<img src="https://res.cloudinary.com/dgvnuwspr/image/upload/v1742799786/sroo41rte2z27ryot14s.png" alt="" title="" width="120" height="65">ContextRecently, the crypto ecosystem has seen an uptick in attacks targeting multisigs. Unlike other smart contract hacks, these exploits <a class="link" href="https://www.nytimes.com/2025/03/06/technology/bybit-crypto-hack-north-korea.html">have targeted the infrastructure stack</a>. These incidents clearly show that the attack surface is far larger than just on-chain components — compromised signing interfaces can be just as catastrophic.<a class="link" href="https://squads.so/">Squads</a> is the leading multi-sig provider on Solana. However, secure signing on Squads is still a difficult problem today, both from a user education and technical perspective. While some <a class="link" href="https://osec.io/blog/2025-02-22-multisig-security/">work has been published</a>, secure signing is still a comparatively under-researched area. OtterSec is working with Squads to sponsor improvements to the signing experience for high-value transactions.DeliverableThe deliverable is intentionally flexible. We’re looking for meaningful improvements to the status quo. This could come in many different forms, for example:<ol class="list-node"><li>Clear written or video documentation explaining the secure signing process</li><li>Alternative CLI or frontend implementations to interact with the Squads contract.</li><li>Novel discussion of attack vectors or potential mitigations</li></ol>Judging CriterionSubmissions will be judged based on novelty, technical depth, and completeness. All submissions must be original — any plagiarized work will be disqualified.Resources<ol class="list-node"><li><a class="link" href="https://github.com/Squads-Protocol/v4/tree/main/cli">https://github.com/Squads-Protocol/v4/tree/main/cl</a>i</li><li><a class="link" href="https://docs.squads.so/main/additional-resources/advanced-security-best-practices">https://docs.squads.so/main/additional-resources/advanced-security-best-practices</a></li></ol>

Securing Squads

Securing Squads