Official MASTR logo MASTR Support the work
Contents
← Wiki home

Wallets & security

Multisig security depends on independent control

Several approvals help only to the extent that keys, people and verification paths do not share one failure.

Technical reference · transaction approval · 1 min read

Research articles and reference entries are published in English. Navigation is available in seven languages.

People & projects

In this article
  1. A threshold is a rule
  2. Review every execution path
  3. Sources and originals

A threshold is a rule

A multisignature account requires a defined threshold of approvals from an owner set for its normal transaction path. A 3-of-5 arrangement can tolerate some unavailable or compromised owners better than a single key. The actual account configuration determines which signatures count.

The number alone does not reveal how independent those owners are. Five keys stored on one laptop or controlled by one person share a major failure point. Several signers who all approve the same misleading display can also reach a valid threshold without understanding the real action.

Review every execution path

Safe accounts can support modules and other extensions. The security review must include those routes, changes to the owner set and threshold, recovery arrangements and the tools used to construct and display transactions.

Modules explain why counting owners is not a complete permission review. The frontend signing boundary explains why confirmation needs independent transaction details. The practical objective is separation of authority and verification, not a large signer number that is easy to place in marketing material.

Sources and originals

Related reading

MASTR

Support independent research

The investigations, original evidence and guides here are free to read. Voluntary donations help fund the research and keep MASTR’s tools available.

Open wallet