Ledger Multisig: A New Era of Security for On-Chain Organizations

At Ledger, our mission has always been to set the standard for digital asset security – uncompromising, verifiable, and absolute. It was therefore a natural and necessary step for us to address a fundamental vulnerability in the multisig ecosystem – blind signing. So today, we are proud to announce Ledger Multisig: the experience and security layer that brings world-class Clear Signing Safe accounts.

For years, multi-signature wallets have been a cornerstone of on-chain security, allowing DAOs, dApps, DeFi protocols, funds or any company to manage collective assets. The principle is sound: require multiple approvals to prevent single points of failure. Yet, within this trusted model blind signing ,a silent, critical flaw has been accepted as “the cost of doing business” for too long.

To mitigate this, savvy teams rely on off-device transaction simulation tools. While these simulations are helpful, they don’t provide true security, as the final signature still happens on a vulnerable device, separate from where the simulation was viewed (see learnings from the Bybit/Safe attack).

With off-device simulation, you are still trusting that the transaction sent to your wallet is the same one you simulated. True security is only achieved when the final verification happens on a trusted, isolated hardware device with a Secured Display. For any serious organization managing a treasury, or smart contracts, relying on anything less is an unacceptable compromise. Ledger Multisig is here to fix that.

Built on a Foundation of Trust

We believe in the power of open-source collaboration and in building upon technologies that have earned the community’s trust. That is why we have chosen to build Ledger Multisig by leveraging the core components of the Safe ecosystem.

When you create a new Safe account through our interface, you are deploying the same widely used and audited smart contract code that powers the entire network. That means that you can resume your operations from your current Safe Accounts on Ledger Multisig, without having to migrate. We are not reinventing the wheel; we are strengthening it and making it accessible under the highest security standard. By building on Safe’s foundation, we contribute to the ecosystem by making a popular multisig infrastructure safer and easier to use for everyone.

What we Bring to the Market

Ledger Multisig is built on three foundational pillars, each designed to address a critical need for on-chain organizations.

1. The End of Blind Signing with “Clear Signing”

This is our cornerstone innovation, an unparalleled layer of security that eradicates blind signing from every multisig operation. With Clear Signing, the Secure Element within your Ledger device becomes the ultimate source of truth.

For Asset Transactions: When sending funds, you will no longer see just a contract address and a data blob. Your Ledger device will display the full recipient address, the precise amount, and the token symbol (e.g., “Send 40 ETH” or “Send 50,000 USDC”). You can verify every detail on a screen that is physically isolated from your potentially compromised computer.
For Secure Governance: Critical administrative changes on your Safe account are a major vector for attacks. With Ledger Multisig, any governance action on your Safe Account is made transparent. Actions like adding a new signer, removing a signer, or changing the signature threshold are clearly described on your device, so you know with certainty the change you are approving.
For Complex Contract Interactions: We have engineered our firmware to understand the language of Web3. Through our deep integration and support for standards like EIP-712, we can parse and display the intent behind nested transactions and complex smart contract interactions. This allows your organization to confidently interact with DeFi protocols or manage your own application’s smart contracts directly from your Ledger Multisig.

2. Proactive Defense, Not Just Reactive Signing

True security is about preventing threats, not just verifying legitimate actions. Ledger Multisig leverages the existing Ledger Transaction Check, a proactive security shield that complements Clear Signing, using advanced simulations to identify potential threats like malicious addresses or contracts before you sign.

The process is uniquely secure: a risk assessment report from trusted providers is sent directly to your Ledger device, where the Secure Element cryptographically verifies its authenticity before displaying a clear warning. This mitigates man-in-the-middle attacks where a malicious transaction is swapped in after a simulation.

3. A Seamless Management Experience

Security should not come at the cost of efficiency. We have obsessed over the user experience to help you manage your organization’s assets intuitively and seamlessly.

Zero-Migration Onboarding: The initial setup is designed to be a seamless experience. Our product is built on top of Safe’s infrastructure, meaning that you can resume your Operations on Ledger Multisig without having to migrate anything. There is no complex data transfer or account reconstruction needed. Simply connect your Ledger signer, and Ledger Multisig automatically discovers and displays all of your associated Safe accounts across multiple networks. You are ready to operate quickly and efficiently.
A Unified Dashboard: Our interface provides a central command center for all your multisig activities. View an aggregated balance across all your Safe accounts, and see a dynamic list of all pending transactions requiring your attention. The dashboard clearly distinguishes between transactions needing your signature and those queued while awaiting others, eliminating confusion and streamlining your workflow.

Our Vision for a Multi-Chain Future

While our journey begins by securing the vast EVM ecosystem built on Safe, our vision is to be infrastructure-agnostic. We are building Ledger Multisig as an abstraction layer for the entire world of multisig. In the future, we will integrate support for Solana and for native Bitcoin multisig, allowing you to manage all your organization’s on-chain assets from a single, unified, and uncompromisingly secure interface.

Get Started with Ledger Multisig

We are incredibly excited to bring this new standard of security to the ecosystem. For DAOs, funds, and crypto-native companies that rely on multisig for their operations, the era of compromise is over.

To begin securing your organization’s assets with the clarity and confidence of Ledger Multisig, visit our new website and connect your Ledger device today. Welcome to the future of on-chain treasury management.

Philippe Hébrard
Head of Product – Ledger Enterprise

SAFE{CORE}® and SAFE{WALLET}®, and the Safe logos are trademarks or registered trademarks of the Safe Ecosystem Foundation.