Physical Security for Crypto Holders: Timelocks, Decoy Wallets and Multisig

Digital asset security typically focuses on remote threats like phishing or malware, but physical coercion poses a distinct vulnerability for self-custody. When an attacker coerces a holder in person—a scenario colloquially known as a wrench attack—cryptographic strength becomes irrelevant if the victim can access and transfer the funds immediately. Defending against physical extortion requires a security architecture that removes the holder's ability to authorize instantaneous transfers under duress. This is achieved through multi-signature setups, geographic distribution of keys, and time-delayed vaults.

The Threat of Physical Coercion

Physical security for cryptocurrency addresses the human element of self-custody. Unlike traditional banking systems, which feature daily withdrawal limits, fraud monitoring, and reversible transactions, decentralized blockchains execute authorized transactions immediately and irreversibly. If an individual controls the entirety of their cryptographic keys in a single location, an attacker who gains physical access to the individual can force them to empty the wallet. Mitigation strategies rely on removing single points of physical failure. By distributing access requirements across space and time, holders can ensure that compliance with an attacker's immediate demands cannot yield the majority of their funds.

Multi-Signature Wallets

A multi-signature (multisig) wallet requires multiple private keys to authorize a single transaction. Instead of a single private key controlling a wallet, a multisig setup operates on an M-of-N threshold. For example, a 2-of-3 multisig arrangement generates three distinct keys, requiring any two of them to sign a transaction before the network accepts it. If a holder sets up a 2-of-3 $BTC wallet, an attacker coercing them at their primary residence can only access one key. Without the second key, the transaction cannot be executed. The attacker's local physical control is insufficient to compromise the assets. This architecture transfers the security perimeter from a single physical location to a distributed network of physical locations. Establishing a multisig framework is a core component of Cold Storage Best Practices: Setting Up a Long-Term Crypto Vault.

Geographic Distribution of Keys

Multisig architectures only defend against physical attacks if the keys are geographically distributed. If an individual stores all three hardware devices of a 2-of-3 multisig setup in the same home office, the threshold requirement provides zero physical security. Keys must be separated by sufficient distance and access barriers to make sequential physical retrieval impractical or impossible during an attack. A common setup involves keeping one key at a primary residence, a second key in a bank safe deposit box, and a third key with a trusted legal counsel or in a separate jurisdiction. Retrieving the second key requires visiting a financial institution during business hours, presenting identification, and accessing a vault. This introduces a mandatory delay and a public environment, heavily disincentivizing physical coercion. Attackers prefer speed and privacy; geographic distribution eliminates both.

Timelocks and Delayed Transactions

A timelock restricts the spending of funds until a specific block height or UNIX timestamp is reached. In the Bitcoin protocol, features like CheckLockTimeVerify (CLTV) allow users to construct outputs that cannot be spent until the predetermined condition is met. On smart contract platforms like Ethereum, users can deploy time-delayed vaults. In a time-delayed vault, initiating a withdrawal broadcasts an intent, which then triggers a mandatory waiting period—such as 48 hours—before the withdrawal can be finalized. If the withdrawal was unauthorized or coerced, the time delay provides a window for the legitimate owner to cancel the transaction using a separate cancellation key. If an attacker forces a victim to initiate a transfer, the funds will not move immediately. The attacker would have to maintain control over the victim for the duration of the timelock, increasing their risk of exposure.

Decoy Wallets and Plausible Deniability

Plausible deniability involves creating an environment where an attacker believes they have successfully extracted the entirety of the victim's funds. The BIP39 standard allows users to apply a custom passphrase to their recovery seed phrase. A seed phrase without a passphrase generates one set of cryptographic keys, while the exact same seed phrase combined with a specific passphrase generates an entirely different set of keys. Users can store a small fraction of their net worth in the wallet protected only by the seed phrase, or a low-security passphrase, acting as a decoy. The majority of the funds are stored in the wallet derived from a complex, undisclosed passphrase. If coerced, the user surrenders the decoy wallet. Because there is no cryptographic way to prove whether a hidden wallet exists behind a specific passphrase, the attacker has no mathematical proof that they have been deceived.

Structuring a Coercion-Resistant Vault

Designing a coercion-resistant vault involves combining these techniques. A high-net-worth individual might construct a 3-of-5 multisig setup with geographically distributed keys, held in institutional vaults across different legal jurisdictions. To streamline operations, they might keep a small percentage of funds in a readily accessible single-signature wallet for daily use, while the bulk of the treasury requires coordination among distributed key holders.

For example, if an individual holds 100 BTC, they might allocate 1 BTC to a mobile wallet (hot), 4 BTC to a decoy hardware wallet (warm), and 95 BTC to a 2-of-3 multisig vault distributed across three distinct corporate entities (cold). The attacker extracting the 4 BTC cannot cryptographically prove the existence of the 95 BTC vault, nor can the victim physically access it without coordinating with external parties over a multi-day period.

Common Misconceptions

• Decoy wallets guarantee safety: Decoy wallets rely on the psychological assumption that the attacker will be satisfied with the decoy funds. If an attacker has prior knowledge of the victim's total holdings through blockchain surveillance or data leaks, a decoy wallet provides no protection.
• Multisig is only for institutions: Open-source software and dedicated custody hardware have made multisig setups accessible to individual users. Protocols natively support multisig without requiring third-party institutional custodians.
• Bank vaults are infallible: While safe deposit boxes provide a physical access barrier, they are subject to bank seizures, facility closures, and localized natural disasters. This is why keys must be distributed across different types of secure environments, not just multiple banks.

What to Watch

The landscape of physical crypto security is shifting toward smart contract wallets and account abstraction, which allow for programmable security parameters at the wallet level. Innovations in social recovery allow a designated group of trusted individuals (guardians) to freeze an account or reset its keys if the primary owner is compromised. These features aim to replicate the physical security benefits of multisig setups with more flexible user experiences. As these standards mature, the reliance on purely physical key distribution may evolve into cryptographic and social architectures. For more on this evolution, see Account Abstraction and Smart Wallets, Explained.