Carteiras e segurança
Multisig security depends on independent control
Several approvals help only to the extent that keys, people and verification paths do not share one failure.
Os artigos de investigação e as referências são publicados em inglês. A navegação está disponível em sete idiomas.
Pessoas e projetos
A threshold is a rule
A multisignature account requires a defined threshold of approvals from an owner set for its normal transaction path. A 3-of-5 arrangement can tolerate some unavailable or compromised owners better than a single key. The actual account configuration determines which signatures count.
The number alone does not reveal how independent those owners are. Five keys stored on one laptop or controlled by one person share a major failure point. Several signers who all approve the same misleading display can also reach a valid threshold without understanding the real action.
Review every execution path
Safe accounts can support modules and other extensions. The security review must include those routes, changes to the owner set and threshold, recovery arrangements and the tools used to construct and display transactions.
Modules explain why counting owners is not a complete permission review. The frontend signing boundary explains why confirmation needs independent transaction details. The practical objective is separation of authority and verification, not a large signer number that is easy to place in marketing material.