Secure Multi-Party Computation (SMPC or MPC) is a cryptographic technique that enables multiple parties to jointly compute a function over their private inputs without any party revealing their individual data to others.
In the context of cryptocurrency, MPC is most prominently used in “MPC wallets” and institutional custody solutions – where signing authority is distributed across secret shares held by different parties or devices, and cryptographic signing occurs as a collaborative computation without the full private key ever existing in one place.
This reduces the risk from a single compromised share, but security still depends on the protocol, thresholds, recovery design, and implementation. (Source: crittografia a soglia NIST)
MPC Key Management
Traditional single-key wallet: A private key authorizes transactions. If that key is compromised, an attacker may be able to spend the funds it controls; protection depends on how the key is stored and used.
Illustrative 2-of-3 MPC wallet: three parties or devices hold separate signing shares. Distributed key generation can avoid constructing the complete key. Actual wallet designs vary.
Any two authorized parties jointly generate a valid signature in this example. One share alone is insufficient to sign; collusion, malware, or recovery failures can still compromise the wallet.
MPC in Crypto: Applications
| Applicazione | How MPC Is Used | Esempio |
|---|---|---|
| Custodia istituzionale | Key shares across geographic regions | Fireblocks, Copper.co |
| Consumer MPC wallets | Threshold signing; exact design varies | Zengo (two-party signing) |
| DAO multi-sig alternative | MPC threshold signing vs. Gnosis Safe | Perdefi |
| Sicurezza DeFi | Protocol admin key management | Protocolli multipli |
| Exchange key management | Signing infrastructure | Binance, major exchanges |
Ottieni la carta UPay Crypto
Scopri il meglio dei pagamenti online e delle transazioni crittografiche senza interruzioni.
RegistratiMPC vs. Multi-Signature (Multisig)
| Caratteristica | Multisig (for example, Safe) | MPC |
|---|---|---|
| Impronta sulla catena | Often visible; some aggregated-signature designs conceal it | Appears as standard single-sig |
| Costo del gas | May be higher, depending on chain and implementation | Standard (single signature) |
| Privacy | Multisig structure revealed | Threshold signature can resemble an ordinary signature; other metadata may reveal the setup |
| Key existence | Full keys exist at each signer | Key shares only; full key never assembled |
| Contratto intelligente richiesto | Common on EVM chains; native and aggregated designs also exist | Not necessarily; requires a signature scheme supported by the chain |
| Compatibilità catena | Chain-specific implementations | Depends on supported signing algorithms and integrations |
FAQ
Q: Is an MPC wallet self-custodial?
A: It depends on who can sign, veto transactions, and recover access. Zengo uses a two-of-two signing model with a personal share and a server share, not a two-of-three wallet. Its three-factor recovery process is separate from the signing threshold. Review provider-dependency and recovery arrangements before treating an MPC wallet as self-custodial. (Source: Berkeley MPC study)
Q: How secure is MPC compared to traditional wallets?
A: MPC can reduce the risk that one stolen key share compromises a wallet. It is not automatically safer than every single-key or multisignature arrangement: security also depends on software, authorization policies, share independence, backups, and recovery procedures.
Q: What happens if one MPC share is lost?
A: In a two-of-three design, two usable shares can still sign after one is lost. Other thresholds behave differently. Zengo’s recovery restores the personal share using its recovery process; it is not an example of a spare third signing share. (Source: NIST threshold security criteria)
Termini correlati
· Fireblocks
· Key Management
Conclusione
Secure Multi-Party Computation (SMPC) can distribute signing authority, but security depends on the threshold, implementation, and recovery design. Check those details before relying on a wallet’s marketing claims.
Per approfondire, consultate UPay: Sicurezza della chiave privata; Tipi di portafogli di criptovalute; L'autocustodia: una spiegazione









