A multisig (multi-signature wallet) requires multiple private keys to authorize a transaction. Instead of one person having full control, a group of signers must collectively approve (e.g., 3-of-5 means any 3 of the 5 keyholders must sign). It distributes trust, prevents single points of failure, and is the standard for managing DAO treasuries, protocol admin keys, and high-value corporate holdings.
What Is a Multisig (Mechanics)?
3 min read
The short version
A multisig is like a safe deposit box that needs multiple keys turned simultaneously. No single person can open it alone. A 3-of-5 multisig means the safe has 5 keyholders, and any 3 of them must be present to open it. This protects against: one person going rogue, one key getting stolen, or one keyholder becoming unreachable.
How It Works
Implementation: Gnosis Safe (now "Safe") is the dominant multisig on Ethereum and EVM chains. It is a smart contract that validates multiple signatures before executing a transaction. Setup: deploy a Safe contract, add N owner addresses, set threshold M. Any proposed transaction requires M-of-N signatures collected off-chain (via the Safe interface), then submitted as one on-chain transaction. Gas is paid once (the submitter pays). Common configurations: 2-of-3 (small teams), 3-of-5 (medium DAOs), 5-of-9 or 6-of-10 (large protocol treasuries). Signers are typically geographically distributed with diverse key storage (hardware wallets, different providers). Advanced: time-locked multisigs (add a delay before execution), role-based (different thresholds for different actions), and nested multisigs (one signer is itself another multisig).
A DAO treasury spending 500K USDC via 4-of-7 multisig
The Arbitrum grants program has a 4-of-7 Safe multisig holding $50M in ARB and stablecoins. A passed governance proposal authorizes spending 500K USDC on developer grants. Process: (1) One signer (the program manager) creates a transaction in the Safe UI: send 500K USDC to the grants distribution contract. (2) They sign it with their Ledger (signature 1/4). (3) They notify the other signers via a secure channel. (4) Three more signers review the transaction details in the Safe UI, verify it matches the governance proposal, and sign with their respective hardware wallets (signatures 2, 3, 4 of 4). (5) The fourth signer submits the transaction on-chain (paying gas). (6) The Safe contract verifies 4 valid signatures from authorized owners and executes the 500K USDC transfer. Total time: typically 24-72 hours to collect signatures, depending on signer availability.
What People Get Wrong
A multisig is fully trustless
You still trust the M-of-N signers collectively. If 3-of-5 signers collude, they control the funds. Multisig distributes trust but does not eliminate it. The selection and independence of signers matters enormously.
If one signer loses their key, funds are lost
Only if enough keys are lost that the threshold can no longer be met. In a 3-of-5, losing 1 or even 2 keys still leaves 3 functional signers who can execute. Best practice: replace lost signers promptly through a transaction signed by the remaining keyholders.
Multisigs are only for large treasuries
Individuals use 2-of-3 multisigs for personal security (two hardware wallets + a backup key with a trusted party). It is excellent personal security for high-value holdings and does not require organizational complexity.
Keep Reading
Sources & Further Reading
- Safe (Gnosis Safe)
The dominant multisig wallet holding $100B+ in crypto assets
- Safe Docs
Technical documentation for deploying and managing Safe multisig wallets
Questions People Also Ask
- What is Gnosis Safe / Safe?
- Safe (formerly Gnosis Safe) is the most widely used multisig smart contract on Ethereum and EVM chains. It holds over $100B in assets across 8M+ safes. It is open-source, extensively audited, and has become the de facto standard. The web app at app.safe.global provides the signing interface.
- Can multisig signers be anonymous?
- Signers are identified by Ethereum addresses, which are pseudonymous. Whether real identities are publicly known depends on the organization. Many DAO multisig signers are publicly identified community members (for accountability). Some security-focused setups keep signer identities confidential.
- What happens if signers disagree?
- If the threshold cannot be reached because signers disagree, the transaction simply does not execute. The funds remain in the Safe, unchanged. This is a feature (prevents unilateral action) but can become a problem if governance deadlocks occur among the signer set.