One private key controls a wallet. That key gets compromised. Everything gone. No recovery. No appeal.

Single point of failure. Every wallet secured by one key has it.

Multisig distributes that risk. Multiple keyholders. Multiple signatures required before anything moves. One key compromised or one person goes rogue. Funds still safe because the others haven't signed.

Standard setup: M-of-N. Require M signatures from N possible signers. 2-of-3. 3-of-5. 4-of-7. Numbers chosen based on how much security versus how much operational friction is acceptable.

How M-of-N Actually Works

3-of-5 multisig. Five people hold keys. Three must sign before any transaction executes.

One keyholder gets hacked. Attacker has one signature. Can't move funds. Two more needed.

One keyholder disappears. Four remain. Three of the four can still sign. Funds accessible.

Two keyholders collude and want to steal. Still need a third. Either find a willing accomplice or nothing moves.

This is the design. Requires coordination to act legitimately. Requires even more coordination to act maliciously. Neither threshold perfect but dramatically better than one key controlling everything.

The tradeoff: operational friction. Every transaction requires gathering multiple signatures. Multiple people, potentially across time zones, coordinating to approve fund movements. Slower than one person clicking approve. That friction is intentional. Rushed decisions and unilateral actions both become harder.

Where Multisig Actually Gets Used

DAO treasuries. Billions sitting in Gnosis Safe multisigs controlled by elected signers from the community. Uniswap, Aave, Compound, most major DeFi protocols. Treasury can't move without multiple keyholders agreeing.

Protocol admin keys. Smart contracts have admin functions. Upgrade the contract. Change parameters. Pause the protocol. Whoever controls the admin key controls those functions. Single admin key means one person can do anything to the protocol unilaterally. Multisig means they need accomplices.

Team wallets. Multiple founders. Funds shared. No single founder can drain the company wallet alone. Requires coordination.

Exchange cold storage. Large exchanges holding customer funds use multisig cold storage. Multiple employees must sign to move significant amounts. Internal theft requires coordination across multiple people.

Gnosis Safe

Dominant multisig implementation on EVM chains. Most DAOs and DeFi protocols use it.

Not a simple multisig script. A smart contract wallet with multisig logic built in. Can hold any token. Supports complex approval workflows. Integrates with most DeFi protocols directly.

Billions secured through Gnosis Safe at any given time. Battle-tested. Audited extensively. Default choice for anything serious requiring multisig on Ethereum or compatible chains.

Timelock: The Layer Multisig Needs

Multisig helps but isn't the full picture.

3-of-5 multisig. Three signers collude. They can drain the treasury or push a malicious contract upgrade. Community has no warning. No time to react.

Timelock addresses this. Even after multisig approves a transaction, execution gets delayed. 24 hours. 48 hours. 72 hours. Community can see the pending transaction during that window. If it looks malicious, they can respond. Withdraw funds. Alert others. Public pressure on signers.

Multisig plus timelock is the gold standard for DeFi protocol admin keys. Multisig requires coordination. Timelock provides warning. Both together make malicious action significantly harder.

Protocols with single admin key and no timelock are one person away from a catastrophic unilateral decision. That person could be the founder acting in good faith today. Tomorrow is different.

Checking If Multisig Is Real

Common lie in crypto. Project announces multisig protection. Marketing material says it's safe. Reality: single admin key, multisig theater.

Always verify on-chain. Every Ethereum address and contract is publicly readable. Pull the contract on Etherscan. Look for the admin or owner address. Check whether that address is a Gnosis Safe contract or a regular EOA wallet.

Regular EOA wallet as admin: one key, one person, fully centralized control regardless of what the team claims.

Gnosis Safe contract as admin: actual multisig. Check the Safe to see how many signers and what threshold.

Takes two minutes. Tells you whether the security claim is real.