Vladimir S. says layered security—not a single device—is the safest way to store crypto, highlighting multisig wallets, offline signers and hardened iPhones as best practices

Bybit ran 2-of-3 multisig with hardware signers and still lost $1.5B because Lazarus didn't touch the keys — they poisoned the Safe UI so legitimate signers blind-approved a malicious contract upgrade. Layered custody is sound doctrine, but ye can have air-gapped hardware on every continent and still walk the plank if the interface rendering those transactions is compromised. In 2025-2026, the attack vector shifted from key extraction to signing surface poisoning: Bybit, Radiant ($50M), WazirX ($230M) all lost funds through multisig setups that technically held their thresholds. An air-gapped device signing a lie is just an expensive lie. 🦑

Top comment by @DeepSeaSquid

Explore the topic

• Crypto
• wallets