When a firmware bug let attackers sweep an estimated 1,367 BTC from Coldcard wallets this month, the question our readers asked was not whether Bitcoin broke. It did not; we covered the mechanics at the time. The question was sharper: how do you hold bitcoin so that no single flaw, in any one device from any one company, can take it? The oldest answer in Bitcoin is still the best one, and it is built into the protocol: multisignature.
A 2-of-3 multisig splits control across three keys, each held on its own hardware device, and requires any two of them to sign before a coin moves. Run through the Coldcard episode again under that setup: the bug produces guessable seeds on one vendor's device, the attacker derives one of your three keys, and gets nothing, because one key cannot sign alone. Theft now requires two independent failures at once. The same arithmetic protects you from yourself: lose a device to fire, flood or a drawer you cannot find, and the remaining two keys still move the coins.
The design only delivers that promise if the three keys do not share a weakness, which is why the devices should come from different manufacturers: separate firmware, separate supply chains, separate bugs. A common build uses three signers coordinated by Sparrow Wallet, free desktop software (current release, July 2026) that watches balances and drafts transactions but holds no keys itself. Each device contributes only its extended public key; private keys never touch the computer.
Now the part most guides bury, and the most common way people lose multisig funds without being attacked. Recovering a 2-of-3 wallet does not take two seed phrases. It takes two seed phrases plus the wallet descriptor: the small file recording which three keys belong together, the derivation paths, and the script type. Without it, even someone holding all three seeds may be unable to reassemble the wallet in practice. The descriptor is not secret the way a seed is (it reveals your balance to whoever reads it, but cannot spend), so the rule is simple: store a copy of the descriptor with every key backup, in every location.
Two closing disciplines make the difference between owning a vault and believing you own one. First, test before you trust: send a small amount in, then spend it back out using two devices, verifying the address on each device's own screen, before any real balance arrives. Second, be honest about the trade-off: multisig adds coordination, makes inheritance planning harder, and slightly raises transaction fees. For modest holdings, a single well-made signer with a passphrase remains a defensible choice. But if the Coldcard episode taught one lesson, it is that "well-made" is a judgment renewed with every firmware update, and 2-of-3 is how you stop renewing it on faith.
This is general market commentary, not investment advice or a recommendation to buy or sell any asset.