Protocol Treasury Brief: Multi-Sig Security Feb 2024

Frequently Asked Questions

01.What is multi-sig custody for a protocol treasury?

Multi-sig custody is a smart contract wallet configuration that requires a threshold of independent signers, for example 4 of 7, to approve a transaction before funds move. No single signer can unilaterally withdraw treasury assets. Safe, formerly Gnosis Safe, is the dominant multi-sig standard for DAO and protocol treasuries heading into 2024, built on the EIP-1271 contract signature standard.

02.How did the Ronin Bridge hack expose multi-sig threshold risk?

In March 2022, attackers compromised five of the nine validator keys securing the Ronin Bridge and used them to authorize two fraudulent withdrawals totaling roughly 624 million dollars. The incident showed that a multi-sig threshold is only as strong as the operational independence of its signers, since five compromised keys, four of them through a single social engineering vector, met the approval threshold without triggering an alert.

03.What diligence signals should allocators check before trusting a protocol's treasury custody?

Four signals matter most: the signer threshold and total signer count, whether signers are institutionally distinct or share operational infrastructure, whether high-value transactions route through a timelock delay, and whether the treasury contract has been independently audited for the specific multi-sig implementation in use rather than assumed safe because it uses a well-known wallet standard.