Crypto's answer to key theft is not self-custody; control just moved.加密货币对密钥被盗的答案不是『自己做自己的银行』;控制权只是换了位置。

At its first digital-assets symposium in New York today, October 28, Google previewed Multi-Party Compute: a private key is split into shares spread across Google Cloud, a bank's own hardware, and rival clouds, while a policy engine decides which transactions can sign. Alphabet already runs it on its own holdings, several large financial institutions are in private preview, and commercial access is set for early 2027.
The pitch is that this removes the single point of failure: the one stored key that, by the figures Google cited, accounted for 43.8% of all crypto stolen in 2024 and about 40% of the $16.69 billion lost to hacks through June. That part is real. A split key is harder to steal than a whole one.
But a single point of failure is not the same as a single point of control. The control moved. What decides whether value leaves a wallet is no longer a key in a vault; it is the policy engine, whoever writes its rules, and the clouds that must stay online for a signature to clear. Crypto was sold as removing the trusted third party. For institutions, the trusted third party did not vanish. It became the firm that runs the key-management layer.
For anyone building leverage, the pattern repeats: the security layer, not the asset, is where power concentrates. Watch who writes the signing policy.
This is wrong if the shipped systems let no single provider, Google included, block or force a signature, with governance that is provably distributed. The early-2027 terms will show which it is.
Research, not investment advice.
10 月 28 日,Google 在纽约举办首届数字资产峰会,预览了 Multi-Party Compute(多方计算,MPC):一把私钥被拆成若干份密钥分片,分别存放在 Google Cloud、机构自有硬件和竞争对手的云上,由一个策略引擎来决定哪些交易可以签名。Alphabet 已经用它来保管自己的数字资产,多家大型金融机构在私有预览中,商用将在 2027 年初开放。
它的卖点是:这消除了单点故障——那把被存起来的完整私钥。按 Google 援引的数据,2024 年被盗加密资产中有 43.8% 源自私钥泄露,截至今年 6 月约 166.9 亿美元的被黑损失里约 40% 来自私钥被攻破。这部分是真的:拆开的密钥确实比完整的一把更难被盗。
但『没有单点故障』不等于『没有单一控制点』。控制点只是挪了位置。决定资产能不能离开钱包的,不再是保险库里的那把钥匙,而是策略引擎、编写策略规则的人,以及必须保持在线、签名才能完成的那些云。加密货币当初卖的是『去掉可信第三方』。对机构而言,可信第三方并没有消失,它变成了运行密钥管理层的那家公司。
对任何想建立杠杆的人,这个规律一再重复:权力集中的地方是安全层,而不是资产本身。要盯的是谁在编写签名策略。
如果最终落地的系统做到任何单一方(包括 Google)都无法阻止或强制一次签名、且治理可被证明是分布式的,这个判断就该修正。2027 年初的实际条款会说明它是哪一种。
研究,不构成投资建议。
Sources来源
Add WAKENEX as a preferred source on Google在 Google 把 WAKENEX 设为首选来源


