Multisig (Multisignature) Definition: Multisig is a wallet arrangement that requires signatures from a set number of private keys, out of a larger group, before it can move funds. A 2-of-3 multisig, for example, has three keys and needs any two of them to approve each transaction, so one lost or stolen key can neither lock the funds nor drain them.
What Is Multisig?
A standard crypto wallet has a single point of failure: one private key. Whoever holds it can spend everything, and if you lose it, the coins are gone for good. Multisig removes that single point by splitting control across several keys.
Picture a bank vault that opens only when two of three managers turn their keys at once. No single manager can empty it, and the vault still opens if one of them is on holiday. A multisig wallet applies the same rule to a blockchain address, and it is written as “M-of-N”: N keys exist, and M of them must sign.
Bitcoin has supported multisig since 2012, when a protocol upgrade made such addresses easy to use. On Ethereum, multisig is built as a smart contract wallet, with Safe (formerly Gnosis Safe) the best-known example. Knowing the concept is enough to use one; choosing the right M and N is where the thinking starts.
How Does Multisig Work?
Each key in a multisig belongs to a separate signer, which might be a person, a device or a service. When someone proposes a transaction, the other signers review it and add their own digital signature. The network, or the wallet’s contract, checks that enough valid signatures from the approved key list are attached, and only then executes the transfer.
Consider a trader holding 5 BTC in a 2-of-3 setup. Key A sits on a hardware wallet at home, key B on a second device in a bank safe deposit box, and key C with a professional co-signing service. A burglar who steals device A gets nothing, because one key cannot sign alone. If the trader later loses device A in a house fire, keys B and C together can still move the 5 BTC to a new wallet.
The threshold sets the balance between theft risk and loss risk. A 1-of-2 wallet is as easy to rob as a single key, since either key can spend. A 3-of-3 wallet resists theft but becomes unusable the moment one key disappears. That is why 2-of-3 for individuals and 3-of-5 for companies are the common choices: each tolerates the loss of some keys while still requiring several to be compromised.
Multisig vs. Single-Signature Wallet
| Multisig wallet | Single-signature wallet | |
|---|---|---|
| Keys needed to spend | M of N (e.g. 2 of 3) | One |
| If one key is stolen | Funds stay safe | Funds can be drained |
| If one key is lost | Funds recoverable with the rest | Funds lost unless a backup exists |
| Setup effort | Higher: several devices and backups | Low |
| Typical users | Treasuries, funds, DAOs, large holders | Everyday users |
A related approach, multi-party computation (MPC), splits one key into shares that jointly produce a single ordinary signature. The result looks like a normal wallet on-chain, while multisig makes the approval rule visible on the blockchain itself.
Why Is Multisig Important for Traders?
Multisig protects most of the money that crypto protocols, exchanges and DAOs hold. Treasuries, bridge reserves and upgrade rights for DeFi contracts often sit behind a multisig, so its design decides how safe your deposits are. When you evaluate a protocol, checking who holds its admin keys and how many are required tells you more than its marketing does.
The weak point is how independent the keys really are. In March 2022, attackers stole about $625 million from the Ronin bridge that served Axie Infinity. The bridge needed 5 of 9 validator signatures, but one company controlled four keys and could also sign for a fifth, so compromising a single organisation was enough. A 5-of-9 rule gave the security of roughly one signer.
Signers can also be fooled together. In February 2025, attackers who had compromised the Safe web interface showed Bybit’s signers a routine-looking transfer, and the approvals moved about $1.5 billion in ETH from the exchange’s cold wallet. Every signature was valid; each signer approved what their screen displayed. Multisig stops a single rogue key, but it cannot help when every signer trusts the same broken tool.
Key Takeaways
- Multisig requires a set number of private keys out of a larger group, written as M-of-N, to approve any transaction.
- Splitting control removes the single point of failure: one stolen key cannot drain the wallet, and one lost key does not lock it.
- The threshold trades theft risk against loss risk, which is why 2-of-3 and 3-of-5 setups are the most common.
- Multisig is only as strong as the independence of its keys; keys held by one organisation or stored in one place add little protection.
- Signers who approve transactions through the same compromised interface can be fooled together, so each signature should be checked independently.
Is a multisig wallet safer than a hardware wallet?
They solve different problems, and the strongest setups combine them. A hardware wallet protects one key from malware, while a multisig made of several hardware wallets also protects you from losing or leaking any single one of them.
What happens if I lose one key in a 2-of-3 multisig?
You can still move the funds with the two remaining keys. Do it promptly by sending the coins to a new multisig with a fresh third key, because one more lost key would lock the wallet permanently.
Do multisig transactions cost more in fees?
Usually yes, a little. On Bitcoin, extra signatures add data to the transaction, and on Ethereum, a smart contract wallet uses more gas than a plain transfer.
Can a multisig protect me from signing a scam transaction?
Only if the co-signers check what they sign independently. If every signer approves whatever their screen displays, one compromised interface can fool them all at once.
