MORGANABLE BUSINESS / DIGITAL FINANCE
Google is preparing a security service to help banks and other financial institutions protect cryptocurrencies and tokenised assets.
Akure —
Google is preparing a security service to help banks and other financial institutions protect cryptocurrencies and tokenised assets.
Called Google Multi-Party Compute (MPC), the service is currently in private preview, with several major financial institutions testing the technology.
Google plans to make it commercially available in early 2027, although it has not announced a firm launch date or pricing.
The move comes as financial institutions explore blockchain payments and digital securities.
These activities require strong safeguards because blockchain transactions are difficult to reverse, while cybercriminals continue to target the private keys that control digital wallets.
A stolen key can allow an attacker to transfer assets without the owner’s permission.
According to CoinDesk’s report published on October 28, Google will present the service at its first digital assets symposium in New York.
The company has not identified the institutions testing the product or disclosed the value of the assets it protects.
However, Google’s parent company, Alphabet, has begun using the technology to secure some of its digital assets on Ethereum and Solana.
Banks, investment firms and other organisations need dependable ways to control digital assets as they expand into blockchain-based services.
Google hopes its technology can help them manage transactions without placing too much trust in one device, employee or provider. Selected partners are testing it privately.
A private key works like a digital signature. It gives its holder the ability to approve transactions and control assets held in a blockchain wallet.
If someone steals the key, that person may move the assets elsewhere. In many cases, the transaction cannot be reversed, even when the rightful owner reports the theft quickly.
Google’s MPC service aims to reduce this risk by splitting signing authority across separate systems.
Instead of storing one complete private key in a single place, the technology distributes cryptographic shares among different participants.
Those participants work together to approve a transaction without assembling the full key in one location.
For example, a financial institution could keep one share on its own equipment, another in Google Cloud and a third with a separate provider.
It could require two of the three participants to approve a transfer. As a result, an attacker who compromises only one system would not automatically gain control of the assets.
However, splitting a key does not eliminate every security risk. Institutions still need to separate administrative access, protect each share and establish reliable recovery procedures.
If all participants depend on the same compromised account or approval process, attackers may still find a way in. Security therefore depends on the wider system, not only the cryptographic method.
Google says the service combines multi-party signing with transaction policies and recovery tools.
Institutions can use rules to restrict transfers to approved wallet addresses, set transaction limits or require extra approvals.
These controls may help organisations detect unusual activity and prevent unauthorised transfers before they are completed.
The launch also reflects a wider change in financial services. Banks and asset managers are exploring tokenised assets, which use blockchain records to represent ownership or rights in financial products.
These assets may include funds, bonds and other instruments. To use them at scale, institutions need secure ways to authorise transfers and protect the keys behind their digital holdings.
Crypto custody has become a major concern because private-key theft has caused substantial losses across the industry.
Blockchain analytics firm Chainalysis estimated that compromised private keys accounted for about 43.8% of cryptocurrency stolen in 2024.
The figure highlights how attackers can bypass other protections when they gain access to the credentials that authorise transactions.
Google is entering a market that already includes specialist providers such as Fireblocks, Fordefi and BitGo.
These companies offer tools to manage wallets, set transaction approvals and monitor asset movements.
Google’s offering will compete in a field where institutions look closely at reliability, security reviews, ease of integration and the level of control they retain.
The company has not yet released enough public information to make a full comparison. It has not named its preview partners, published pricing or provided detailed independent test results.
Institutions will likely want to understand how the system handles outages, key recovery, suspicious transfers and failures involving one of its participants before they adopt it for valuable assets.
The growing use of artificial intelligence adds another layer to the security debate. AI tools can help criminals create convincing messages, automate parts of cyberattacks and search for software weaknesses.
However, the existence of AI-related risks does not mean that AI caused every crypto theft or that one custody product can stop all attacks.
There is also concern about future quantum computers. Powerful quantum systems could eventually threaten some cryptographic methods used across digital finance.
Google says its architecture can accommodate future post-quantum upgrades, but that does not mean the current preview already provides full protection against quantum attacks.
Institutions will need clear information about the protections available today and the changes planned for the future.
For now, Google’s product remains in private preview. Commercial availability is planned for early 2027, but customers do not yet have a published price list or a confirmed release date.
The next important details will include the results of institutional testing, the names of participating organisations and any independent assessments of the system.
Google’s announcement signals a push to build more institutional infrastructure for digital assets.
Whether the service wins customers will depend on its security, performance, cost and ability to fit into existing financial systems.
As banks assess their options, the central question will remain simple: can the technology protect assets while allowing legitimate transactions to move safely and efficiently?
As banks assess their options, Google’s success will depend on its ability to protect digital assets, maintain reliable services and support secure transactions.
The company’s approach could help strengthen institutional confidence in digital finance as security concerns continue to grow.
