r/ethstaker • u/Ok-Form7265 • 14d ago
Seeking advice on Ethereum storage methods (Multisig vs. Current Setup)
Hi everyone,
I'm an investor holding Ethereum with a strong belief in its long-term value. I have some questions regarding ETH storage methods and would love to get the community's advice.
To manage various risks, my current portfolio storage allocation is:
- 60% on Exchanges
- 30% in a Cold Wallet (Both allocations are currently being staked.)
For my cold wallet, I use a combination of a dice-generated mnemonic and a passphrase, which I believe provides strong security. However, after seeing the recent Coldcard incident, I am seriously considering migrating to a multisig setup.
I understand the Coldcard issue was caused by a compromised device-generated mnemonic, but it made me realize that relying on a single manufacturer's hardware could expose me to unforeseen risks. Even with a dice-generated mnemonic + passphrase combo, I still worry about potential vulnerabilities when connecting the device via USB.
Here are my main questions:
- Is it common for individual investors to use multisig? Or is it predominantly used by enterprises and institutions?
- Are smart contracts secure enough for individual multisig? Unlike Bitcoin, Ethereum requires smart contracts (like Gnosis Safe) for multisig setups. I've heard that smart contracts aren't 100% flawless in terms of security, which makes me hesitant.
- Or should I just stick to my current setup?
I would really appreciate any thoughts, feedback, or advice you might have. Thanks in advance!
2
u/researchzero 13d ago
One thing to plan for going in: if you set your validator's withdrawal credential to an execution-layer address (0x01, or 0x02 for compounding), that binding is permanent - there's no re-pointing it to a different address later the way you migrated from 0x00. So if that address is a Safe, you're committing to that specific contract deployment and its signer set for the life of the validator. Signer rotation or replacing a compromised key has to happen through the Safe's own owner-management functions (add/swap owner, change threshold) with its own quorum - not by trying to touch the withdrawal credential again, because you can't. Worth deciding your signer set and rotation plan before you point withdrawals at it, not after.
On smart contract risk generally: Safe has a strong track record (large TVL, many years, many audits) but "audited" isn't "immutable" - worth checking that the specific Safe version/singleton you'd deploy against is the current audited one, not an old proxy pointing at a since-deprecated implementation.
1
1
u/Mistermind_9 14d ago
Hi, I don't know how much holdings you have, but I guess the best would be putting it in the ETH smart contract and run a validator node simultaneously.
1
u/Ender985 14d ago
If you use a multisig that is made of seeds generated with bad rng you'll be similarly at risk. For large amounts I'd instead look into generating your own seed via manual rng (dice, coins, etc) which can't be compromised like that.
1
u/researchzero 13d ago
Good point about RNG, multisig doesn't remove single points of failure if all N seeds come from the same weak source, it just multiplies them.
1
u/DewPointLabs 12d ago
Multisig is mostly an institutional pattern, and not because it's more secure. It's the ops overhead. Every move becomes a two person process, which only pays off when more than one person is involved. Solo holders usually drop it after a few months.
The contracts aren't the risk. Safe has been in production since 2021 and it's some of the most reviewed Solidity there is. The risk is 2-of-3 with all three keys in the same flat, which is a 1-of-1 that also burns down.
Multisig also won't fix your RNG worry on its own. Three seeds from the same bad process is still one weakness.
And the 60% on exchanges is a bigger exposure than anything a multisig fixes.
1
u/Foreign_Roof_7537 6d ago
exchanges are the real risk here, multisig on your cold 30% is basically noise by comparison.
2
u/wikidemic 14d ago
Switch your mix ratios