody solution signals a maturation of crypto infrastructure for regulated finance. As tokenization and blockchain‑based settlement gain traction among banks, the need for robust, auditable, and scalable key‑management grows. Google’s existing cloud services—Key Management Service (KMS) and Cloud HSM—already serve many enterprises, and MPC adds a layer specifically tuned for the immutable nature of blockchain transactions.

Early adopters will likely use the service for high‑value custodial holdings, cross‑chain transfers, and compliance‑driven settlement workflows. By offloading the complex cryptographic plumbing to a managed platform, institutions can focus on business logic and regulatory reporting while relying on Google’s security expertise.

Looking Ahead

Google plans to make Multi‑Party Compute generally available in early 2027, with pricing and detailed service‑level agreements yet to be announced. The preview phase will provide valuable feedback on integration patterns, policy configuration, and performance at scale. For firms navigating the intersection of traditional finance and digital assets, the service offers a compelling path to reduce key‑theft risk, enforce transaction governance, and future‑proof custody against AI‑driven and quantum threats.

The crypto security landscape is evolving rapidly. Institutions that adopt advanced custody technologies like MPC will be better positioned to protect client assets and meet emerging regulatory expectations.