What is Multi-Sig?
How it works
Multi-sig operates on an N-of-M threshold model, where a transaction is only valid if signed by at least N out of M designated key holders. For example, a 2-of-3 multi-sig wallet requires any two of three signers to approve a transfer. Each signer holds a distinct private key, and signatures are collected off-chain before being submitted to the blockchain. This mechanism contrasts with single-key wallets, where one private key has full control. Bitcoin introduced multi-sig support with Pay-to-Script-Hash (P2SH) addresses, while Ethereum relies on smart contracts like Gnosis Safe.
On Ethereum, multi-sig wallets are typically implemented as smart contracts that define the signers and the required threshold. A user proposes a transaction, which then broadcasts a 'safe creation' or 'transaction submission' event. Signers independently verify and sign the transaction hash using their private keys, often via interfaces like the Safe app. Once enough signatures are collected, the contract executes the transfer. Advanced implementations support spending limits, role-based permissions, and time-locks, allowing for granular control over treasury management.
Many multi-sig solutions now incorporate recovery mechanisms, such as social recovery or time-delayed recovery, to handle lost keys without compromising security. Role-based multi-sig further distinguishes between signers, enforcers, and viewers, enabling complex governance workflows. For instance, a DAO might require 3-of-5 signers for small expenses and 5-of-7 for large ones, with separate execution delays. Standards like ERC-4337 account abstraction also build on multi-sig principles, allowing wallets to customize authorization logic beyond simple key signatures.
Why it matters
Multi-sig significantly reduces the risk of theft or accidental loss by eliminating a single point of failure. It enforces collective consent, making it essential for DAO treasury management, exchange cold wallets, and high-value joint accounts. Without multi-sig, a compromised single key could drain millions. It also enables trustless custodial arrangements and aligns with the decentralization ethos of crypto.
Real-world examples
Bitcoin multi-sig escrow was used for trustless trades before decentralized exchanges. Ethereum's Safe (formerly Gnosis Safe) is the most widely adopted multi-sig contract for DAOs and protocols. The exchange BitGo uses multi-sig for institutional cold storage, requiring multiple signing parties internally to authorize withdrawals.
FAQ
How does a multi-sig wallet differ from a regular wallet?
A regular wallet is controlled by a single private key, giving full authority to one person. A multi-sig wallet requires multiple keys to sign transactions, spreading control among several parties and reducing the risk of theft or error.
What is the most common threshold for multi-sig wallets?
The most common threshold is 2-of-3, meaning any two of three designated signers must approve a transaction. This balances security and convenience, as one key can be lost or compromised without total loss of access.
Can a multi-sig wallet be hacked?
While multi-sig wallets are more secure than single-key wallets, they can be hacked if enough private keys are compromised or if the smart contract itself has vulnerabilities. Proper key storage, hardware wallets, and audited contracts reduce this risk.
Related terms
Go deeper
Browse the complete crypto glossary to explore related terms and concepts.
Browse Glossary