Questions tagged [multi-signature]
Multi-signature addresses require m-of-n signatures to authorize spending funds sent to them.
555
questions
0
votes
0
answers
18
views
Can I use 2 individual private keys to spend from my Bip32 HD 2 or 2 multisig?
Example keys are fake:
If I build a 2 of 2 in Sparrow or any Bip32 Determ wallet, with P2WSH native segwit, and ONLY send funds to the very FIRST receiving address:
m/48'/0'/0'/2'/0/0: ...
- 1
1
vote
1
answer
84
views
Is the signature check performed when the signature is the empty vector?
In this answer Vojtěch Strnad wrote the following:
OP_CHECKSIGADD always performs one check per signature, since unused
public keys are required to be paired with an empty witness item and
are ...
- 61
1
vote
1
answer
56
views
What are the all benefits/advantages of OP_CHECKSIGADD over OP_CHECKMULTISIG?
What are all the benefits of introducing OP_CHECKSIGADD in Taproot instead of OP_CHECKMULTISIG?
I assume the first benefit is the following.
For example, in pre-taproot approach, if we have 3-of-10 ...
- 61
2
votes
1
answer
91
views
What would happen if we provide to OP_CHECKMULTISIG more than threshold number (m) of signatures?
Asked here but still no answer.
What would happen if we provide to OP_CHECKMULTISIG opcode more than threshold number (m) of signatures?
For example, if the m = 3 and n = 6 and the output script is:
3 ...
- 61
0
votes
1
answer
59
views
What's the point of Multi Signature Addresses?
When an attacker has access to the private key of the wallet, he can dump the private keys of every address used for the multisign address(es).
So, what's the point of multi sign addresses when there'...
- 3
4
votes
1
answer
240
views
Is the Schnorr digital signature scheme a multisignature interactive scheme, and also not an aggregated non-interactive scheme?
In his answer Pieter Wuille defined a concepts of multisignature scheme and aggregated signature scheme as follows:
A multisignature scheme is a scheme where multiple parties jointly produce a ...
- 478
1
vote
1
answer
149
views
How to get signature for tweaked public key in P2TR in case of multiple signature?
EDIT: Can we just tweak the signature with the root MAST as well?
As I understand, the public key in scriptPubKey for P2TR is obtained by tweaking (let's call it original public key) and the root of ...
- 478
3
votes
1
answer
81
views
What are the privacy implications of multsig wallets if one half is compromised?
I am trying to work out the privacy implications of the following scenario. Alice and Bob have a multisig wallet together (say Electrum but it doesn't really matter). Alice's computer is somehow ...
- 63
2
votes
1
answer
49
views
How to find out if public keys have been used in other transactions
When we get the public keys from a multisig script is there a way to check what other transactions use those public keys?
I know how to check if they have been used as P2PKH addresses, but I'm not ...
- 63
5
votes
2
answers
347
views
Why are n public keys needed for reconstitution of an x of n multisig?
Trying to conceptually understand why I must store the public keys of the n hardware wallets in an x of n multisig set up? Only x of the seed phrases/private keys are needed to reconstitute/recover ...
- 333
0
votes
1
answer
19
views
From where can I download a precompiled Windows installable Bitcoin core with support of hardware wallet for BitBox02
I wanted to integrate my BitBox02 into the existing Bitcoin Core Version v24.0.1 on my Windows 10 laptop.
In the customization menu I receive the notice that this node does not contain the hardware ...
1
vote
1
answer
115
views
Should different brands of hardware wallets be used in multisig setups?
Is there genuinely a compelling reason to use different brands of hardware wallets in multisig setups? I am contemplating using a series of Coldcard hardware wallets in a multisig setup but some ...
- 161
1
vote
0
answers
22
views
Scripting an escrow transaction where the arbitrator ALWAYS gets paid
I am trying to make an Escrow and Arbitration where the arbitrator always gets paid say 5% of the transaction.
As in the famous escrow example here:
Charlie-the-customer wants to buy a product from ...
- 111
2
votes
1
answer
78
views
Does a set of private keys have a different XPUB and ZPUB for single signature and multisig?
I am experimenting with multisig wallets using Sparrow. I have two Nano Ledger hardware wallets each set up for single signature with different private keys. I used them to create a 2 of 2 multisig ...
- 161
1
vote
1
answer
64
views
Bitcoin Multisig tx signing
I've generated a 2-of-3 P2SH Multisig address (testnet) and am attempting to manually reproduce the signatures to spend from it. While I can replicate the signature for the first key, as produced by ...
- 21
0
votes
1
answer
134
views
Create a multisig wallet using Sparrow wallet with keys (A and (B or C))
Further to the following question:
Can the same set of private keys be used multiple times in a multisig wallet?
I tried to create a multisig wallet with keys (A and (B or C)) in Sparrow wallet using ...
- 161
2
votes
2
answers
166
views
Can the same set of private keys be used multiple times in a multisig wallet?
Is there any limitation to how many times the same set of private keys can exist within a multisig wallet? For example, could a 3 of 4 multisig wallet be created with two of the four keys being ...
- 161
1
vote
2
answers
52
views
Bitcoin inheritance
For a while now I've been wondering what is the best way to setup an inheritance plan for the bitcoin I own. Has any one here set one up? What’s your plan?
- 13
1
vote
3
answers
133
views
Do I need to store my hardware wallet's derivation path?
"Not your keys, not your coins" is common mantra. I thought all I needed to do was to safeguard my private keys (via hardware wallet, cold storage) to be able to reconstitute my BTC at any ...
- 333
1
vote
1
answer
53
views
multiple multisigs with minimal cold devices
I want to maximize security but minimize complexity. Let's say I have large enough sums of BTC that need to be secured into three buckets:
KYC Personal BTC
Non KYC Personal BTC (mined)
KYC Company ...
- 11
2
votes
0
answers
36
views
Receiving funds in multisig - is it enough to confirm the receive address on every signing device?
If I confirm the receive address displayed in my software wallet matches on EVERY signing device in my multisig setup, can I be confident that any funds sent to that address belong to an address I ...
1
vote
0
answers
103
views
multisig vs singlesig
Due to the Ledger debacle I have purchased a Coldcard hardware wallet. I made this decision partly based on watching the Antonopoulos live stream last week. Until now I have backed up my bitcoin on a ...
- 11
-1
votes
1
answer
35
views
List unused multi-sig wallet addresses
Is there a way to list all bitcoin wallet addresses (or at least the count) which are receivers in a multi-sig transaction such that those addresses have never been used as senders in any other ...
3
votes
0
answers
66
views
What is the difference between singlesig and multisig xpubs?
When exporting the xpub from my SeedSigner, I'm asked whether to export the "singlesig xpub" or "multisig xpub." I understand the use cases for each but from a technical standpoint,...
3
votes
1
answer
156
views
Can 2-of-3 multisig funds be recovered without one of the xpubs?
In a 2-of-3 multisig, the address list is derived from the combination of the three xpub keys. What happens if you lose one of the keys and its xpub?
Technically, you'd be able to sign transactions. ...
-1
votes
1
answer
60
views
"Signature must be zero for failed CHECK(MULTI)SIG operation"
I want to broadcast signed transaction but I get this error how can I solve this I get this everytime.
"Signature must be zero for failed CHECK(MULTI)SIG operation"
RAW hex
...
0
votes
2
answers
136
views
Is multisig less secure than single sig, since only one xpub needs to be swapped by an attacker to lose funds?
Scenario: (2 of 3 multisig) one of the hardware wallets is running malware and uses an attackers xpub instead of the one derived from the recovery phrase. This swapped xpub is reported to all the ...
4
votes
2
answers
193
views
Conditional MULTISIG transaction
I need a bitcoin lock script that will require my key and 1 of 4 other people.
For example, If my key is present and one of the 4 other keys are also present, transaction can be claimed. If my key is ...
- 41
1
vote
1
answer
164
views
Can 2 of 2 multisig funds be recovered without the xpubs
Background: I read that in a 2 of 3 setup, all funds would be considered lost in the event that even a single xpub was completely lost.
if you can no longer derive the public keys of all cosigners, ...
1
vote
1
answer
56
views
Can Taproot Script condition over the amount from a particular output being spent
Imagine a single multisig taproot address funded by a buyer. He bought from two vendors in a single order, but the resolution of each order/vendor pair is unknown ahead of time, and will happen at ...
- 287
2
votes
0
answers
55
views
listdescriptors true fails after importing a 2-of-3 multisig descriptor (prv, pub, pub)
By deafult, in a newly created descriptor wallet that is not watch-only and not empty, listdescriptors true works and gives output.
However, here is a scenario that breaks it:
Get a new address in ...
- 287
1
vote
1
answer
95
views
signrawtransactionwithwallet for a multisig-transaction, after getnewaddress
I created a descriptor wallet in bitcoin core 24.
Next, I created a new address with using getnewaddress.
I took pubkey of that address, and used it as one of the three pubkeys when generating a ...
- 287
2
votes
2
answers
179
views
Is there a set length that a signature can be?
I'm reading this page which describes the following method of creating a stack:
OP_0 <A sig> <B sig> OP_2 <A pubkey> <B pubkey> <C pubkey> OP_3
Sig Stack Pubkey ...
- 137
3
votes
2
answers
203
views
Code for computing SigHash for various input types
I am looking for code examples (in rust-bitcoin, but even in Python) of how to calculate sighash for various input types. Specifically, I need to calculate the sighashes for M of N multisig unlocking ...
- 165
2
votes
1
answer
176
views
How to create a 1-of-2 multisig with P2TR?
We have two companies and we want to spend funds with 1-of-2 multisig. We successfully did such a multisig with P2SH. How can I do this in P2TR? Can any give me a detailed instruction step by step?
...
- 51
1
vote
1
answer
51
views
How do I view Multisig Trades using bitcoincore?
For a school project my goal is to go analyze multisig trades, is there a way where I can make this information any more clear to me?
I have been running bitcoincore as a way to get trades that I can ...
- 11
0
votes
2
answers
158
views
How can I create a multi sign for a large number of users
I want to create a DAO-like wallet where each member would have to sign for any given tx.
Tx should go through if 51% of the users signed.
Is this possible?
- 123
1
vote
1
answer
488
views
A good wallet for Taproot multisig?
Sparrow only has Taproot single sig, and it is based on Xpub, which is a hodgepodge duct tape method combining pre-taproot and taproot.
Electrum zero Taproot. When asked "wen Taproot" ...
user140245
2
votes
1
answer
70
views
What is the purpose of BIP32 derivation paths in PSBT?
Does the wallet software use the Bip32 derivation paths to generate the partial signature map?
- 51
3
votes
1
answer
335
views
How to resolve error when trying to sign and broadcast PSBT transaction via electrum - (Witness program hash mismatch code -26)?
I'm trying to generate a 2-of-2 multisig transaction as a PSBT so that both parties can easily sign their transaction. I'm doing this all on btc testnet as a p2sh p2wsh transaction
When initially ...
- 51
2
votes
0
answers
38
views
Create transaction with inputs of two different HD wallets
Is it possible to create one Bitcoin transaction with input UTXOs of two different HD-Wallets? E.g. using an UTXO of a Software Wallet and one UTXO of an Hardware Wallet.
Of course I think it is ...
- 153
4
votes
2
answers
844
views
Why CHECKMULTISIG bug can't be solved?
I was reading Mastering Bitcoin and I read about a bug in CHECKMULTISIG. If the starting ideas of this command should work like this
<Signature B><Signature C> M <Public key A><...
- 185
-1
votes
2
answers
117
views
Alternative methods to transfer BTC from an old Coinbase multisig Vault
Issue: I am trying to access funds I had stored in a legacy Coinbase Vault 2/3 multisig wallet using the Coinbase multisig recovery tool (https://coinbase.github.io/multisig-tool/) . I have all of the ...
2
votes
2
answers
70
views
Precedence of competing multisig spends
Imagine I want to create a multisig threshold (k-of-n) scheme where a spending transaction with more signatures takes precedence over other spending transactions with less signatures (but in both ...
- 449
2
votes
1
answer
64
views
What is the minimum count of signatures and keys in OP_CHECKMULTISIG?
Is it permissible to use OP_CHECKMULTISIG with 0 signatures or 0 keys? I.e. are 0-of-X or 0-of-0 outputs allowed per the protocol? Are they standard?
- 72.6k
0
votes
1
answer
109
views
Are there old school Base58 or hex private keys behind a newer HW wallet multisig public address? And can I use them to spend?
I know from using bip39 to build wallets, that each receiving address and corresponding public address does have a base58 private key behind it. And if I know this private key, I can sweep it ...
- 1
1
vote
2
answers
191
views
What's cheaper, musig or multisig?
Taproot transactions aren't always cheaper onchain compared to their segwit native counterparts. How does the current MuSig spec fare compared to multisig onchain? Is one always cheaper than the other ...
- 1,710
1
vote
1
answer
73
views
Why doesn't Casa use hardened derivation?
I've noticed that Casa uses non-hardened derivation paths for both their key and my HW keys.
The path is the following m/49/0/1.
Does anyone have an idea of why it's the case? I mean, the risk of ...
- 21
1
vote
1
answer
111
views
If Multisig Xpub is compromised, but not the seeds or wallets
I have a multisig set up.
My seeds and hardware wallets are secure.
However, what would happen if someone got a hold of my Xpub file only?
Am I correct they could view my holdings and transactions, ...
- 21
1
vote
1
answer
193
views
Can I create an entirely new m-of-n multi-sig wallet with the same seed phrases as an existing one by increasing n and discarding the new seed phrase?
If I were to create a 2-of-4 multi-sig wallet using the 3 seed phrases of an existing 2-of-3 wallet, plus a new seed phrase that I instantly destroy, would I then effectively have a new completely ...
- 11