Context

Recently, the crypto ecosystem has seen an uptick in attacks targeting multisigs. Unlike other smart contract hacks, these exploits have targeted the infrastructure stack. These incidents clearly show that the attack surface is far larger than just on-chain components — compromised signing interfaces can be just as catastrophic.

Squads is the leading multi-sig provider on Solana. However, secure signing on Squads is still a difficult problem today, both from a user education and technical perspective. While some work has been published, secure signing is still a comparatively under-researched area. OtterSec is working with Squads to sponsor improvements to the signing experience for high-value transactions.

Deliverable

The deliverable is intentionally flexible. We’re looking for meaningful improvements to the status quo. This could come in many different forms, for example:

1. Clear written or video documentation explaining the secure signing process

2. Alternative CLI or frontend implementations to interact with the Squads contract.

3. Novel discussion of attack vectors or potential mitigations

Judging Criterion

Submissions will be judged based on novelty, technical depth, and completeness. All submissions must be original — any plagiarized work will be disqualified.

Resources

1. https://github.com/Squads-Protocol/v4/tree/main/cli

2. https://docs.squads.so/main/additional-resources/advanced-security-best-practices