CustodyStress
Archive › Multisig quorum failure
Part of the CustodyStress archive of observed Bitcoin custody incidents
CS-00920

A cryptocurrency fund's 3-of-5 multisig was compromised in June 2021.

Blocked
Case description
A cryptocurrency fund's 3-of-5 multisig was compromised in June 2021. One key holder's credentials were phished. The attacker gained control of one key and then socially engineered a second key holder to co-sign a fraudulent redemption request by impersonating the fund manager. With two legitimate signatures plus one compromised, the quorum requirement was met and the transaction executed.
Custody context
Stress conditionMultisig quorum failure
Custody systemExchange custody
OutcomeBlocked
DocumentationUnknown
Year observed2021
CountryUnknown
Structural dependencies observed
Third-party platform dependencyInstitutional cooperation required
What this illustrates
Access ran through a third-party platform. When that platform became unavailable, so did the Bitcoin. Access was not recoverable.
Outcome interpretation
Access was not possible under the reported conditions.
Source
Publicly Reported
Evidence type
Forum post
Related cases involving multisig quorum failure
77 cases involve multisig quorum failure 512 cases involve exchange custody View archive statistics →
This archive documents observed custody survivability failures. It does not attempt to document all Bitcoin losses or security incidents. Submit a case
← All cases
Framework references
Terms guide
Survives
Access remained possible under the reported conditions.
Constrained
Access remained possible, but only with delay, dependence, or significant difficulty.
Blocked
Access was not possible under the reported conditions.
Indeterminate
There was not enough information to determine the outcome.
Single-person knowledge
Recovery depended on information or capability held by one individual who was unavailable.
Institutional dependence
Recovery depended on a third-party institution or service that was inaccessible or uncooperative.
Documentation gap
Recovery depended on instructions that were missing, incomplete, or unclear.
Authority mismatch
The person with legal authority to act did not have operational access, or vice versa.
Original text
Rate this translation
Your feedback will be used to help improve Google Translate