Multisig

How multisig works

A typical M-of-N multisig:

• N total keys are configured.
• M signatures required to authorize transactions (M ≤ N).

For 2-of-3 multisig: three keys; any two can sign. If one is lost, the other two can still sign. If one is compromised, that single key alone can't move funds.

Common configurations:

• 2-of-3 — for individual users wanting fault tolerance and security.
• 3-of-5 — for higher-value or institutional uses.
• 4-of-7, 5-of-9 — for DAO treasuries and large organizational holdings.

Why multisig

Several benefits:

• Single-point-of-failure protection. No single key can move funds.
• Distributed signing. Multiple parties or devices needed.
• Fault tolerance. Lost keys don't lose funds (within the threshold).
• Reduced coercion risk. Physical threat to one party can't compromise funds.
• Operational governance. Treasury operations require multiple signers; reduces unilateral action risk.

Major multisig implementations

A few:

• Safe (formerly Gnosis Safe) — dominant smart-contract multisig on Ethereum. Used for DAO treasuries, institutional holdings, sophisticated personal use.
• Native Bitcoin multisig — supported by the protocol; used by services like Casa, Unchained Capital.
• Native multisig on most chains — Solana, others have native multisig support.
• Multi-party computation (MPC) wallets — alternative architecture providing similar properties through different cryptography.

Use cases

Common multisig deployments:

• DAO treasuries — major DAOs use multisig for operational treasury management.
• Institutional crypto custody — funds, exchanges, market makers.
• High-value personal holdings — individuals with substantial crypto wealth.
• Multi-party agreements — escrow, joint accounts, business partnerships.
• Inheritance planning — distributed shares enable controlled inheritance.

Setup considerations

Practical decisions:

• Threshold — how many signatures required.
• Total keys — how many keys exist.
• Geographic distribution — keys in different physical locations.
• Trust distribution — keys held by different parties or all by you.
• Recovery process — how to handle lost keys.

A common pattern for individuals: 2-of-3 with one key in your hot wallet, one on a hardware wallet, one in a safe deposit box. Lose one — recover from the other two.

Multisig vs. shared accounts

Distinct from joint bank accounts:

• Joint bank account — either party can act unilaterally.
• Multisig — threshold required; no unilateral action.

For couples or business partners, multisig provides stronger structural separation than joint banking.

Limitations

Several real concerns:

• Operational complexity. More signatures means more coordination.
• Slower transactions. Coordinating multiple signers takes time.
• Smart-contract risk (for contract-based multisig). Bugs could affect funds.
• Coordination failure. If multiple keys are lost beyond threshold, funds become inaccessible.
• Higher transaction costs. Multiple signatures consume more gas than single signatures.

Inheritance planning

Multisig is particularly useful for inheritance:

• Distribute keys across heirs and trusted parties.
• Threshold ensures no individual can unilaterally drain funds.
• Loss tolerance lets keys be replaced as circumstances change.
• Specialized services (Casa, Unchained Capital) provide structured inheritance products.

DAO treasury security

For DAO treasuries:

• Multi-billion dollar treasuries are typically managed by multisig.
• Signers usually include team members, foundation representatives, trusted community members.
• Threshold balances security and operational practicality.
• Public visibility of multisig addresses provides transparency.

The Bitfinex hack of 2016 (~$72M) involved theft from a multisig wallet through compromise of multiple keys, illustrating that multisig isn't perfect protection.

What individuals should know

For typical crypto holders:

• Small holdings — single hardware wallet is usually sufficient.
• Large holdings ($100K+) — multisig provides meaningful additional security.
• Operational complexity is real; only adopt multisig if you'll actually use it correctly.
• Test recovery before relying on multisig for major holdings.

For institutions:

• Multisig is essentially required for credible custody operations.
• Specialized services can provide expertise alongside multisig infrastructure.
• Audit and procedural rigor matters as much as the technical setup.

Multisig represents one of the most powerful tools for crypto security. For users with meaningful holdings, it transforms self-custody from "single point of failure" to "fault-tolerant distributed authorization."