Ledger CTO Challenges Multisig Wallet Adoption

Charles Guillemet, Ledger's CTO, has expressed concerns about the adoption of multisig wallets as a reaction to recent security incidents. He argues that making wallet setup more complicated could introduce additional risks.

Guillemet emphasizes that multisig makes wallet recovery and management more difficult, citing instances where users create configurations that are cumbersome to recover safely. As an alternative, he suggests using Bitcoin Miniscript, which allows for advanced security without overcomplicating things.

Miniscript enables users to define sophisticated spending conditions, such as inheritance rules and time-locked recovery keys. Ledger's implementation of Miniscript includes 'clear signing' for every spending path, allowing users to verify exactly what they are approving on their hardware wallet.

Guillemet claims that developers find it easier to build custom wallet software using Miniscript. He even demonstrated this by creating a functional Bitcoin wallet with advanced spending policies in just a few hours with the help of AI assistant Claude, and he was comfortable testing the wallet on Bitcoin mainnet due to Ledger's clear-signing approach.

Guillemet also points out that MuSig2, a cryptographic alternative to traditional script-based multisig, is supported by Ledger hardware wallets. However, he emphasizes that security decisions should be based on an individual's threat model rather than reactions to recent headlines.