Buy Event Ticket Consensus MIami 2026 - 20% Paris Blockchain Week - 15% OFF

What is Multisig (Multi-Signature)

Multisig (multi-signature) is a cryptographic security mechanism requiring more than one private key to authorise a cryptocurrency transaction. Rather than a single key controlling a wallet, multisig distributes control across multiple keys providing protection against single points of failure, theft, and insider misconduct.

HOW MULTISIG WORKS

A multisig wallet is configured with an M-of-N scheme: N total keys are associated with the wallet, and M of those keys must sign any transaction for it to be valid. 

Common configurations: 

  • 2-of-3: Three keys exist; any two must sign. Most common for personal security,  one key on hardware wallet, one on secure cloud backup, one with a trusted party. Lose one key and you can still recover with the other two. 

  • 3-of-5: Five keys exist; three must sign. Used by exchanges, DAOs, and organisations requiring distributed approval. 

  • 4-of-7: Enterprise-grade treasury management requiring majority consensus.

USE CASES FOR MULTISIG

  • Exchange and Institutional Custody: Major exchanges use multisig wallets to store customer funds. 

  • No single employee can unilaterally move assets;  multiple signatories from different departments or locations must cooperate. This prevents insider theft and reduces single-point hacking risk.

  • DAO Treasuries: Organisation treasuries managed by elected multi-sig signers (typically 4-of-7 or 5-of-9). Gnosis Safe (now Safe) is the most widely used DAO multi-sig, securing billions in protocol treasuries.

  • Personal Cold Storage: Using a 2-of-3 or 3-of-5 personal multisig across a hardware wallet, secure paper backup, and a trusted family member's hardware wallet.

MULTISIG PLATFORMS

  • Safe (formerly Gnosis Safe): Most widely used Ethereum multisig. Manages billions in DAO and institutional funds. 

  • Electrum: Built-in Bitcoin multisig wallet. 

  • Casa: Consumer-focused Bitcoin multisig service with key management support.

THE WAZIRX HACK LESSON

WazirX's July 2024 hack resulted in $235 million in losses from a multisig wallet. Attackers used social engineering to manipulate the signing process,  demonstrating that multisig security depends entirely on the security and vigilance of each keyholder. Multisig reduces but does not eliminate risk when signers are compromised through phishing or social engineering.

Terms in addition to the Multisig (Multi-Signature)

Scroll to Top