In a bitcoin multi-sig wallet, can i determine which of the m of n keys were used to send bitcoin?

0

I'm particularly interested in this for large n multi-sig wallets. For example, if m-of-n is 4-of-6, and 6 different people (e.g. 6 non-profit co-directors) hold each of the n keys. If one day all of the wallet is emptied just using 4 (m) keys, will the 2 (n-m) people be able to determine which were the 4 keys and thereby the 4 co-directors that emptied the wallet?

Aaron Perlmutter

Posted 2018-04-08T13:31:13.190

Reputation: 1

Answers

2

The signatures and public keys have to be supplied to spend the coins so yes you can tell by looking at the spending transaction on the blockchain.

Abdussamad

Posted 2018-04-08T13:31:13.190

Reputation: 1 850

So then I would need to know which individuals hold which public keys from the beginning, when the wallet is created?Aaron Perlmutter 2018-04-08T14:13:54.767

Yes, that's correctRaghav Sood 2018-04-08T14:19:05.587

1This mechanism is also only generally available to the participants in the multisig construction, if the common advice of no key reuse is followed.Pieter Wuille 2018-04-08T16:20:52.927