Google Crypto Custody Explained: Google MPC Now Secures Ethereum and Solana — 7 Things to Know Before 2027

Google Just Built Crypto's New Vault — and Alphabet Already Uses It on Ethereum and Solana

On October 28, 2026, Google Cloud showed banks a custody system in which no complete private key ever exists anywhere — and revealed that Alphabet, Google's own parent company, already uses it to secure digital assets it holds on Ethereum and Solana. The service, called Google Multi-Party Compute (MPC), is in private preview now and targets commercial availability in early 2027. It arrives six days after a $6.3 billion hack at Binance exposed exactly the kind of single-point-of-failure custody the product is designed to eliminate — and as stablecoin volumes hit $30 trillion in 2024, a market Google clearly wants a piece of.

This is not a consumer wallet, not a Google coin, and not an airdrop. It is infrastructure — the plumbing banks need before they can hold crypto at scale. Here are the seven things that matter, the numbers behind them, and what they mean for your own coins.

1. What Happened on October 28

Google Cloud presented Google Multi-Party Compute at its first-ever event devoted to digital assets, held at Pier 57 in New York on October 28, 2026. Unchained reported that the company pitched the service directly to banks weighing crypto custody, and CoinDesk's reporting confirmed it is in private preview with large financial firms and early partners already testing it. A Google spokesperson told Cointelegraph the company aims for general availability in early 2027. Pricing has not been disclosed, and Google has not named the institutions testing it.

The headline detail came from CoinDesk: Alphabet has begun using the system to protect digital assets the company holds on Solana and Ethereum. Google did not say which assets, or how much. That silence is deliberate — but the signal is not. The world's fourth-largest company by market value is now, publicly, a crypto custodian's first customer: itself.

The timing is hard to ignore. The reveal came the day before Binance, the world's largest exchange, was hacked for $6.3 billion on October 29 — the exact kind of single-point-of-failure custody failure this product is designed to eliminate.

2. What MPC Actually Is (Without the Jargon)

Every crypto transaction is authorized by a private key — a secret number that proves ownership. Whoever holds the key controls the coins. That is the whole security model, and it is also the whole vulnerability: steal the key, steal the money. Traditional custody guards one key very carefully, in a vault or on a hardware module. It works until it doesn't — one breach, one insider, one mistake, and the key is gone.

Multi-party computation changes the premise. Instead of creating one private key and then guarding it, the system generates the key in pieces. Separate key shares are created on different machines, owned by different parties, and the full key is never assembled — not even for a moment, not even inside Google's own servers. When a transaction needs signing, the shareholders cooperate to produce a valid signature without ever revealing their shares to each other.

Think of it like a bank vault that needs three keys turned at once, except the keys themselves never meet in the same room. Google's version uses a hardened extension of the DKLS23 threshold-signing protocol, and its documentation states that an attacker who compromises fewer parties than the signing threshold cannot forge a signature — so losing one share, one server, or one employee's laptop is not enough to lose the money.

There is one more design choice that matters. A bank can keep one key share on its own hardware, one in Google Cloud, and one at a rival cloud provider. Google says it cannot read customers' key shares in plaintext, even those stored on its own servers. No single provider — Google included — ever holds the whole key.

3. How a Transaction Gets Signed: The 4-Step Flow

Here is what actually happens when a bank using Google MPC moves crypto, step by step:

1. The key is born in pieces. Key shares are generated separately on different machines, each on its own secure hardware. There is no moment when a complete private key exists to be stolen.
2. A threshold is set. The bank decides how many shares must participate — 2 of 3, or 5 of 7, for example. Fewer than that cannot sign anything.
3. Policies are checked first. Before signing, a policy engine checks the transaction against rules the bank sets: spending caps, approved destination addresses, sign-offs from several departments. Google says these checks run in Confidential Space, a locked-down computing environment that keeps even the cloud operator from peeking inside.
4. The shares sign together. Enough shareholders cooperate to produce one valid signature. The full key is never assembled, and the transaction goes out.

One honest caveat, straight from Google's own documentation: the automated policies give a verdict but do not enforce it. A transaction the policies deny can still go through if enough signers approve it. The policy layer is a guardrail, not a lock — the threshold is the lock.

4. The Timeline: From Quiet August Preview to a 2027 Launch

Google MPC did not appear overnight. Its release notes show steady development since August 2026, and the public reveal was the end of a three-month quiet build:

Date	What happened
August 20, 2026	Curve25519 key generation and signing added to the service's release notes
October 1, 2026	Bitcoin transaction rules expanded (spending amounts, change outputs, address types); distributed Schnorr signatures with standard Ed25519 hashing added
October 15, 2026	Sign-in through a company's existing identity system added
October 27, 2026	Google's product documentation last updated before the reveal; Solana listed as "coming soon" for Ed25519 signing
October 28, 2026	Public reveal at Google's first digital assets symposium in New York; Alphabet's own ETH and SOL use disclosed
Early 2027 (target)	General availability, per a Google Cloud spokesperson — pricing still undisclosed

The pace is the tell. In roughly ten weeks, Google went from key-generation plumbing to a public bank-facing product with its own parent company as a live user. That is not a research project. That is a product team shipping.

5. Which Chains Win First — and Why Solana Is Still "Coming Soon"

Google MPC supports two signature types at general availability, and the split between them decides which coins banks can hold first:

Signature type	Chains it covers	Status
ECDSA	Bitcoin, Ethereum and other EVM-compatible chains	Available now in preview
Ed25519 (EdDSA)	Solana	Listed as "coming soon" in Google's docs

There is a visible contradiction here, and it is worth stating plainly. Google told CoinDesk that Alphabet has begun using the system on Solana — yet Google's own documentation still marks Solana support as "coming soon." The most likely reading is that Alphabet is running an early internal build while the public Solana integration is still being finished. Either way, the direction is clear: Solana Compass noted that Google has said both signature types will be supported at general availability, so the gap is a matter of months, not a design decision.

For Ethereum, the implication is more immediate. ETH is already covered by the live ECDSA path, and it is one of only two chains Alphabet is confirmed to hold through the system — putting Ethereum, trading near $2,428 after a 6.6% jump on November 4, at the front of the institutional custody queue. If you want the longer view on where ETH could go from here, see our Ethereum price prediction for 2027. For Solana, the story is "almost": the chain just set a record with 3.4 billion successful transactions in October, yet its price sits near $95, some 67% below its $293 all-time high — and Google's full support is still weeks or months away.

Neither fact is a reason to buy or sell anything on its own. But together they explain why analysts are asking whether Google's move is a reason to buy Ethereum or Solana: custody is the bottleneck that has kept cautious institutions on the sidelines, and Google is now removing it, chain by chain.

6. Google Is Not Alone: MPC vs the Custody Incumbents

Google is entering a market that already has specialists. Fireblocks, BitGo and Fordefi already sell MPC custody to institutions, and they have years of production history Google does not. Here is how the new entrant compares:

	Google MPC	Fireblocks / BitGo / Fordefi	Traditional cold storage
Key model	Key never assembled; shares across clouds	Key never assembled; shares across their network	One whole key, guarded in a vault or HSM
Who holds a share	Bank, Google Cloud, rival cloud	Customer and vendor infrastructure	The custodian alone
Thresholds	Configurable, e.g. 2-of-3, 5-of-7	Configurable	Usually 1 key, sometimes multisig
Policy checks	Confidential Space engine; advisory, not enforcing	Policy engines with enforcement options	Manual approvals
Chain coverage at launch	BTC, ETH, EVM now; SOL coming soon	Broad, dozens of chains	Broad
Track record	Private preview since 2026; GA early 2027	Years in production	Decades
Biggest advantage	Scale, cloud reach, Alphabet as user zero	Depth of crypto-native experience	Simplicity, proven over time

Google's edge is not the cryptography — the incumbents use the same ideas. It is distribution. Google Cloud already runs inside the banks it wants to sell to, so a bank can add crypto custody without a new vendor, a new integration, or a new security review. That is the pitch that should worry the incumbents.

The incumbents' edge is equally real: they have survived real attacks, real outages, and real market crashes with client funds intact. Google's service is still in preview, offered under pre-release terms, "as is," with possibly limited support. No bank will move its full treasury to a preview product. The honest timeline is a slow one: pilots in 2027, meaningful balances later.

7. Google's Other Blockchain: The $30 Trillion Payments Play

MPC is only half of Google's crypto strategy. The other half is the Google Cloud Universal Ledger (GCUL), a permissioned Layer-1 blockchain built for financial institutions, unveiled in March 2026 alongside CME Group, which is testing it for tokenization and wholesale payments.

GCUL is not a public crypto chain. It is a closed network for approved institutions, running Python-based smart contracts — a deliberate choice, since bank developers work in Python, not Solidity — and settling using native commercial bank money rather than a new token. Its design eliminates pre-funded accounts through multilateral netting: instead of Bank A parking funds at Bank B before a transaction can settle, GCUL offsets claims across all participants first.

The numbers explain the ambition. Stablecoin transactions reached $30 trillion in 2024 — more than PayPal's $1.6 trillion and Visa's $13 trillion combined. CME Group has reported a 30% reduction in collateral settlement costs in its GCUL pilot. And on October 16, 2026, Jack Henry & Associates — the core banking software provider for more than 7,200 community and regional banks and credit unions — announced it had integrated with GCUL, opening tokenized deposit capabilities to institutions that had watched large-bank experiments from the sidelines. TechTimes covered the Jack Henry integration: unlike stablecoins, tokenized deposits remain liabilities of the issuing bank and are expected to carry FDIC insurance as conventional deposits do.

Put the two products together and Google's strategy snaps into focus. GCUL moves the money; MPC secures the keys. One is the rails, the other is the vault. Google is not betting on a coin. It is betting on becoming the infrastructure every bank uses when crypto becomes ordinary banking — and it is building both halves at once.

What Most People Get Wrong About Google and Crypto

The announcement has already generated confusion. Here is what is true, and what is not:

• Myth: Google launched a coin or a wallet you can download. False. Google has announced no token, no airdrop, and no consumer wallet. MPC is an institutional custody platform, in private preview, for banks. Any "Google coin" offer you see is a scam — treat it that way.
• Myth: Google entering crypto means your coins are safer automatically. False. Google MPC protects institutions that buy it. Your own holdings are protected by your own setup — and nothing in this announcement changes that. If you hold crypto yourself, the basics still decide everything: see our guide to the best crypto wallets in 2026, compared after the $6.3 billion Binance hack.
• Myth: MPC makes hacks impossible. False. It removes the single point of failure — one stolen key no longer empties the vault. But thresholds can be misconfigured, insiders can collude, and, as Google's own docs admit, a denied policy can be overridden by enough signers. Security gets much better; it does not become perfect.
• Myth: This is a bet on Ethereum or Solana specifically. Partly false. Alphabet holds both, and both benefit from institutional-grade custody. But Google's product is chain-agnostic by design — Bitcoin, Ethereum, EVM chains, and soon Solana. Google is betting on the asset class, not on a horse.
• Myth: Banks will switch overnight. False. The service is in preview, pricing is undisclosed, and banks move slowly. The realistic path is pilots through 2027, with real balances following only after the product proves itself in production.

What This Means for Your Crypto: A 5-Point Checklist

Google MPC will not touch your personal wallet. But the announcement still changes the landscape you invest in. Use this checklist:

1. Watch the early-2027 launch date. If Google hits general availability on schedule and names launch partners, that is the moment institutional custody stops being a talking point and starts being a product. If it slips, read it as a signal about how hard banks still find this.
2. Watch Solana's "coming soon" label. When Ed25519 signing leaves preview, Solana joins the same institutional custody tier as Bitcoin and Ethereum. Until then, the gap is real.
3. Ignore every "Google crypto" airdrop or token. Google has announced none. Scammers move faster than product teams — the announcement itself is the bait. Never connect your wallet to anything claiming to be Google's crypto launch.
4. Re-check your own custody before envying the banks. Institutions are buying key-splitting because one key is one failure. Your setup deserves the same logic: a hardware wallet for size, a separate hot wallet for spending, and no seed phrase ever stored online. Our 10 checks for buying Bitcoin safely after the Binance hack walk through the full routine.
5. Do not buy ETH or SOL on this news alone. Both coins rose with the broader market on November 4 — ETH up 6.6% to about $2,428, Bitcoin reclaiming $80,000 — and the custody story is one small part of that move. A product in preview, launching in months, does not set a price today. If you are considering Ethereum specifically, start with our beginner's guide to buying Ethereum and the Bitcoin vs Ethereum comparison for 2026.

What Happens Next

Three dates decide whether this becomes a footnote or a turning point. First, the early-2027 general availability window: Google must ship on time and name real bank customers. Second, the Solana Ed25519 launch: the "coming soon" label has to disappear for the multi-chain promise to be real. Third, the first public proof of scale — a named bank, a disclosed balance, a pilot that becomes production. Until those arrive, the honest summary is this: the world's biggest cloud company has built the vault, tested it on its own money, and invited the banks in. The banks have not walked through the door yet.

Frequently Asked Questions

What is Google Multi-Party Compute (MPC)?

Google MPC is a Google Cloud custody platform for institutions that protects the cryptographic keys used to sign digital asset transactions. Instead of one complete private key, it creates separate key shares held by different parties, and a configurable threshold of shareholders — for example 2 of 3 or 5 of 7 — must cooperate to sign. The full key is never assembled anywhere.

When will Google MPC be available?

The service is in private preview as of late October 2026, with several large financial institutions testing it. Google has said it targets general availability in early 2027. No exact date or pricing has been disclosed.

Does Google MPC support Bitcoin, Ethereum and Solana?

At general availability, Google says it will support ECDSA signing (used by Bitcoin, Ethereum and other EVM chains) and Ed25519 signing (used by Solana). ECDSA is available in preview now; Solana is still listed as "coming soon" in Google's documentation, even though Alphabet has begun using the system on Solana.

Is Google launching its own cryptocurrency or wallet?

No. Google has announced no token, no airdrop, and no consumer wallet. Google MPC is an institutional custody service for banks and financial firms. Any offer claiming to be a Google coin or a Google crypto airdrop is a scam.

What is the Google Cloud Universal Ledger (GCUL)?

GCUL is a separate Google Cloud product: a permissioned Layer-1 blockchain for financial institutions, running Python-based smart contracts and settling in native commercial bank money. CME Group is testing it for tokenization and wholesale payments, and Jack Henry integrated it in October 2026 to bring tokenized deposits to more than 7,200 community banks and credit unions. MPC secures the keys; GCUL moves the money.

Conclusion

Google did not buy Bitcoin. It did something quieter and arguably more important: it built the vault, used it on its own Ethereum and Solana holdings, and offered it to the banks. The $6.3 billion Binance hack showed what happens when custody fails; the $30 trillion in stablecoin volume shows what is at stake when it works. Between those two numbers sits Google MPC — a preview product with a 2027 launch date, a "coming soon" label on Solana, and the largest cloud company on earth behind it. Watch the launch date, watch the Solana label, and ignore the scams. The vault is real. The door is not open yet.