Questions tagged [multi-signature]

Multi-signature addresses require m-of-n signatures to authorize spending funds sent to them.

Filter by
Sorted by
Tagged with
0 votes
0 answers
18 views

Can I use 2 individual private keys to spend from my Bip32 HD 2 or 2 multisig?

Example keys are fake: If I build a 2 of 2 in Sparrow or any Bip32 Determ wallet, with P2WSH native segwit, and ONLY send funds to the very FIRST receiving address: m/48'/0'/0'/2'/0/0: ...
George's user avatar
  • 1
1 vote
1 answer
84 views

Is the signature check performed when the signature is the empty vector?

In this answer Vojtěch Strnad wrote the following: OP_CHECKSIGADD always performs one check per signature, since unused public keys are required to be paired with an empty witness item and are ...
Mudja Adjum's user avatar
1 vote
1 answer
56 views

What are the all benefits/advantages of OP_CHECKSIGADD over OP_CHECKMULTISIG?

What are all the benefits of introducing OP_CHECKSIGADD in Taproot instead of OP_CHECKMULTISIG? I assume the first benefit is the following. For example, in pre-taproot approach, if we have 3-of-10 ...
Mudja Adjum's user avatar
2 votes
1 answer
91 views

What would happen if we provide to OP_CHECKMULTISIG more than threshold number (m) of signatures?

Asked here but still no answer. What would happen if we provide to OP_CHECKMULTISIG opcode more than threshold number (m) of signatures? For example, if the m = 3 and n = 6 and the output script is: 3 ...
Mudja Adjum's user avatar
0 votes
1 answer
59 views

What's the point of Multi Signature Addresses?

When an attacker has access to the private key of the wallet, he can dump the private keys of every address used for the multisign address(es). So, what's the point of multi sign addresses when there'...
Otijun's user avatar
  • 3
4 votes
1 answer
240 views

Is the Schnorr digital signature scheme a multisignature interactive scheme, and also not an aggregated non-interactive scheme?

In his answer Pieter Wuille defined a concepts of multisignature scheme and aggregated signature scheme as follows: A multisignature scheme is a scheme where multiple parties jointly produce a ...
LeaBit's user avatar
  • 478
1 vote
1 answer
149 views

How to get signature for tweaked public key in P2TR in case of multiple signature?

EDIT: Can we just tweak the signature with the root MAST as well? As I understand, the public key in scriptPubKey for P2TR is obtained by tweaking (let's call it original public key) and the root of ...
LeaBit's user avatar
  • 478
3 votes
1 answer
81 views

What are the privacy implications of multsig wallets if one half is compromised?

I am trying to work out the privacy implications of the following scenario. Alice and Bob have a multisig wallet together (say Electrum but it doesn't really matter). Alice's computer is somehow ...
user2334659's user avatar
2 votes
1 answer
49 views

How to find out if public keys have been used in other transactions

When we get the public keys from a multisig script is there a way to check what other transactions use those public keys? I know how to check if they have been used as P2PKH addresses, but I'm not ...
user2334659's user avatar
5 votes
2 answers
347 views

Why are n public keys needed for reconstitution of an x of n multisig?

Trying to conceptually understand why I must store the public keys of the n hardware wallets in an x of n multisig set up? Only x of the seed phrases/private keys are needed to reconstitute/recover ...
Runeaway3's user avatar
  • 333
0 votes
1 answer
19 views

From where can I download a precompiled Windows installable Bitcoin core with support of hardware wallet for BitBox02

I wanted to integrate my BitBox02 into the existing Bitcoin Core Version v24.0.1 on my Windows 10 laptop. In the customization menu I receive the notice that this node does not contain the hardware ...
Thomas Völker's user avatar
1 vote
1 answer
115 views

Should different brands of hardware wallets be used in multisig setups?

Is there genuinely a compelling reason to use different brands of hardware wallets in multisig setups? I am contemplating using a series of Coldcard hardware wallets in a multisig setup but some ...
Guru Josh's user avatar
  • 161
1 vote
0 answers
22 views

Scripting an escrow transaction where the arbitrator ALWAYS gets paid

I am trying to make an Escrow and Arbitration where the arbitrator always gets paid say 5% of the transaction. As in the famous escrow example here: Charlie-the-customer wants to buy a product from ...
Farahats9's user avatar
  • 111
2 votes
1 answer
78 views

Does a set of private keys have a different XPUB and ZPUB for single signature and multisig?

I am experimenting with multisig wallets using Sparrow. I have two Nano Ledger hardware wallets each set up for single signature with different private keys. I used them to create a 2 of 2 multisig ...
Guru Josh's user avatar
  • 161
1 vote
1 answer
64 views

Bitcoin Multisig tx signing

I've generated a 2-of-3 P2SH Multisig address (testnet) and am attempting to manually reproduce the signatures to spend from it. While I can replicate the signature for the first key, as produced by ...
Pawel's user avatar
  • 21
0 votes
1 answer
134 views

Create a multisig wallet using Sparrow wallet with keys (A and (B or C))

Further to the following question: Can the same set of private keys be used multiple times in a multisig wallet? I tried to create a multisig wallet with keys (A and (B or C)) in Sparrow wallet using ...
Guru Josh's user avatar
  • 161
2 votes
2 answers
166 views

Can the same set of private keys be used multiple times in a multisig wallet?

Is there any limitation to how many times the same set of private keys can exist within a multisig wallet? For example, could a 3 of 4 multisig wallet be created with two of the four keys being ...
Guru Josh's user avatar
  • 161
1 vote
2 answers
52 views

Bitcoin inheritance

For a while now I've been wondering what is the best way to setup an inheritance plan for the bitcoin I own. Has any one here set one up? What’s your plan?
Sebastian's user avatar
1 vote
3 answers
133 views

Do I need to store my hardware wallet's derivation path?

"Not your keys, not your coins" is common mantra. I thought all I needed to do was to safeguard my private keys (via hardware wallet, cold storage) to be able to reconstitute my BTC at any ...
Runeaway3's user avatar
  • 333
1 vote
1 answer
53 views

multiple multisigs with minimal cold devices

I want to maximize security but minimize complexity. Let's say I have large enough sums of BTC that need to be secured into three buckets: KYC Personal BTC Non KYC Personal BTC (mined) KYC Company ...
Francis's user avatar
  • 11
2 votes
0 answers
36 views

Receiving funds in multisig - is it enough to confirm the receive address on every signing device?

If I confirm the receive address displayed in my software wallet matches on EVERY signing device in my multisig setup, can I be confident that any funds sent to that address belong to an address I ...
chaulmianmints's user avatar
1 vote
0 answers
103 views

multisig vs singlesig

Due to the Ledger debacle I have purchased a Coldcard hardware wallet. I made this decision partly based on watching the Antonopoulos live stream last week. Until now I have backed up my bitcoin on a ...
Sam's user avatar
  • 11
-1 votes
1 answer
35 views

List unused multi-sig wallet addresses

Is there a way to list all bitcoin wallet addresses (or at least the count) which are receivers in a multi-sig transaction such that those addresses have never been used as senders in any other ...
sandeep kiran p's user avatar
3 votes
0 answers
66 views

What is the difference between singlesig and multisig xpubs?

When exporting the xpub from my SeedSigner, I'm asked whether to export the "singlesig xpub" or "multisig xpub." I understand the use cases for each but from a technical standpoint,...
Oliver Offing's user avatar
3 votes
1 answer
156 views

Can 2-of-3 multisig funds be recovered without one of the xpubs?

In a 2-of-3 multisig, the address list is derived from the combination of the three xpub keys. What happens if you lose one of the keys and its xpub? Technically, you'd be able to sign transactions. ...
Oliver Offing's user avatar
-1 votes
1 answer
60 views

"Signature must be zero for failed CHECK(MULTI)SIG operation"

I want to broadcast signed transaction but I get this error how can I solve this I get this everytime. "Signature must be zero for failed CHECK(MULTI)SIG operation" RAW hex ...
K. Khurshudyan's user avatar
0 votes
2 answers
136 views

Is multisig less secure than single sig, since only one xpub needs to be swapped by an attacker to lose funds?

Scenario: (2 of 3 multisig) one of the hardware wallets is running malware and uses an attackers xpub instead of the one derived from the recovery phrase. This swapped xpub is reported to all the ...
chaulmianmints's user avatar
4 votes
2 answers
193 views

Conditional MULTISIG transaction

I need a bitcoin lock script that will require my key and 1 of 4 other people. For example, If my key is present and one of the 4 other keys are also present, transaction can be claimed. If my key is ...
Anıl's user avatar
  • 41
1 vote
1 answer
164 views

Can 2 of 2 multisig funds be recovered without the xpubs

Background: I read that in a 2 of 3 setup, all funds would be considered lost in the event that even a single xpub was completely lost. if you can no longer derive the public keys of all cosigners, ...
chaulmianmints's user avatar
1 vote
1 answer
56 views

Can Taproot Script condition over the amount from a particular output being spent

Imagine a single multisig taproot address funded by a buyer. He bought from two vendors in a single order, but the resolution of each order/vendor pair is unknown ahead of time, and will happen at ...
Meglio's user avatar
  • 287
2 votes
0 answers
55 views

listdescriptors true fails after importing a 2-of-3 multisig descriptor (prv, pub, pub)

By deafult, in a newly created descriptor wallet that is not watch-only and not empty, listdescriptors true works and gives output. However, here is a scenario that breaks it: Get a new address in ...
Meglio's user avatar
  • 287
1 vote
1 answer
95 views

signrawtransactionwithwallet for a multisig-transaction, after getnewaddress

I created a descriptor wallet in bitcoin core 24. Next, I created a new address with using getnewaddress. I took pubkey of that address, and used it as one of the three pubkeys when generating a ...
Meglio's user avatar
  • 287
2 votes
2 answers
179 views

Is there a set length that a signature can be?

I'm reading this page which describes the following method of creating a stack: OP_0 <A sig> <B sig> OP_2 <A pubkey> <B pubkey> <C pubkey> OP_3 Sig Stack Pubkey ...
bitcoinluvr6969's user avatar
3 votes
2 answers
203 views

Code for computing SigHash for various input types

I am looking for code examples (in rust-bitcoin, but even in Python) of how to calculate sighash for various input types. Specifically, I need to calculate the sighashes for M of N multisig unlocking ...
Alec Matusis's user avatar
2 votes
1 answer
176 views

How to create a 1-of-2 multisig with P2TR?

We have two companies and we want to spend funds with 1-of-2 multisig. We successfully did such a multisig with P2SH. How can I do this in P2TR? Can any give me a detailed instruction step by step? ...
Wei's user avatar
  • 51
1 vote
1 answer
51 views

How do I view Multisig Trades using bitcoincore?

For a school project my goal is to go analyze multisig trades, is there a way where I can make this information any more clear to me? I have been running bitcoincore as a way to get trades that I can ...
Glimyp's user avatar
  • 11
0 votes
2 answers
158 views

How can I create a multi sign for a large number of users

I want to create a DAO-like wallet where each member would have to sign for any given tx. Tx should go through if 51% of the users signed. Is this possible?
pxr_64's user avatar
  • 123
1 vote
1 answer
488 views

A good wallet for Taproot multisig?

Sparrow only has Taproot single sig, and it is based on Xpub, which is a hodgepodge duct tape method combining pre-taproot and taproot. Electrum zero Taproot. When asked "wen Taproot" ...
user avatar
2 votes
1 answer
70 views

What is the purpose of BIP32 derivation paths in PSBT?

Does the wallet software use the Bip32 derivation paths to generate the partial signature map?
btctestdev11's user avatar
3 votes
1 answer
335 views

How to resolve error when trying to sign and broadcast PSBT transaction via electrum - (Witness program hash mismatch code -26)?

I'm trying to generate a 2-of-2 multisig transaction as a PSBT so that both parties can easily sign their transaction. I'm doing this all on btc testnet as a p2sh p2wsh transaction When initially ...
btctestdev11's user avatar
2 votes
0 answers
38 views

Create transaction with inputs of two different HD wallets

Is it possible to create one Bitcoin transaction with input UTXOs of two different HD-Wallets? E.g. using an UTXO of a Software Wallet and one UTXO of an Hardware Wallet. Of course I think it is ...
steff123's user avatar
  • 153
4 votes
2 answers
844 views

Why CHECKMULTISIG bug can't be solved?

I was reading Mastering Bitcoin and I read about a bug in CHECKMULTISIG. If the starting ideas of this command should work like this <Signature B><Signature C> M <Public key A><...
Paro's user avatar
  • 185
-1 votes
2 answers
117 views

Alternative methods to transfer BTC from an old Coinbase multisig Vault

Issue: I am trying to access funds I had stored in a legacy Coinbase Vault 2/3 multisig wallet using the Coinbase multisig recovery tool (https://coinbase.github.io/multisig-tool/) . I have all of the ...
Mark Rather's user avatar
2 votes
2 answers
70 views

Precedence of competing multisig spends

Imagine I want to create a multisig threshold (k-of-n) scheme where a spending transaction with more signatures takes precedence over other spending transactions with less signatures (but in both ...
Son Kaos999's user avatar
2 votes
1 answer
64 views

What is the minimum count of signatures and keys in OP_CHECKMULTISIG?

Is it permissible to use OP_CHECKMULTISIG with 0 signatures or 0 keys? I.e. are 0-of-X or 0-of-0 outputs allowed per the protocol? Are they standard?
Murch's user avatar
  • 72.6k
0 votes
1 answer
109 views

Are there old school Base58 or hex private keys behind a newer HW wallet multisig public address? And can I use them to spend?

I know from using bip39 to build wallets, that each receiving address and corresponding public address does have a base58 private key behind it. And if I know this private key, I can sweep it ...
George's user avatar
  • 1
1 vote
2 answers
191 views

What's cheaper, musig or multisig?

Taproot transactions aren't always cheaper onchain compared to their segwit native counterparts. How does the current MuSig spec fare compared to multisig onchain? Is one always cheaper than the other ...
arshbot's user avatar
  • 1,710
1 vote
1 answer
73 views

Why doesn't Casa use hardened derivation?

I've noticed that Casa uses non-hardened derivation paths for both their key and my HW keys. The path is the following m/49/0/1. Does anyone have an idea of why it's the case? I mean, the risk of ...
beefgroin's user avatar
1 vote
1 answer
111 views

If Multisig Xpub is compromised, but not the seeds or wallets

I have a multisig set up. My seeds and hardware wallets are secure. However, what would happen if someone got a hold of my Xpub file only? Am I correct they could view my holdings and transactions, ...
user135120's user avatar
1 vote
1 answer
193 views

Can I create an entirely new m-of-n multi-sig wallet with the same seed phrases as an existing one by increasing n and discarding the new seed phrase?

If I were to create a 2-of-4 multi-sig wallet using the 3 seed phrases of an existing 2-of-3 wallet, plus a new seed phrase that I instantly destroy, would I then effectively have a new completely ...
evo_race's user avatar

1
2 3 4 5
12