Who Pays and Who Gains as Ledger Drama Fuels Multisig Adoption

Technically savvy bitcoiners person been utilizing multivendor multisig hardware wallet setups for years. Now, pursuing the Coldcard situation this summer and the problems affecting Ledger and its users this month, the attack is gaining the attraction of the wider audience. It combines hardware from antithetic manufacturers successful a multisignature wallet setup.

For example, successful a 2-of-3 setup, 3 keys are created connected 3 antithetic devices, and 2 of them are needed to motion a transaction. If 1 instrumentality is compromised, criminals clasp lone 1 cardinal and inactive cannot bargain your bitcoin, though you should inactive regenerate that key. This would person protected users successful some the Coldcard and Ledger cases, arsenic agelong arsenic the different devices came from different manufacturers and, arsenic the Ledger lawsuit shows, done antithetic income channels.

Compromising each the devices successful bid to determination bitcoin from a multisig wallet would necessitate a highly coordinated attack. For example, an attacker mightiness people 3 devices bought from the aforesaid reseller, which could person tampered with the wallets itself oregon fallen unfortunate to a proviso concatenation attack. Compromised Ledger reseller Cryptobilis besides sold Trezor, Tangem, Safepal and different devices. So far, lone Ledger devices person been confirmed arsenic tampered with. That is wherefore the safest signifier is considered to beryllium buying hardware wallets straight from the manufacturer. However, portion this reduces the risks, it does not destruct them.

‘Should Become the Standard’

“Rolling dice wouldn’t person helped the victims of the Ledger proviso concatenation attacks. Multivendor multisig would, again,” Kevin Loaec, CEO of Wizardsardine, the developer of the Bitcoin wallet Liana, posted connected X.

“Multi-vendor multisig should go the standard. Each signer should person a wholly autarkic hardware/software stack from the different signers,” developers of the Nunchuk wallet added, noting that “any setup that relies connected a azygous hardware/software stack oregon a azygous vendor should beryllium considered astatine risk.”

Both Liana and Nunchuk are processing their ain multisig solutions to assistance users harvester antithetic devices. However, these solutions bash not yet enactment each the hardware wallets disposable connected the market.

Payers and Gainers

If multivendor multisig does go the standard, single-device users could look further expenses, but the concern could wage disconnected successful the agelong term. For example, Ledger wallets presently retail for $59-399, Trezor wallets for $59-249, and BitBox devices for $167-196. Another enactment is Block’s Bitkey device, which costs $250 and offers a multisig solution without effect phrases.

Bitkey distributes 3 keys among its hardware wallet, the user’s mobile device, and a Bitkey server. While this is safer than a single-signature setup, users inactive request to spot that the solution from a azygous vendor works arsenic intended.

If radical unreserved to make multivendor multisig setups, hardware wallet manufacturers could spot a nonstop boost successful sales. Bitcoin.com News has already reported that immoderate manufacturers saw a spike successful income pursuing the Coldcard crisis. The inclination could besides alteration contention among manufacturers, arsenic users would nary longer look for a azygous “best hardware wallet.”

Other imaginable beneficiaries see multisig solution providers specified arsenic Liana and Nunchuk. Companies specified arsenic Casa and Unchained, which connection collaborative multisig solutions, could besides spot their idiosyncratic bases grow. They could adjacent go much important income channels for hardware wallet manufacturers. Casa does not specify which wallets it offers to subscribers of its Premium and Private Client plans, which outgo $2,100-7,500 per year. Ledger antecedently said they “worked intimately with Unchained to validate and amended our attack to multisig, successful an open-source collaboration.”

Fear of Multisig vs. Fear of Losing Your Bitcoin

However, pursuing the Coldcard crisis, Ledger CTO Charles Guillemet warned that “Multisig is not automatically the close answer” due to the fact that it adds complexity, expanding the hazard of losing funds. Guillemet advocated for a miniscript solution instead, which would let users to acceptable elemental rules for however their bitcoin tin beryllium spent, including done multisig transactions. At the clip of writing, Guillemet had not posted thing astir the Cryptobilis incident.

Multivendor multisig mightiness truthful look adjacent much analyzable to astir bitcoin and crypto users. How fashionable the inclination becomes volition beryllium connected aggregate factors. A cardinal origin volition beryllium whether repeated attacks heighten users’ fearfulness of losing bitcoin capable to unit those who inactive privation to self-custody their BTC to larn however to acceptable up multivendor multisig wallets.

Another question is however the Bitcoin and broader crypto plus industries volition assistance these users with better, much user-friendly, and little risky solutions. Alternatively, users could crook progressively to custodial solutions oregon concern vehicles specified arsenic ETFs.

Ultimately, arsenic the adage goes, determination is nary azygous champion bitcoin custody solution oregon hardware wallet. There are lone trade-offs, and the close prime depends connected your needs and method abilities.