Blockstream has launched a new institutional custody system for Bitcoin, developed together with French technology group Thales and announced on Friday, November 13, 2026. The product pairs Thales hardware security modules (HSMs) with Blockstream's own Secure Multi-Party Computation technology, and its core idea is deliberately old-fashioned: keep the keys away from the internet. The pitch is that institutions can approve transactions while sensitive key material stays sealed inside dedicated hardware. Thales, whose operations span defense, aerospace, and digital security, is one of the established suppliers of HSMs — tamper-resistant devices banks have long used to safeguard cryptographic keys and payment infrastructure.

The timing is deliberate. Blockstream co-founder Adam Back has been arguing for simpler, offline security models, especially as AI-assisted cyberattacks become a growing worry for any organization holding Bitcoin at scale.

How the system works

Secure Multi-Party Computation, which Blockstream brands as Secure-MPC, adds another layer of protection. Instead of relying on a single private key, the signing authority is split into shares. Several parties must work together to produce a valid signature, and no single share is enough to move funds. In such a scheme, the complete key is never reassembled in any single location, so a compromise of one participant or component on its own cannot expose the funds.

The notable design choice is where the signing happens. Blockstream says the entire transaction signing protocol runs inside the Thales HSMs rather than in surrounding software. That means private keys and MPC key shares never cross the hardware boundary during signing.

The system is aimed at custodial banks, prime brokers, and other institutional users. Features include policy controls, segregated accounts, multisignature options, and cryptographic audit trails. Blockstream Enterprise supports several signing models, including air-gapped setups and multisignature systems. For buyers weighing the trade-offs, the offline orientation maps onto the familiar industry split between 'cold' storage, where keys sit off networks at the cost of slower access, and 'hot' wallets, which give up some isolation in exchange for faster transfers.

Part of a broader enterprise push

The custody launch did not arrive on its own and forms part of a wider push into enterprise services. Blockstream's Enterprise custody and tokenization services are in beta with select private clients, a program that opened in the third quarter of 2026. The company walked through the full security architecture at the Digital Assets Forum in New York on the same day as the announcement.

Blockstream was co-founded by Back in 2014 and has long focused on Bitcoin-native infrastructure rather than chasing other chains. Its best-known enterprise product is the Liquid Network, a Bitcoin sidechain built for faster settlement and the issuance of digital assets. Liquid recently passed more than $3 billion in total value locked, a measure of the assets held on the network. The company has also been growing its footprint, with a new office opened in Lugano in late 2026.

Why simpler security is the selling point

Back, a cryptographer by training, argues against a common industry instinct that often favors layering software defenses. His case is that fewer moving parts mean fewer openings. Keeping the most sensitive operations offline, inside purpose-built hardware, removes whole categories of remote attack.

The AI angle gives that argument new urgency. If attackers can use AI tools to find vulnerabilities faster, scan code at scale, or craft more convincing phishing, then software-heavy security becomes harder to defend. Hardware isolation, by contrast, does not care how clever a phishing email is.

What this means for institutions and the custody market

For institutions, the question is less about Bitcoin's price and more about operational risk. Banks and prime brokers that hold Bitcoin on behalf of clients need to show regulators and auditors exactly how keys are protected. A system in which keys never leave certified hardware, with audit trails built in, speaks to that requirement directly. And because the institutional custody market now spans both crypto-native specialists and traditional financial infrastructure providers competing for the same mandates, the underlying key-management architecture has become a central point of institutional due diligence.

Blockstream's research materials frame the launch as a way to build trust with institutional investors who may have hesitated over security concerns.

The pairing with tokenization services is also worth watching. Combined with Liquid's existing asset issuance tools, Blockstream is assembling a stack in which an institution could custody Bitcoin and issue tokenized assets through a single provider.

Source: CryptoBriefing