Blockstream And Thales Put Bitcoin Signing Inside HSMs
Blockstream, the Bitcoin infrastructure firm led by co-founder and CEO Adam Back, has launched an enterprise custody solution developed with French technology and cybersecurity group Thales, according to a company announcement on Nov. 13, 2026.
The product is delivered through Blockstream Enterprise and builds on a two-year relationship between the two firms. It combines Thales’ hardware security modules (HSMs) with Blockstream’s Secure Multi-Party Computation, or Secure-MPC, technology.
MPC spreads signing authority across several parties so that no single person or device controls the private key. Blockstream says its system executes the signing protocol entirely within the HSM’s secure environment, while conventional MPC solutions may expose parts of the process to general-purpose computers that are easier to attack.
Why Moving MPC Inside The HSM Changes The Attack Surface
The architecture also uses FROST, a threshold signing protocol that lets multiple authorized parties jointly produce a signature without ever reconstructing the full private key.
“By moving MPC execution inside the HSM, this architecture addresses critical security risks,” said Jeff Boortz, Blockstream’s chief product officer.
The mechanism matters because the signing step is where bitcoin can be stolen. If the key material and the signing computation stay inside a sealed device, a compromised laptop or server has far less to work with.
Back told Cointelegraph that conventional MPC protocols are often too complex and require too much communication between devices to be practical for fully offline cold storage.
“When people talk about MPC, they’re talking about some very esoteric and complicated protocols that are hard to secure and are very interactive. So you can’t really use them in a cold storage setting,” Back said.
The Binance Hack That Exposed People And Laptops
The launch comes just two weeks after hackers stole about $6.3 billion from Binance, an attack the FBI attributed to North Korea. The weak point was not the blockchain but people and connected computers.
Binance said attackers staged fake job interviews and planted malware in a coding assignment downloaded onto an engineer’s work computer. The campaign included a June 2026 incident in which a wallet engineer downloaded a tampered installer while looking for an AI coding tool.
By Oct. 20, 2026, the attackers had used a compromised computer and an internal AI tool to break into the machines of two more employees working on Binance’s wallet infrastructure, according to BleepingComputer, obtaining credentials and a container deployment token.
That chain of events is exactly what hardware-based Bitcoin custody is designed to stop. If signing keys never leave a sealed device, a hacked laptop is far less useful to an attacker.
Blockstream’s Own Liquid Network Lesson
Blockstream knows the stakes firsthand. In September 2026, its Liquid Network sidechain was drained of nearly 4,000 BTC through a software bug, with the attackers returning 3,400 BTC after the flaw was patched.
Back, the cryptographer whose Hashcash system helped lay the groundwork for Bitcoin’s proof-of-work, has long championed offline key storage. Blockstream already builds hardware wallets and HSMs for cold storage, alongside enterprise wallets for custodians.
The broader industry is moving in the same direction. Thales has also expanded its work with Fireblocks to keep signing operations inside customer-owned HSMs at banks and regulated institutions.
Institutions Need Custody That Matches Their Operations
For institutions, security is the gatekeeper. Banks and asset managers cannot hold bitcoin at scale without custody that meets the same standards as the rest of their operations.
“Financial institutions require secure, reliable infrastructure as they integrate bitcoin into their existing operations,” said Michael Minkevich, Blockstream’s president and chief operating officer.
That demand has been building since spot Bitcoin ETFs became top performers after their 2024 launch, pulling Wall Street deeper into the asset. Stronger custody options make it easier for the next wave of institutions to follow.
Bitcoin Trades At $64,118 As Custody Builds
The market itself is under pressure. Verified live data shows BTCUSDT at $64,118.79, down 6.16% on the day, as of 2026-11-14T00:00:00Z.
Other major tokens were weaker still: ETHUSDT at $1,768.41, down 8.29%; XRPUSDT at $0.914, down 9.51%; and SOLUSDT at $70.25, down 10.06%.
Behind the price action, the infrastructure that will hold the next wave of institutional bitcoin keeps getting stronger. The pitch from Blockstream and Thales is straightforward: keep the most sensitive part of moving bitcoin, signing transactions, locked inside dedicated security hardware where hackers cannot reach it.
What To Watch In Custody And Flows
Watch whether Blockstream Enterprise discloses named institutional clients for the Thales HSM system, and whether Thales’ Fireblocks work expands to more banks. On the market side, the level to hold is the $64,118 area; a sustained move below it would keep pressure on the custody narrative, while a recovery would test whether hardware-first security is enough to bring institutions back.
Sources: rss_autopost