MPC Wallet: How Keyless Self-Custody Is Changing Crypto Wallet Security

The Self-Custody Tradeoff

One of the most distinct concepts introduced by crypto is self-custody, allowing users to hold digital assets in personal wallets without the need for a bank, broker, or exchange. Traditionally, this practice commonly relied on seed phrases or individual private keys, which are written down and stored. Self-custody is not without downsides, however. Gaining access to a user’s private keys can grant access to any assets held in the wallet. Similarly, if the user loses access to their seed phrase, the wallet may be unrecoverable. Alternatively, users can store assets on custodial platforms such as exchanges. While these platforms offer a familiar login process and enable better recovery, there is a tradeoff cost of trusting them with the users’ assets. 

The drawbacks of seed-phrase-based self-custody were made strikingly clear in July 2026 when Coinkite disclosed an entropy weakness affecting seeds created with certain Coldcard wallet firmware. This effectively allowed attackers to regenerate and compromise Coldcard seed phrases and access users’ wallets without physically obtaining the device. As of writing, the total value lost from this attack is up to $130 million. The incident illustrates how a flaw in the generation of a wallet’s root secret can undermine otherwise careful storage practices. Many Coldcard users followed self-custody best practices, but the seed phrase had been weak from the moment the wallet was created.

MPC wallets are an attempt to minimize these risks. MPC wallets distribute the signing process across multiple shares or systems. Depending on the wallet’s policy design, those shares may require separate human approvals. This provides major benefits, such as reducing reliance on a single point of failure. In properly designed MPC systems, compromise of a single, independently stored key share is not enough to move funds. 

How MPC Wallets Work 

Traditional crypto wallets generate an individual key that controls transaction authority and proves ownership. MPC wallets distribute the signing capability across key shares held in separate environments. When the required number of shares participate in the protocol, the system produces a valid signature without needing to reconstruct the complete private key. A common 2-of-3 structure lets any two authorized participants sign while preventing any one of them from acting alone. MPC wallets also allow better recovery mechanisms compared to seed-phrase wallets. For example, shares can be rotated or reissued when a user changes devices or loses access. If a seed phrase wallet user needed to rotate to a new wallet, they would also lose the wallet's onchain address and transaction history.

MPC wallets are not to be confused with multisigs. A multisig requires individual keys, and transactions carry multiple signatures, so not all applications are able to support this kind of use. MPC wallets coordinate authentication offchain while producing one ordinary signature onchain. This makes it broadly compatible with all applications. 

While MPC wallets help minimize seed phrase risk, they do not eliminate it completely. Users of MPC wallets are still susceptible to phishing, malicious approvals they sign unknowingly, compromised devices, and bugs in the wallet software. Furthermore, there is additional consideration of who controls which MPC share and ultimately who can sign and recover the wallet assets. 

Binance Wallet as a Case Study

As decentralized applications grow, the need for secure and recoverable wallet solutions rises alongside them. This year, the growth of spot DEX trading relative to centralized trading has accelerated, with DEX volumes averaging more than $120 billion. The DEX-to-CEX ratio has risen to 33% in August, with a significant share authorized by users through self-custody wallets such as Binance Wallet.

Binance Wallet adopts MPC architecture by default, offering users the choice of keeping balances on the custodial exchange or moving select assets into a self-custody wallet while retaining control over their assets. The wallet leverages MPC to split signing authority across three key shares. The wallet uses a 2-of-3 design, meaning two shares must participate to authorize a transaction. 

Under the wallet’s intended security model, compromise of a single, independently stored key share is not sufficient on its own to authorize a transaction. If a user loses access to their device, Binance Wallet’s backup and recovery mechanism can help the user regain access to the wallet.. Additionally, Binance Wallet includes wrong-address protection, warnings for potentially malicious smart contracts, and alerts when tokens or networks present identified risks.

Separately, the Binance Wallet browser extension underwent a third-party security audit by SlowMist. Within the scope of the browser extension audit, no critical vulnerabilities were identified, and the audited version received an overall “Low Risk” rating. The identified issues were either remediated or acknowledged for future improvement.

By wallet trading volume, Binance Wallet has amassed a dominant 75% market share driven by a wide offering of products representing more than $13 billion daily. Among other top wallets such as Phantom, MetaMask, and Rabby, Binance Wallet uses MPC as its default architecture. As a result, a significant share of the trading activity conducted through the wallet benefits from an MPC-based signing model designed to reduce the risks associated with compromise of a single key share, ultimately making for a safer environment for crypto users. 

Strategic Outlook

The adoption of decentralized applications is moving wallet security away from a model in which one secret controls everything. Advances in cryptography and wallet infrastructure are empowering users to demand more sophisticated recovery, security, and transaction-protection features.

• Simplified Recovery: Replacing a lost device must be resilient enough to prevent permanent loss while remaining hard enough to defeat an attacker attempting account takeover.
• Defined Control Boundaries: Wallet providers should clearly explain how key-share control, transaction approval, and recovery responsibilities are structured. These boundaries help users understand the circumstances under which a provider may participate in recovery or otherwise affect wallet access.
• Transaction Protection: Owning the wallet does not make every signature safe. Additional features such as transaction previews, phishing detection, and address screening help users understand what is being authorized.

Binance extends the optionality of self-custody to its users with the added benefit of distribution, security infrastructure, and product design. As consumers look to explore onchain applications, they can do so without entirely leaving the Binance ecosystem. The market is developing improved custody models, and wallet providers are looking to provide better features for self-custody wallets. MPC has emerged as increasingly necessary infrastructure for combining distributed control with recovery and policy features. User control with dependable recovery and transaction protection will be key to carrying self-custody into the mainstream.

Disclaimer: The Block is an independent media outlet that delivers news, research, and data. As of November 2023, Foresight Ventures is a majority investor of The Block. Foresight Ventures invests in other companies in the crypto space. Crypto exchange Bitget is an anchor LP for Foresight Ventures. The Block continues to operate independently to deliver objective, impactful, and timely information about the crypto industry. Here are our current financial disclosures.

© 2026 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.