INTRODUCING PRIVATE MULTISIG

Summary from the TLDR Crypto newsletter

A privacy-preserving multisig wallet implementation combines Merkle tree membership proofs for participant anonymity, aggregated ECC ElGamal encryption for confidential vote casting with bias-free decision making, and Distributed Key Generation eliminating centralized trusted entities, though requiring all participants to vote before revealing outcomes. The system uses babyJubJub key pairs derived from ECDSA signatures via deterministic KDF rather than wallet addresses to reduce identification probability from 1 to 1/N where N is member count, while homomorphic vote aggregation allows summing encrypted votes without decrypting individual ballots until the final decryption key share completes. Limitations include the last voter advantage, where final participants can decrypt prior votes before casting their own, proposal frontrunning possibilities despite deterministic challenge derivation, participant removal deadlocks if removed members don't vote, causing proposals to expire, and linear scalability complexity for vote revelation.