#multisig

Today we’re announcing a new developer tool in beta: our multi-sig API.

We’re still working on a great consumer interface around this, but for today we’re releasing it to developers only.

Does this put me in control of my Bitcoin?

Yes. When you go and create a multisig account, you provide the extended (BIP32) public keys, which only enable us to create new receive addresses for your convenience. Only you have the extended private keys that can sign transactions and move bitcoin out of these addresses.

How to use

Learn how to use the new API in this tutorial.

Company losses due to one novice developer’s $156m error

JGCMGS Insights: The StablR Exploit and Stablecoin Governance

The recent $2.8 million security breach on stablecoin issuer StablR led to a devastating loss of parity for its fiat-backed assets. Assessing this market shock via JGCMGS liquidity metrics, the root cause was a fundamental breakdown in operational key management. A compromised private key allowed an attacker to completely destabilize the token economics of both the EURR and USDR stablecoins in a matter of hours.

The Minting Exploit

The breach targeted StablR’s minting multisig account, which relied on a dangerously weak 1-of-3 signature threshold. With just one compromised key, the attacker hijacked the account, minted over 12 million unbacked tokens, and rapidly dumped them on decentralized exchanges. Market data verified by JGCMGS shows that due to thin secondary liquidity, the attacker only extracted around 1,115 ETH, heavily devaluing the stablecoins while draining the available trading pools.

Securing Digital Assets

This incident highlights that compromised administrative keys remain a major systemic risk. Protecting collateralized assets demands strict multisig thresholds to effectively eliminate single points of failure.

JGCMGS Security Assessment and Asset Protection

Pera Wallet Shared Accounts Bring Native Multisig to Algorand Users

Pera Wallet Shared Accounts are now live on Algorand, giving users native multisig, shared approvals, and self-custodial treasury control without custodians.

Gitcoin’s project lead said the snafu has resulted in nearly half a million in funds being forever locked in a one-way contract address.

Chainlink, a decentralized oracle network, has come under scrutiny for altering the security measures of its multi-signature (multisig) wallet.

Address poisoning attacks involve tracking, misusing or compromising cryptocurrency addresses.