The multisig superapp. Multiple vendors, multiple chains, multiple dapps. Your group, your keys, your funds, your way. Operations & treasury focused.
Miami, FL
- Tweets 186
- Following 8
- Followers 238
- Likes 692
Pinned Tweet
you got the multisig, but is it too brittle?
are there too many / few signers?
will it survive a decade out?
getcofund.com/research/multi…
a follow up to our “how safe is my multisig” research, this is a fun, tiny,
Monte Carlo simulation that checks whether a quorum survives a decade against key events, person events or location events
1
2
11
393
one (very) shortcoming of multisigs is that they're blind: they treat $100 & $100M the exact same
why a quorum, whether it's a split key or signature, not scale security based on context?
this is something we've focused on since the beginning: rules for multisigs (which we call "policies")
full transparency, while the UX looks the same, policies work differently on contract (evm) & utxo (btc) chains
on contract chains, the policy lives entirely on-chain (multisig *&* the rule). on utxo chains, however, only the multisig check is cryptographic
unfortunately, amount rules are only checked client-side (or well, app-wide); which is the main reason we're personally interested in activating covenants (this is a key need for self-custody adoption)
1
41
> multisigs are too complex for adoption
actually, they've been around for *centuries*! Using multiple signatures for hardened security is hardly new
churches, silos, banks...all guardians of critical assets that arrived at the same conclusion the bitcoin/crypto world is coming to now
the products ~maybe~ difficult to use, valid, but the mechanic itself is incontrovertible
1
9
587
Cofund ❤️ BitDevs!
Spent some time at BitDevs today. Got to demo @getcofund and have a conversation about multisigs.
It was great sharing and explaining the idea behind it, and hearing thoughts from other Bitcoiners.
4
9
125
> bitcoin savings
> usdc payments
> tokenized equities
the multisig super wallet, slowly morphing into the modern joint account 👀
2
8
151
counterintuitive take on multisig + self-custody setups
> how safe is my wallet/quorum?
while we're ofc biased, it's healthy to objectively consider tradeoffs in increasingly-complicated setups
more keys & a higher threshold does *not* strictly mean "better" security
the brittleness of n-of-n keys (2-of-2, 3-of-3...) is often *why* most wallets default to a 2-of-3 or 3-of-5 setup
2
2
13
1,031
Yapped multisigs last night, apparently the trivia Qs were deemed too hard 🤨
How many of these could *YOU* answer?
- Multisigs predate crypto, give 1 example
- What is the first multisig op_code
- What is does PSBT stand for
- What is default multisig on EVM
- What is the upper-limit to participants
- What does MPC stand for
- What is special about KeyPath in P2TR
- Protocol where keys aren’t equal
3
1
13
276
Did OpenAI just crack ECDSA & steal ETH to fund a transaction???
Absolutely not lmao. There are many, valid reasons to stay on alert for exploits.
So let’s try to muddle the self-custody waters anymore folks…
OpenAI did nothing of the sort. An LLM found a public seed used for testing & derived an address using BIP84.
That’s all. Nothing “hacky” nor an exploit.
Made with AI
6
355
ColdCard, Trezor, Ledger. $330M + sensitive data lost just in 2026...
For those asking if HWWs are still worth it? YES.
The frequency & ferocity of the exploits isn't unique to HWWs, crypto, or even finance; LLMs are simply a forcing function for new security standards.
The good news? The math is still intact & every company failed in different, but addressable ways.
The bad news? *Everything* around the math is significantly more vulnerable & we likely haven't seen the last or worst exploits.
Never doom, stay informed & protect your stack!
5
4
16
860
Our first podcast cover on our multisig survivability research! Ofc always happy to sit down w/ @ECBSJ
For the full breakdown and how @getcofund is positioning itself around this risk model:
piped.video/watch?v=UJhQ0CNf…
1
4
96
Cofund Multisig retweeted
Very hot takes here but as I was mentioning to @stephanlivera, three things have become clear to me through iterating on @getcofund registration:
1. “Easy seed storage” is basically as solved as it’s going to get. Privy/Turnkey, services that Shamir keys w/ one shard tied to a normal login, are actually a solid default option for 90% of people
2. What matters for products therefore is the lowest-common denominator, or the default for self-custody. This is entirely up to the founders definition of “self-custody” but we made peace with^
3. Past a digestible default, what matters after is optionality, ~CAN~ I use fancier opinions (importing a seed, directing to a HHW)?
1
5
205
$240M in hardware wallet exploits *just in 2026* 😵💫
A dizzying amount by any measure! (w/o counting future rugs from leaks)
Undoubtedly a blow to self-custody, but it's worth inspecting each case independently because *every* attack was different.
Which solidifies our takeaway for the last few months...
The math (encryption, hashes, signatures) isn't broken - at least not yet.
But *everything* around it is x100 more vulnerable than before because it's x100 CHEAPER to do the research (ty LLMs).
Trust the math folks, nothing else!
1
8
512
> 3.3% you'll lose your private key in the next 12 months
✅ fact-check verified true by real Satoshiheads ✅
The aggregate probability of losing your key in any given year (assuming no check-ins) is the combined probability of three independent events: seed, person, place:
2.0% -> p(lose_seed)
1.0% -> p(lose_person)
0.3% -> p(lose_place)
3.3%
1
1
8
557
Oh God. Oh no. someone hide this madman’s tweet before our CEO sees this & adds “multi-scheme” to the Q4 roadmap 😭
A hybrid robust scheme is one that relies on more than one assumption. E.g., 2-of-2 multisig where one is EC and one is hash-based, or one is lattice and one is hash (for PQ). This gives you protection even if one is broken. Depending on needs, you can do 3-of-3 as well. 8/n
3
158
Making our way through the conference circuit folks 🫡
Ping us to talk anything multisig-related!
Seed Phrases vs Key Sharding: Multisig's UX Trade-offs | Setzeus SLP781
@setzeus of @getcofund argues most people won't use seed phrases, weighs email-login key splitting against verifiability, and explains policy multisig.
Timestamps
00:00 — Intro
00:37 — From SetDev's L2 Work to Multisig
03:20 — After the Coldcard Hack: Why Self-Custody?
07:56 — Justin Drake's Bunker Mode and ECDSA
10:13 — Are Bitcoiners Bad at Building Products?
15:59 — Seed Phrases vs Privy-Style Key Sharding
20:25 — Trade-offs: Verifiability and Lock-In
25:35 — Recommending Self-Custody After Hacks
30:40 — Families, Fiduciaries, and Founders
34:25 — Spending Policies via Taproot Script Paths
37:24 — Limit: Bitcoin Spend Caps Not On-Chain
39:59 — Key Rotation Means Moving Funds
41:11 — Cofund Pricing and Fees
42:03 — Thesis: Multisig Becomes Joint Accounts
1
6
103
> are all keys equal in a multisig?
Nope! Not exactly. Fascinating work is happening on a new class of signatures that give "weight" to specific keys: threshold/weighted/hierarchical signatures.
The implementation with the most progress & promise is known as FROST; the later add-on, ROAST, helps make the setup more stall-proof/tamper-resistant.
ALT FROST (flexible round-optimized schnorr threshold) Signature
ALT ROAST (robust asynchronous schnorr threshold) Signatures
ALT Side-by-side comparison of how ROAST pairs to improve FROST
1
8
425
Succession except Logan Roy properly plans his inheritance with a multisig:
> Kendall opens will
> checks his key is valid
> receives inheritance
end
1
10
605
Now with a few days of reflection, we wanted to share our thoughts on the superb @BTCtreasuries conference put on by @ejuline @TimKotzman & @pete_rizzo_
Three main takeaways:
1. Institutions are both quietly diversifying *&* growing
2. The disconnect b/w devs & institutions is fairly large
3. Three teams think privacy can bridge these parties
Overall an exceptional event & I suspect we’ll be more involved next year :)
2
13
579