Vitalik Buterin Flags Wallet UX Gaps With Multisig Walkaway Test

TheNewsCryptoPublished on 2026-01-29Last updated on 2026-01-29

Abstract

Vitalik Buterin, co-founder of Ethereum, identified significant usability issues in multisig wallets after performing a walkaway test. He discovered that many wallets fail basic usability standards when front-end applications are unavailable. Buterin was able to bypass the need for a specific Safe app by using Etherscan’s "read contract" feature to access multisig information directly, highlighting the advantage of open infrastructure. He emphasized that users should be able to access core functions through neutral tools like block explorers even if an application’s interface becomes inaccessible. Buterin proposed a "viewing key" solution to enhance privacy while acknowledging the inherent risks of handling sensitive data in URLs. Developers suggested alternatives, including open-source tools and zero-knowledge proof systems for authorization. This discussion occurs amid structural changes in Ethereum trading following the launch of U.S. spot ETH ETFs.

The co-founder of Ethereum, Vitalik Buterin, is using a mundane multisig check and found that a lot of wallets do not pass basic usability and the walkaway test.

The co-founder revealed that, “This morning I thought to check the addresses of those who were signers on my multisig and on my phone; I hadn’t installed any Safe app.” He further mentioned that instead of reinstalling Safe, he realised that he could just look up the address on Etherscan and use the ‘read contract’ feature to get directly what he wants.

He described the loophole as a quiet yet critical win for open infrastructure. These are some kinds of extra UX benefits you get if your wallet or application is open source and clears the walkaway test.

Simply put, if the front end vanishes, users must still access core functions through neutral tools such as block explorers. Buterin alerted that this same plan will somehow have to break due to privacy.

Co-founder’s suggestion

His suggested direction is a viewing key... an extended version of their address and also comprises extra private info, having block explorers read that client-side through URL hash fields.

He admits the trade-off and informs people that pasting any kinds of secrets into URLs or web pages is risky, and in the end, you’ll just be capable of doing more things via your wallets directly.

Developers swiftly came up with alternatives. One reply highlighted an open-source tool, SwissKnifeXYZ, as one more open-source alternative, while Microchain Labs underlined microchain zk signers displacing explicit multisig signatures having a zk proof of authorisation, securing only a state root on-chain.

The experiments now sit against a distinct backdrop: the appearance of U.S. spot ETH ETFs, where structural flows have initiated to redesign how Ethereum trades. The initial weeks of trading witnessed ETH ETF inflows concentrate liquidity at the front of the curve, reflecting patterns once linked with BTC products.

Highlighted Crypto News Today:

Kalshi Traders are Bearish on Bitcoin, Will BTC Price Stand the Test?

TagsETHETHEREUMvitalik Buterin

Trending Cryptos

ctr
CitreaCTR
wstusdt
wrapped stUSDTWSTUSDT
apr
aPrioriAPR
ctx
Cryptex FinanceCTX
audio
AudiusAUDIO
comp
CompoundCOMP
mantra
MantraMANTRA
waxl
AxelarWAXL
bill
Billions NetworkBILL
pyth
PYTH (Pyth)PYTH
rune
THORChainRUNE
velodrome
Velodrome FinanceVELODROME
brev
BrevisBREV
cake
PancakeSwapCAKE
jst
JUSTJST

Related Questions

QWhat did Vitalik Buterin discover when checking his multisig addresses without the Safe app installed?

AHe discovered that he could use Etherscan's 'read contract' feature to access the information directly, highlighting a usability gap in many wallets that fail the basic walkaway test.

QAccording to Buterin, what is a critical benefit of open-source wallets or applications that pass the walkaway test?

AThey provide extra UX benefits, allowing users to access core functions through neutral tools like block explorers even if the front end vanishes.

QWhat solution did Vitalik Buterin suggest to address the privacy concerns with his initial plan?

AHe suggested using a viewing key, which is an extended version of an address containing extra private information, readable by block explorers client-side through URL hash fields.

QWhat trade-off did Buterin acknowledge with his suggested solution involving URLs?

AHe admitted that pasting any kinds of secrets into URLs or web pages is risky, and ultimately, users will need to perform more actions directly through their wallets.

QWhat alternative tool was mentioned by developers in response to Buterin's findings?

ADevelopers highlighted an open-source tool called SwissKnifeXYZ as an alternative, and Microchain Labs mentioned using microchain zk signers with zk proofs of authorization to replace explicit multisig signatures.

Related Reads

Breaking! OpenAI's Next-Gen AI Solves 10 Fields Medal-Level Problems

OpenAI's next-generation AI model Astra achieves breakthroughs in 10 long-standing mathematical conjectures. The results, including constructing the first known infinite, finitely presented non-sofic group—resolving a major question since 1999—and advancing the high-dimensional sphere packing problem beyond a 46-year-old barrier, are detailed in a 249-page paper. Key proofs have been formally verified using Lean 4. The AI also refuted a rigidity conjecture by Fields Medalist Alain Connes. According to OpenAI, generating these proofs cost under $2,000. Experts describe the findings as potentially Fields Medal-worthy and a landmark moment for both mathematics and AI, showcasing the model's ability to produce profound, human-like reasoning across diverse fields like group theory, geometry, and operator algebras.

marsbit50m ago

Breaking! OpenAI's Next-Gen AI Solves 10 Fields Medal-Level Problems

marsbit50m ago

How to Make Yourself Irreplaceable by AI Forever

This article argues that the primary threat from AI is not job replacement, but remaining trapped in "wage slavery"—financial dependence on employers. The path to becoming irreplaceable is not resisting AI, but becoming an "unemployable" individual who builds their own meaningful enterprise. The author identifies five key elements for this: Agency (acting without permission), Taste (judging what's worthwhile), Persuasion, Persistence, and Iteration. The solution is to stop being a "pawn" in someone else's game. To start, you must fundamentally change your identity and environment, then engage in rapid, real-world trial and error. While both coding and creating media (content) are powerful, content is more crucial. AI can generate assets, but true value lies in subjective, human-driven content that builds trust and narrative. The actionable advice is to carve out 15 minutes to answer foundational questions: 1) Uncover your "raw material"—what you know deeply or solve effortlessly. 2) Define your contrarian perspective—what common beliefs you think are wrong. The intersection of these answers is your direction. Finally, you must launch by publishing your first core idea immediately, using the feedback to iterate and develop the skills needed for a self-directed life and career.

marsbit1h ago

How to Make Yourself Irreplaceable by AI Forever

marsbit1h ago

Thanks to Dice Rolls, Bitcoin Keys Are Stored Offline, But Not Everyone Will Do It

The article discusses using dice rolls to generate secure Bitcoin wallet seeds, providing entropy independent of potentially flawed hardware random number generators. It explains that each fair dice roll offers about 2.585 bits of entropy, with around 50 rolls needed for a standard 12-word seed phrase and 99+ recommended for higher security. This method gained attention after a vulnerability was revealed in some Coldcard hardware wallets, where a faulty firmware RNG (dating back to 2021) compromised generated keys. The analysis notes that while a dice-generated main seed was safe from this specific flaw, other Coldcard functions (like creating paper wallets, backup keys, or passwords) could still be vulnerable if they used the defective RNG. The piece argues that while dice-based entropy is technically robust, the manual process is error-prone, tedious, and unrealistic for most new users, who might make mistakes in recording or inputting rolls. It concludes that while manual entropy generation should remain an option for advanced users, the long-term goal is to develop reliable, user-friendly hardware and software that securely generates randomness without requiring specialized knowledge. Coldcard users are advised to check their firmware version and replace any secondary secrets (like paper wallet keys) created with vulnerable devices, while also considering multi-signature setups with devices from different manufacturers for added security.

cryptonews.ru4h ago

Thanks to Dice Rolls, Bitcoin Keys Are Stored Offline, But Not Everyone Will Do It

cryptonews.ru4h ago

Michael Saylor Says It Has Become Impossible to Adopt the Bitcoin Update He Opposed!

Michael Saylor stated that it has become mathematically impossible for BIP-110 to achieve the 55% voluntary support threshold within the current Bitcoin mining difficulty adjustment cycle. Based on his analysis of 946 blocks generated up to block 960,561, only 24 blocks contained version field signals supporting BIP-110. Saylor claims all these signals came from DATUM miners sharing rewards via the OCEAN mining pool, with no supporting signals from non-OCEAN miners. He argues this situation prevents BIP-110 from reaching the required consensus level and that the current signals do not represent broad miner agreement. BIP-110 is a proposal aimed at making it more difficult to embed large data like images or text into the Bitcoin network, beyond simple monetary transactions. Its proponents argue Bitcoin should be used primarily for sending money to avoid network congestion. Saylor opposes this, believing the Bitcoin network should not dictate which transactions are necessary and that rules shouldn't change based on the preferences of a few. He also suggests that high support metrics may be inflated by automated signaling software rather than reflecting genuine miner consensus.

cryptonews.ru5h ago

Michael Saylor Says It Has Become Impossible to Adopt the Bitcoin Update He Opposed!

cryptonews.ru5h ago

Number of Negative Bitcoin Comments Hits Record High: What Does This Mean?

Cryptocurrency analytics firm Santiment reported that negative sentiment toward Bitcoin on social media has reached a historically high level. The ratio of positive to negative comments about Bitcoin on platforms like X, Reddit, and Telegram has fallen to its lowest point since the firm began using its modern social monitoring system. A key driver of this sentiment is a vulnerability discovered in the firmware of Coldcard hardware wallets, shaking investor confidence in personal storage and cold wallets—previously considered the safest method for securing crypto assets. Santiment noted that while past crises like the collapses of FTX and Mt. Gox were larger in scale, the Coldcard incident uniquely shifted discussions toward hardware security and cold storage vulnerabilities, rather than centralized exchanges or leveraged trading platforms. Data shows only 0.58 positive comments for every negative one, indicating fear has significantly outweighed greed. Although the data covers just one day, Santiment stated the current panic level exceeds peaks seen earlier this year regarding war concerns and surpasses social media panic recorded during previous major crypto crises.

cryptonews.ru5h ago

Number of Negative Bitcoin Comments Hits Record High: What Does This Mean?

cryptonews.ru5h ago

Trading

Spot

Hot Articles

Discussions

Welcome to the HTX Community. Here, you can stay informed about the latest platform developments and gain access to professional market insights. Users' opinions on the price of ETH (ETH) are presented below.

活动图片

Top Questions