Cryptoupdated 12m ago2 min read
Blockstream Launches Thales Bitcoin Custody With Offline Signing Inside HSMs
8outlets comparedWhere the coverage agrees
4 Western Alternative3 Other1 West AsianThis article is an automated aggregation of coverage from news outlets. Our editorials offer in-depth analysis curated by the NewsCord team.
Blockstream and Thales launch custody that signs inside Thales hardware security modules. The system pairs Thales HSMs with Blockstream's Secure-MPC to execute signatures for institutions.
Save coverage image
8 outlets in this story. Read their headlines below.
Offline signing inside HSMs
Blockstream launched an institutional Bitcoin custody system with France's Thales that keeps the entire transaction-signing protocol inside Thales hardware security modules, paired with Blockstream's Secure-MPC technology. Adam Back said the design is meant to narrow exposure of keys to networked systems by executing the full signing sequence within the HSM's protected environment rather than distributing signing pieces across machines outside hardened hardware.
Back argued that conventional MPC protocols are too complex and interactive for fully offline cold storage, and he linked the custody question to the Binance breach as a precedent for how connectivity can turn internal systems into reachable targets. Back said, "If you connect equipment to the internet, even if it's via firewalls and so on, there is risk that you can get unauthorized access," and he warned that attackers could obtain logins they should not have.
Binance breach and AI
Back pointed to Binance's investigation of a $6.3 billion hack, saying attackers compromised employee devices and obtained credentials that gave them access to the exchange's wallet-signing infrastructure. Back also argued that artificial intelligence could sharpen the threat by helping attackers find subtle implementation flaws in complex cryptographic setups.
Back said, "The AIs can help attackers find small implementation errors and things like that, which may not be obvious," as he tied AI-assisted discovery to the difficulty of securing elaborate MPC implementations. Back urged institutions to move holdings into cold storage, and he summarized his position by saying, "Complexity is the enemy of security," and recommending that institutions "just cold-store it."
What the launch changes
Blockstream described the custody architecture as a trade-off that reduces the number of components an intruder could reach through a misconfiguration or a stolen credential by confining the protocol to the HSM. Coin Edition said Blockstream's architecture carries out the full signing protocol inside the HSMs' protected environment, contrasting it with conventional MPC implementations that may perform parts of signing outside dedicated security hardware.
Crypto Briefing said the system is aimed at custodial banks, prime brokers and other institutional users, and it described Blockstream Enterprise support for air-gapped setups and multisignature systems. Crypto Briefing said the practical test will be integration, including whether the architecture holds its security boundaries once plugged into real trading, settlement and treasury workflows, and whether clients accept the operational constraints of keeping signing inside dedicated hardware.