Google's Multi-Party Compute buys stronger key security at one new dependence.谷歌的 Multi-Party Compute 用更强的密钥安全,换来一项新的依赖。

Your coins now move only when Google's cloud agrees to sign. That is the trade worth seeing.
Unveiled October 28 at Google's first MPC symposium in New York, the service splits a private key into fragments held on separate systems, so no single breach hands over the whole key. That part is real security. Alphabet already runs its own Ethereum and Solana holdings on it, general availability is slated for early 2027, and the target is clearly Fireblocks and BitGo.
But splitting the key does not remove the dependence; it relocates it. The fragments, the signing coordination, and the machines all sit inside one cloud. The failure you engineer out is a hacker stealing the key. The failure you engineer in is the vendor declining to sign: an outage, a compliance hold, a jurisdiction. The single point of failure moved from your attacker to your supplier.
The custody layer of money that was supposed to need no trusted third party is consolidating into the same hyperscalers that already run traditional finance. Alphabet securing its own coins on its own product is the tell.
So before adopting it, price the trade: can you keep a decisive fragment, or the signing quorum, off Google and migrate without its cooperation? If not, you swapped theft risk for vendor risk. We would revise this if Google's general-availability terms let institutions hold a decisive fragment outside its cloud and migrate at low cost.
Research, not investment advice.
你的币,从此只有在谷歌的云同意签名时才动得了。这就是值得看清的那笔交易。
这项服务 10 月 28 日在谷歌于纽约举办的首届 MPC 峰会上亮相,它把一把私钥拆成若干碎片、分存在不同系统上,于是任何单次入侵都拿不到完整的钥匙。这一部分是实打实的安全。Alphabet 已经用它来保管自己持有的以太坊和 Solana,正式商用预计在 2027 年初,目标直指 Fireblocks 和 BitGo。
但把钥匙拆开并没有消除依赖,只是把依赖搬了个地方。碎片、签名的协同、以及那些机器,全都待在同一朵云里。你设计掉的故障,是黑客偷走钥匙;你设计进来的故障,是供应商拒绝签名:一次宕机、一道合规冻结、一个司法管辖区。单点故障,从你的攻击者挪到了你的供应商。
本该不需要任何可信第三方的货币,它的托管层正在向那些早已承载传统金融的超大云厂商集中。Alphabet 把自己的币放在自己的产品上保管,就是那个信号。
所以采用之前,先给这笔交易定价:你能不能把一个有决定权的碎片、或者签名的法定人数留在谷歌之外,并在不需要它配合的情况下迁走?如果不能,你只是把被盗风险换成了供应商风险。如果谷歌正式商用的条款允许机构把一个有决定权的碎片留在它的云之外、并低成本迁移,我们会修正这个判断。
研究,不构成投资建议。
Built on the WAKENEX concept:所用的 WAKENEX 概念: From possibility to trade-off从可能到取舍
Sources来源
Add WAKENEX as a preferred source on Google在 Google 把 WAKENEX 设为首选来源


