Coinbase must secure signing keys since it custodies users’ digital assets. MPC is used for generating signatures on transactions without a central point of attack through a Threshold Signing Service (TSS). Each party’s longterm private keys are loaded onto Hardware Security Modules (HSMs) to prevent anyone from using the private keys if they do not have physical access to the HSM. Key generation and signature generation then occurs through the TSS protocol.