Sanctum adds 2-of-3 multisig security to every app wallet

The Solana staking protocol now splits wallet control across a phone, a cloud backup, and an email-linked recovery key Sanctum has rolled out a 2-of-3 multisig setup for every wallet inside its consumer mobile app. Transactions now need sign-off from any two of three separate keys before they go through. For a protocol best known for liquid staking and yield on Solana, it is a notable change of emphasis. The pitch is no longer only about growing your assets. It is also about making sure they are still there tomorrow. How the three keys work Sanctum’s version splits control across three locations. The first is a device key, stored on the user’s phone and gated by biometrics. The second is a cloud key, kept in either iCloud or Google Drive. The third is a recovery key linked to the user’s email and secured through Turnkey. Any two of those three can approve a transaction. So a user who drops their phone in a lake can still reach their funds using the cloud and recovery keys together. The multisig itself runs on Squads infrastructure. Squads currently protects over $15 billion across Solana applications, much of it held by DAOs and teams. Sanctum is effectively taking a security model...