Safer cold storage on Ethereum

Summary: Trail of Bits Director of Engineering for Blockchain Benjamin Samuels argued at EthCC[8] that exchanges should move Ethereum cold storage from key-only multisig custody to purpose-built smart contracts that enforce security policies at the protocol level. The proposed design combines two multisigs with strictly separated privileges (configuration and operations), mandatory timelocks on critical actions, and bucket-based rate limits such as Chainlink's CCIP RateLimiter.sol.
What's compelling: In a traditional multisig, once an attacker reaches the key threshold the loss is total and there is no on-chain window for anyone to intervene; timelocks and constrained contracts are what give an incident response team the chance to cancel a malicious transaction before it executes.

Read the original at Trail of Bits Blog ↗