What Is a Multisig Wallet? How DAOs Use It for Security

A multisig wallet, short for multi-signature wallet, is a smart contract wallet that requires a minimum number of designated signers, out of a larger set, to approve a transaction before it executes, rather than relying on a single private key. DAOs use multisig wallets to hold treasury funds because no individual signer can move money alone, which spreads out both trust and risk across multiple people.

A standard single-key crypto wallet is like carrying cash in your own pocket: whoever holds the key controls the funds completely, and if that key is lost or stolen, the funds are gone. A multisig wallet functions more like a bank vault requiring several separate keyholders to turn their keys simultaneously, commonly described in an "M-of-N" format, such as 3-of-5 or 5-of-9, meaning any three of five, or five of nine, designated signers must approve before a transaction goes through.

Why DAOs specifically need multisigs

A DAO's treasury often holds substantial funds contributed by a community, not a single founder, which makes single-key custody both a security risk and a governance mismatch. If one person controlled the treasury outright, that defeats the purpose of decentralized governance and creates an obvious target for attackers or a point of failure if that person becomes unavailable or acts in bad faith. A multisig aligns custody with the DAO's broader philosophy: no single party, even a trusted core contributor, should unilaterally control community funds.

How multisig transactions actually work

When someone proposes a transaction from a multisig wallet, for example paying a contributor or executing a treasury rebalance approved through token governance, that transaction is submitted to the multisig smart contract but does not execute immediately. Each designated signer independently reviews and, if they approve, submits their own signature. Once the required threshold of signatures is collected, the contract executes the transaction automatically. Signers typically use hardware wallets to store their individual keys, adding a further layer of protection against any one signer's device being compromised.

Choosing a signer threshold

Setting the M-of-N threshold is a genuine security tradeoff. A low threshold relative to the total signer count, such as 2-of-9, makes the wallet vulnerable if just two signers collude or are compromised. A very high threshold, such as 8-of-9, makes routine operations slow and risks paralysis if signers are unavailable, travel, or lose access. Most established DAOs settle somewhere in the middle, commonly requiring a majority or slightly more, while also considering signer diversity: geographic spread, independent employers, and no close personal relationships between signers all reduce the odds of coordinated compromise or collusion.

Multisig setups compared

Threshold example	Security profile	Operational speed	Common use case
2-of-3	Lower resistance to collusion	Fast	Small teams, early-stage DAOs
3-of-5	Balanced	Moderate	Mid-size treasuries
5-of-9	High resistance to collusion	Slower, needs coordination	Large DAO treasuries
1-of-1 (not a true multisig)	No protection against single point of failure	Fastest	Not recommended for treasury custody

Risks even with a multisig

A multisig is a major security upgrade over a single key, but it is not risk-free. Social engineering attacks have tricked individual signers into approving malicious transactions that looked legitimate, sometimes by compromising a signer's device and quietly substituting a different destination address at the signing step. This is why security-conscious DAOs pair multisig custody with transaction simulation tools that show signers exactly what a transaction will do before they sign, and why signer education around phishing and device hygiene, similar to general DeFi wallet security practices, remains essential regardless of how many signatures are required.

Beyond treasury: multisigs for protocol admin keys

Multisigs are not used only for holding funds. Many DeFi protocols also gate administrative functions, such as pausing a contract in an emergency or upgrading code, behind a multisig rather than a single admin key, for exactly the same reason: distributing the power to make consequential, irreversible changes across multiple independent parties rather than trusting one.

Recovery planning for a multisig

A well-run multisig setup also plans for the possibility that individual signers lose access to their keys over time, whether through lost hardware, forgotten recovery phrases, or simply becoming unreachable. Building in a governance-approved process for rotating in a replacement signer, rather than discovering during an actual emergency that the DAO cannot reach enough active signers to meet its own threshold, is a basic but frequently overlooked piece of treasury resilience planning that DAOs should address before, not after, a signer becomes unavailable.

Bottom line

Multisig wallets let DAOs secure shared funds without relying on any single person, spreading custody and trust across a set of independent signers who must jointly approve every transaction. The right signer threshold and signer diversity matter as much as the technology itself, since a poorly configured multisig can still concentrate risk in ways that undermine the whole point of decentralized custody.