After the Cold Card Hack, the Nico and Opti Make the Case for Multisig Over Single Signature
The Cold Card entropy bug did more than cost Bitcoin holders money. It changed how the hosts talk about self custody on air, and they used the show to admit they had not been vocal enough about it.
THE LESSON FROM JULY 30
The hosts described the fallout from the entropy bug as a wake up call for the entire self custody movement. Bitcoin holders who did everything the community told them to do, holding their own keys instead of leaving funds on an exchange, were the ones who got hurt, not the traders who left coins on custodial platforms. That reversal, the hosts argued, is what makes the incident different from past exchange failures.
One host said he had been advising friends and family privately to move to multisig setups for years but had not pushed the message publicly, worried that adding complexity would raise the barrier to entry for people just getting started with self custody. He called that a mistake in hindsight and said the recommendation now, stated plainly, is that anyone holding a significant share of their net worth in Bitcoin should be using multisig, not a single signature wallet.
WHY SINGLE SIG STILL HAS A PLACE
Foundation Devices CEO Zach Herbert, who joined the show earlier in the same episode, pushed back on the idea that the incident proves single signature wallets are unsafe. His view was that the industry cannot solve this by only serving the most technical 0.01 percent of Bitcoin holders while everyone else keeps funds on an exchange out of fear. He said single sig combined with a strong passphrase remains sound, and that Cold Card users who had set a passphrase were not affected by the entropy bug regardless of which firmware they were running.
The hosts landed on a middle position: single sig is fine for a spending wallet holding an amount a person is comfortable losing, but savings meant to last should not sit behind one key generated by one device.
WHAT MULTISIG ACTUALLY BUYS YOU
The hosts walked through why a multisig setup, typically two of three keys required to move funds, protects against more than just a hacked device. If one key is compromised, whether through a firmware bug or a physical theft, the attacker still cannot move funds without a second key. That also defends against a wrench attack, where someone physically threatens a holder for access to their coins, since no single person or device holds enough to complete a transaction alone.
The hosts pointed out that large exchanges and custodians already operate this way internally, typically using three of five or similar multi key setups rather than trusting any single key to move client funds. Options for individual holders range from collaborative custody services that hold one key on a user's behalf, to fully self managed multisig built with tools like Electrum or Sparrow Wallet for holders willing to take on the added complexity themselves.
THE PART THAT WAS MISSING
The hosts said the real failure on their end was not the advice itself but how it was delivered. Telling people to take self custody of their Bitcoin without the follow up caveat, that a large holding should be split across multiple keys and ideally multiple vendors, left out the step that would have protected people from exactly this kind of single point of failure. Going forward, that caveat is now part of the message.
This story comes from the Simply Bitcoin Live show. Watch the full episode.
