Blockstream and Thales Ship Hardware-Locked Bitcoin Custody for Institutions

Blockstream and French technology group Thales launched a joint institutional Bitcoin custody system on Friday, November 13, 2026, built around a single design principle: private keys never leave certified hardware. The product pairs Thales hardware security modules with Blockstream's Secure Multi-Party Computation technology, branded Secure-MPC, so that institutions can approve transactions while sensitive key material stays sealed inside dedicated hardware.

The architecture deserves a close look, because the design choice is unusual. In a typical MPC deployment, key shares may touch general-purpose servers at some point in the signing workflow. Blockstream says that here the entire transaction signing protocol runs inside the Thales HSMs. Private keys and MPC key shares never cross the hardware boundary during signing.

Under Secure-MPC, signing authority is split into shares rather than held as a single private key. Several parties cooperate to produce a valid signature, and no single share is sufficient to move funds. The target buyers are custodial banks, prime brokers and other institutional holders. The feature set includes policy controls, segregated accounts, multisignature options and cryptographic audit trails. Blockstream Enterprise also supports several signing models, including air-gapped setups.

Why offline signing, and why now?

Blockstream co-founder Adam Back has spent months arguing for simpler, offline security models, and the timing of the launch reflects that campaign. His case cuts against a common industry instinct that more layers of software equal more protection. Fewer moving parts mean fewer openings, Back argues, and keeping the most sensitive operations inside purpose-built hardware removes whole categories of remote attack.

The AI angle gives the argument urgency. If attackers can use AI tools to find vulnerabilities faster, scan code at scale, or craft more convincing phishing campaigns, then software-heavy security stacks become harder to defend. Hardware isolation does not care how clever a phishing email is.

What does this change for institutional custodians?

For banks and prime brokers holding Bitcoin for clients, the question is operational risk, not price direction. These institutions must show regulators and auditors precisely how keys are protected. A system where keys never leave certified hardware, with cryptographic audit trails built in, maps directly onto that compliance requirement. Blockstream's research materials frame the launch as a way to build trust with institutional investors who hesitated over security concerns.

The product also did not arrive alone. Blockstream's broader Enterprise custody and tokenization services entered beta with select private clients in Q3 2026, roughly one quarter before this launch. Combined with the asset issuance tools already available on the Liquid Network, Blockstream is assembling a single-provider stack where an institution could custody Bitcoin and issue tokenized assets through one vendor relationship rather than several.

The company presented the full security architecture at the Digital Assets Forum in New York on the same day as the announcement.

The Blockstream backdrop

Blockstream was co-founded by Back in 2014 and has consistently focused on Bitcoin-native infrastructure rather than expanding across other chains. Its best-known enterprise product, the Liquid Network — a Bitcoin sidechain built for faster settlement and digital asset issuance — recently passed more than $3 billion in total value locked, a measure of assets held on the network. The company also opened a new office in Lugano in late 2026.

For custody desks and compliance teams, the practical takeaway is that hardware-bound MPC is now a purchasable, off-the-shelf option rather than a bespoke engineering project. Whether banks choose to buy it from Blockstream or pressure incumbents to match the isolation guarantee, the benchmark for institutional key protection has shifted. Expect the competitive response from established custody providers to define the market over the next several quarters.