Custodial Multi-Sig Vulnerability
Custodial multi-sig vulnerability refers to the risk that the private keys controlling a bridge's reserves are compromised or held by a small, centralized group of actors. Many bridges rely on a multi-signature wallet to authorize the release of collateral; if a majority of the signers are compromised or collude, they can drain the reserves.
This is a significant point of failure that contradicts the decentralized ethos of the underlying assets. In the context of derivatives, if the bridge controlling the collateral is compromised, the derivative protocol's entire treasury could be at risk.
Improving security requires moving toward decentralized validator sets, threshold signature schemes, or hardware security modules to protect the keys. Transparency regarding the signing authority and the security practices of the bridge operators is paramount for institutional users.