Multisig Wallets for DAO Treasuries: How They Work and Where They Fail
Most DAO treasuries are not controlled by a smart voting contract alone. They sit in a multisig wallet. If you hold governance tokens or vote on proposals, understanding multisigs is one of the most practical things you can learn. This guide explains how a multisig works, why DAOs use them, and the failure modes to watch.
What a multisig wallet is
A normal crypto wallet needs one private key to sign a transaction. According to Wikipedia, a multisignature (multisig) wallet needs several parties to sign. It is set up with a fixed threshold of signatures from independent private keys, for example 3 of 5. No single keyholder can move funds alone.
Why DAOs use multisigs
- No single point of failure: one lost or stolen key does not drain the treasury.
- Speed: signers can carry out approved proposals without deploying new contracts every time.
- Accountability: every signature is recorded on-chain, so voters can see who approved what.
In our DAO governance basics article, we called the treasury the place where governance becomes real. The multisig is often the exact point where a vote turns into a transfer.
Keys still matter
A multisig is only as strong as each signer’s key storage. Wikipedia describes the common options:
- Hardware wallets: small devices that sign transactions inside the device and never reveal the private key, even when the host computer has malware.
- Cold storage: keys generated or kept on devices that never go online.
- Seed phrases: lists of 12 to 24 words that can restore a wallet. Whoever sees one controls the key.
- Online and web wallets: convenient, but the provider holds the credentials. The Mt. Gox breach in 2011 showed what can go wrong.
A 3-of-5 multisig whose five signers all keep keys in browser wallets on the same laptop brand, or whose seed phrases sit in the same cloud folder, is much weaker than it looks.
Where multisig treasuries fail
- Signer concentration: if most signers work for the same team, the “multi” is cosmetic.
- Blind signing: signers approve transaction data they cannot read. Malicious front-ends exploit this.
- Threshold too low or too high: 1-of-N is not a multisig in practice. N-of-N freezes funds if one key is lost.
- Stale signers: people leave projects, but their keys stay on the wallet.
- Malware and drainers: infostealers scan computers for wallet files and record keystrokes, according to Wikipedia’s coverage of crypto crime.
Questions to ask before you vote
- Who are the signers, and are they independent of each other?
- What is the threshold, and when was the signer list last changed?
- Do signers use hardware wallets?
- Is there a timelock between approval and execution?
- Is there a public log of treasury movements?
If the answers are vague, delegate with a strict loss budget, as described in delegating with a loss budget.
Choosing a threshold
There is no universal right number, but the logic is simple. The threshold should be high enough that a small group cannot collude or be compromised together. It should also be low enough that losing one or two keys does not lock the treasury forever. Many teams settle on a majority, such as 3 of 5 or 4 of 7, with signers in different places and organisations. Whatever the setup, the DAO should publish it, along with a plan for replacing a signer who leaves or loses a key.
Multisig vs on-chain governance
A multisig is a set of trusted people. Token voting is a set of rules. Many DAOs combine the two: token holders vote, and the multisig carries out the result. This is faster and lets humans catch errors, but it also means voters rely on signers to act on the result honestly. When you read a proposal, check whether it executes automatically on-chain or depends on signers. That one detail tells you how much of the “decentralisation” is real.
Finally, remember that seed phrases for each signer are an unencrypted form of the private key. Anyone who sees one controls that signature.
Crypto risk note: Crypto-assets are highly volatile and largely unprotected. You can lose all the money you put in. This article is general education, not financial, tax or legal advice. Never invest more than you can afford to lose.