Multisig Governance Vulnerabilities
Multisig governance vulnerabilities arise when the management of a protocol's multisignature wallet is poorly structured or insecure. These wallets require a certain number of signatures to authorize actions, such as upgrading a smart contract or moving funds.
If the keys are held by too few people, or if the security of the key holders is compromised, the entire protocol is at risk. Attackers often target the individuals holding these keys through social engineering or phishing.
Furthermore, if the governance process is not transparent, the multisig owners can make unilateral decisions that negatively impact users. Securing a multisig requires distributing keys across independent, geographically dispersed entities and ensuring that governance decisions are subject to community oversight and time-locks.