What a multisig wallet is and when a business should use one
In this article

    Every professional who moves significant value — a closing attorney disbursing proceeds, an OTC desk settling a block trade, a settlement agent managing a multi-party commercial deal — already knows that control over funds must be shared, documented, and governed. That instinct is exactly right, and it predates crypto by centuries. What multisig wallets do is encode that instinct directly into the cryptographic layer of a blockchain transaction. No policy memo required. No honour system. The rule is written into the wallet itself.

    This article explains what a multisig wallet actually is, how the different configurations work in practice, where it genuinely belongs in a business workflow, and where it reaches its limits. It also explains how onchain payment routing — the kind that shaka.deal performs — sits alongside multisig custody to handle the problem multisig was never designed to solve: getting value to multiple parties simultaneously at the moment a deal closes.

    The anatomy of a single-key wallet and why it fails at scale

    Before multisig makes sense, the baseline has to be clear.

    Most cryptocurrency users operate a single-key wallet: one that has only one private key to sign transactions. It is simple, fast, and efficient — but also vulnerable, because that single key grants full access. If the key is lost or stolen, a malicious actor can move all funds immediately.

    For an individual managing modest personal holdings, that risk is manageable. For a business, it is not. If that key is lost or stolen, the funds are gone permanently. For businesses and decentralized autonomous organizations, relying on one person or one device is an unacceptable risk.

    Related readWhat a testnet is and why a payment never belongs on one16 min

    The failure modes compound quickly when you think through real business situations. One employee holds the private key to the company's crypto treasury. That employee leaves under difficult circumstances, loses a device, or becomes unavailable at a critical moment. What if a CFO goes rogue, or your accountant decides to take an extended leave? In these situations, having a single entity or person coordinate assets raises trust issues. A single private key means a single catastrophic point of failure — technically, operationally, and legally.

    What a multisig wallet is

    Multisig wallets, short for multi-signature wallets, are a type of crypto wallet that requires multiple signatures to authorize and execute transactions.

    Multisig technology operates on shared responsibility and consensus, enabling two or more users to jointly sign transactions. Multisig wallets generate multiple private keys that can be distributed among several participants via a smart contract.

    Instead of a single private key controlling assets, a multi-signature wallet enforces a threshold: a transaction executes only after a set number of independent approvals. That threshold is configurable.

    This configuration is written in shorthand as M-of-N, where M is the number of signatures required and N is the total number of keys that exist. The most common configurations in business practice are:

    2-of-3: There are three total keys, but only two are needed to approve a transaction. This is the most widely deployed setup for small business teams. It protects against a single key being lost or compromised while keeping quorum achievable if one keyholder is unavailable.

    3-of-5: A 3-of-5 setup requires three signatures from a pool of five authorized parties. This setup is best for larger groups. DAOs and businesses use it to enforce consensus and reduce internal risk.

    Related readWhat a wallet address actually is and how to share it safely17 min

    Higher thresholds: Lower thresholds typically enable faster operations but reduce fault tolerance. Higher thresholds increase resilience and oversight but can slow execution. The right configuration depends on the organisation's size, the value being held, and how frequently the wallet needs to transact.

    When a multisig wallet is created, the authorised signers are defined at the start. These signers can be individuals, devices, or wallets controlled by different members of a team. The wallet then follows the signature threshold chosen during setup. If someone wants to send funds, they create a transaction proposal. That proposal is visible to the other signers. Once the required number of signers approve the transaction, it can be executed on chain.

    How multisig differs from a standard wallet — technically

    It helps to understand what is actually different at the protocol level, not just the governance level.

    A multi-signature wallet is a type of cryptocurrency wallet that requires multiple signatures, instead of just one, to execute each transaction. These signatures are associated with different cryptographic private keys, and a defined threshold of keys must sign a transaction to validate it.

    Multi-sig typically stores signatures on-chain, offering transparency, decentralization, and lowering risks stemming from a single point of failure. This matters particularly for businesses facing oversight obligations. Multi-sig wallets use entirely separate private keys that produce independent signatures typically recorded directly on-chain. These clear audit trails create transparency. For institutions facing regulatory scrutiny, on-chain multi-sig's transparent governance model is invaluable.

    This transparency is what separates on-chain multisig from MPC (multi-party computation) wallets, which are an alternative technology. MPC wallets split a single private key into encrypted shares, with each party holding a fragment. These shares combine off-chain through cryptographic protocols to sign transactions, but the complete key never exists in one place. Because signing happens off-chain, the MPC model offers advantages in cross-chain compatibility and privacy. MPC is not inherently better or worse — it makes different tradeoffs. For organisations that need visible, verifiable, on-chain proof of approval before funds move, multisig is the appropriate architecture.

    Related readWhat a wrapped token is and whether to accept one as payment17 min

    On Ethereum and EVM-compatible networks, multisig wallets are typically implemented as smart contract wallets. Safe (formerly Gnosis Safe) is a multisig based on smart contracts for Ethereum and EVM networks. It works with ERC-20 tokens and NFTs, letting multiple people approve spending. This smart contract layer is what allows rules — approval thresholds, spending limits, authorised recipient lists — to be enforced programmatically rather than by trusting individuals to follow procedure.

    The genuine business case: five scenarios where multisig earns its place

    1. Corporate treasury holding crypto assets

    Companies that buy crypto or hold digital assets can use multisig wallets to ensure that multiple executives must approve large transactions, enhancing corporate treasury management.

    Consider a property development firm that has begun accepting USDC as part of its capital structure. The treasury holds $2 million (AUD ~3.1 million) in stablecoin reserves. Allowing any single finance team member to move that balance unilaterally — via a single-key wallet — is a governance failure waiting to happen. A 2-of-3 multisig with keys held by the CFO, the CEO, and an external auditor creates the same segregation of duties that would govern any equivalent bank authority structure.

    Internal controls allow organisations to enforce multi-approval processes, increasing accountability and reducing the potential for error or fraud. Multi-sig structures support segregation of duties and can improve asset security — key points in many regulatory frameworks.

    2. Joint venture or multi-party commercial agreements

    When two or more businesses contribute capital to a shared venture — a joint-development agreement, a co-investment structure, a revenue-sharing partnership — neither party should be able to move shared funds unilaterally. Multisig wallets enable shared access, making them suitable for businesses or teams managing joint funds. Each participant has control over one key, ensuring that no single party can move funds unilaterally, fostering trust.

    Related readWhat actually happens in the minutes a payment settles23 min

    This is particularly relevant in markets where formal banking infrastructure for joint accounts is slow to establish or expensive to maintain. A multisig wallet between two joint venture entities can be operational the same day the deal is structured and can be unwound or restructured when the venture concludes — without waiting for bank administration.

    3. OTC trading desks and institutional crypto holdings

    OTC desks that settle large block trades in digital assets need robust custody governance. Self-custody means the team controls the private keys directly, using multi-signature or MPC wallets that require multiple approvals before funds can move.

    For an OTC desk settling a $500,000 (AUD ~780,000) block trade, the operational and reputational risk of a single point of key failure is severe. A 3-of-5 multisig distributes that risk across the trading desk while maintaining the quorum flexibility to execute without requiring every keyholder to be simultaneously available. This structure creates clear lines of responsibility and separation of duties, crucial for institutions with large digital asset portfolios.

    4. DAO and onchain organisational governance

    DAOs rely on shared resources and funds to drive their initiatives. Using shared multisig wallets allows DAO members to uphold transparency and fair use within their system of proposals, voting, and management and allocation of funds. By requiring consensus from multiple members to allocate funds, they prevent fraudulent activities and misuse.

    While DAOs are the most native use case for multisig in the crypto-native world, the same logic applies to any organisation where no single authority should have unilateral control over a pool of funds. A charity accepting crypto donations, a professional association holding a crypto-denominated reserve, or a protocol team managing development grants all benefit from the same governance architecture.

    Related readWhat an ENS or onchain name does for receiving payments17 min

    5. Business continuity and key-loss protection

    If one private key is lost, funds remain safe as long as the signature threshold is met. This is a functional advantage that a single-key wallet simply cannot offer.

    Multisig wallets improve business continuity. If one signer loses access to a device or becomes unavailable, the wallet can still function if the threshold allows enough remaining signers to approve transactions. In a well-structured 2-of-3 setup, a lost device or a departed employee does not mean frozen assets. It means a replacement key can be generated and the threshold can be re-established without the organisation losing access to its holdings.

    The limitations multisig introduces — and they are real

    No tool is without tradeoffs. Understanding multisig's limits is just as important as understanding its benefits, especially for professionals who will rely on it in time-sensitive commercial situations.

    Coordination overhead. Multisig transactions can be slower than single-key transactions, as they require multiple parties to sign and approve the transaction. This can be inconvenient for time-sensitive transactions. When a deal is closing and parties are in different time zones, chasing signatures can introduce meaningful friction.

    Deadlock risk. There is social risk. If signers disagree, transactions can stall. A multisig wallet codifies governance rules, but it cannot resolve the human disagreement that sometimes underlies a blocked signature.

    Key management complexity. Setting up and managing a multi-sig wallet is more technical than using a standard wallet, and interoperability between blockchains may require extra setup. For organisations without dedicated technical staff, the learning curve and ongoing key-management discipline are not trivial.

    Higher transaction costs. Multisig transactions can cost more because they are more complex to create and require more data to be stored. On congested networks, those gas costs can be meaningful, particularly for frequent smaller transactions.

    Related readWhat are gas fees and who pays them in a payment15 min

    Catastrophic key loss. Losing access to one or more of the private keys in a multisig wallet can result in the permanent loss of funds. This is a significant risk that must be carefully mitigated. If a 3-of-5 wallet loses three keys simultaneously — through a disaster, a hostile departure, or poor backup hygiene — funds can become permanently inaccessible.

    These limitations do not make multisig a poor choice. They make it a choice that requires deliberate setup, clear documentation of who holds which key, and a recovery protocol established before it is ever needed.

    What multisig does not solve: distributing funds at settlement

    Here is where many businesses encounter a structural gap that multisig was never designed to close.

    Multisig governs who can authorise a transaction out of a shared wallet. It does not govern where the funds go once authorised, and it does not coordinate simultaneous payouts to multiple parties.

    Think about a commercial real estate closing. The buyer has funded. The deal is ready to settle. The proceeds need to flow — simultaneously — to the seller, the broker, the settlement agent, the legal team, and potentially a lender taking a partial repayment. In a traditional workflow, this disbursement process is managed by a closing attorney or settlement officer, who works sequentially through wire instructions, each carrying counterparty timing risk. When businesses buy or sell financial assets today, payment and delivery rarely settle at the same moment. One side delivers first, the other settles later, and both parties carry risk during the process. If something goes wrong between confirmation and finality, unwinding the transaction is slow and expensive.

    Related readWhat decimals mean in a token amount and why they matter for large sums16 min

    The multisig wallet governs who can authorise the outflow. It does not split it, route it, or guarantee that every party receives their share in the same transaction.

    This is exactly the problem that shaka.deal solves. As a non-custodial onchain payment router built on Ethereum, shaka.deal takes a single incoming payment and distributes it instantly to every party at preset shares — in one transaction, with finality. It never holds funds. It routes them. The moment the transaction confirms on-chain, every party has received their allocation. There is no sequential disbursement, no follow-up wire, no reconciliation lag.

    Settlement plays a key role in reducing counterparty risk and ensuring payment finality. Once a transaction is settled, ownership is transferred, and the transaction is irreversible. This eliminates ambiguity and reinforces trust between parties.

    For the settlement agents, closing attorneys, brokers, and OTC desks who manage multi-party deals, multisig and onchain routing are not competing tools. They are complementary ones. Multisig governs the treasury: who can move funds, under what conditions, with what approvals. Onchain routing governs the settlement event: how those funds flow to every party at the moment the deal is done.

    On a proof-of-stake network like Ethereum, a transaction becomes technically final when it is incorporated into a validated block and subsequently confirmed. Although consensus finality can be formally probabilistic depending on the consensus mechanism used, the economic cost of reversing even a handful of confirmations makes rollback practically impossible. That finality is what gives the settlement agent, the broker, and every other party certainty that the deal has closed — not the promise of a wire arriving tomorrow, but a confirmed, immutable blockchain record.

    Related readWhat finality means on Ethereum and when a payment is truly done16 min

    Putting it together: a layered architecture for serious business

    The cleanest way to think about multisig and onchain payment routing together is as two layers of a single trust architecture.

    Layer one — custody governance. The business holds its crypto assets in a properly configured multisig wallet. The threshold and key distribution reflect the organisation's size, risk tolerance, and succession requirements. No funds move without the required number of approvals. This layer answers the question: who is authorised to initiate a settlement?

    Layer two — settlement execution. When a deal closes and the authorised signers approve, the outflow is routed through shaka.deal. The preset shares are hard-coded into the deal before funds arrive. The moment the transaction executes, every party — seller, broker, agent, counsel — receives their allocation simultaneously. This layer answers the question: how does settlement reach every party instantly, without sequential disbursement risk?

    Neither layer replaces the professionals who structure and oversee the deal. Settlement agents, closing attorneys, and brokers remain the architects of the transaction terms, the custodians of the deal logic, and the parties accountable to their clients. What the two-layer architecture gives them is certainty and speed: certainty that internal governance controls are cryptographically enforced, and speed that compresses the disbursement window from days to seconds.

    Choosing the right multisig configuration

    For businesses approaching this for the first time, configuration choices matter more than product choices. Here is a practical framework:

    Business Configuration How to set it up
    Small business or two-person executive team 2-of-3 Third key held offline or by a trusted external party such as an attorney or accountant. This provides both security and operational continuity without excessive coordination burden.
    Mid-size treasury or joint venture 3-of-5 Keys distributed by role and geography where possible. Define in writing who holds which key, what the recovery process looks like if a key is lost, and under what circumstances a threshold change can be approved.
    Institutional treasury or OTC desk 2-of-3 for redundancy, 3-of-5 for geographically separated, role-based approvals These threshold configurations let teams tune security without adding unnecessary friction. Pair multisig with documented transaction policies that specify spending limits and required approvals by transaction size.

    Multisig wallets offer flexibility, enabling users to customise the number of required signatures based on specific needs and risk tolerance. Multisig setups often provide more robust options for wallet recovery in case of key loss, adding an extra layer of protection.

    The bottom line

    Multisig wallets are a mature, well-understood tool for shared custody of digital assets. Multisignature wallets add an extra layer of security and foster shared accountability. They provide a practical way of distributing control, achieving consensus, and minimising single points of failure when managing a shared pool of funds.

    For any business holding meaningful crypto assets — whether in a joint venture, a corporate treasury, an OTC operation, or a DAO — a properly configured multisig wallet is not an advanced option. It is the governance baseline.

    But multisig governs the custody layer. It does not close the deal. The moment of settlement — when a single payment needs to split instantly across multiple parties with no sequential risk and no manual disbursement process — requires a different tool. That is where shaka.deal sits: routing the total amount of a deal, distributing it simultaneously to every party at their preset share, in one transaction, on Ethereum.

    Used together, multisig custody and onchain payment routing give settlement professionals and commercial teams something that was impossible to deliver cleanly until recently: a transaction that is governed, final, and distributed — all at once.

    Kooky
    Written by
    Kooky

    25+ years shipping on the web, onchain since Bitcoin's early days. Kooky built Shaka so that everyone who closes a deal together gets paid together, the day it closes.

    The story behind Shaka