I'm particularly interested in this for large n multi-sig wallets. For example, if m-of-n is 4-of-6, and 6 different people (e.g. 6 non-profit co-directors) hold each of the n keys. If one day all of the wallet is emptied just using 4 (m) keys, will the 2 (n-m) people be able to determine which were the 4 keys and thereby the 4 co-directors that emptied the wallet?


The signatures and public keys have to be supplied to spend the coins so yes you can tell by looking at the spending transaction on the blockchain.

| improve this answer | |
  • So then I would need to know which individuals hold which public keys from the beginning, when the wallet is created? – Aaron Perlmutter Apr 8 '18 at 14:13
  • Yes, that's correct – Raghav Sood Apr 8 '18 at 14:19
  • 1
    This mechanism is also only generally available to the participants in the multisig construction, if the common advice of no key reuse is followed. – Pieter Wuille Apr 8 '18 at 16:20

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.