- Google is reportedly developing a Multi-Party Computation (MPC) service for institutional cryptocurrency custody, with commercial availability expected in early 2027.
- The service is reportedly undergoing private testing with major financial institutions and is being used to secure digital assets on Ethereum and Solana.
- A newly disclosed vulnerability in Fireblocks’ MPC library highlights potential weaknesses in cryptographic key management, even when private keys are distributed across multiple parties.
Google is reportedly preparing to expand its cryptocurrency security infrastructure with a new Multi-Party Computation service designed for institutional digital asset custody.
The service, referred to as Google MPC, is reportedly in private preview, with major financial institutions testing its capabilities ahead of a potential commercial launch in early 2027.
The technology is also reportedly being used to secure cryptocurrency assets on Ethereum and Solana.
The development comes as a newly disclosed vulnerability in Fireblocks’ MPC library raises concerns about the security of cryptographic key management systems.
Google Expands Into Institutional Crypto Security
Multi-Party Computation allows several participants to authorize cryptocurrency transactions without combining their private key shares into a single complete key.
Instead of storing an entire private key in one location, MPC distributes cryptographic shares across multiple parties.
This approach can reduce the risks associated with a compromised device, unauthorized access or a single point of failure.
Google Cloud has already supported institutional MPC deployments through its Confidential Space infrastructure.
The technology combines confidential computing with hardware-backed attestation, helping organizations verify protected workloads and restrict access to sensitive information.
Google’s reported MPC service would expand these capabilities into a more dedicated cryptocurrency custody offering.
For financial institutions managing substantial digital asset holdings, the service could provide additional options for securing blockchain transactions.
However, specific commercial terms, supported features and final launch details have not yet been confirmed.
Fireblocks MPC Vulnerability Raises Security Concerns
The reported Google expansion comes shortly after the disclosure of a security vulnerability affecting Fireblocks’ MPC library.
On Oct. 26, the CERT Coordination Center published advisory VU#701544, identifying a flaw in the library’s implementation of BIP32 hardened key derivation.
According to the advisory, the affected software can substitute a zero-filled buffer when a required private parent key is unavailable instead of rejecting the operation.
Under certain conditions, an attacker who obtains a compromised descendant signer share and its associated chain code could recover ancestor shares within the same participant’s key hierarchy.
The vulnerability does not directly expose a complete private key capable of authorizing cryptocurrency transfers.
However, it weakens protections intended to prevent a compromised key share from exposing related cryptographic material.
CERT/CC reported that no vendor fix was available when the advisory was published.
Institutional Custody Requires Multiple Security Layers
The Fireblocks disclosure highlights the importance of evaluating how MPC systems are implemented rather than relying solely on their underlying cryptographic design.
Although distributing private key shares can reduce certain security risks, vulnerabilities in derivation logic, software controls and transaction authorization procedures can still create weaknesses.
CERT/CC recommended keeping chain codes confidential and avoiding reliance on the affected hardened derivation process to isolate signer shares until the issue is corrected.
For Google’s reported MPC service, institutional customers will likely evaluate security architecture, access controls, recovery procedures and transaction approval policies before adoption.
The growing involvement of major technology companies in cryptocurrency custody also reflects increasing demand for infrastructure capable of protecting institutional digital assets.
As financial institutions expand their blockchain operations, secure key management is becoming an increasingly important part of cryptocurrency custody.
