Skip to content
Blockchain

Why is there no safe, trustless way to rotate MPC key shares live?

82

Opportunity

Institutional MPC wallets distribute signing shares across multiple parties so no single server holds a full key, which is a meaningful improvement over single-key custody. However, when a share is suspected compromised, rotating shares without reconstructing the full key in any single location requires a proactive secret sharing refresh protocol that most deployed systems do not support in production. The rotation ceremony typically requires a synchronous online phase across all share-holders, and if one party is unavailable or actively hostile, the ceremony blocks or fails. No open, audited, asynchronous proactive refresh standard exists that bridge teams can adopt without building the cryptography themselves, leaving many custodians running on stale shares they cannot safely rotate.

Why it matters

An asynchronous proactive refresh primitive would let any MPC setup rotate compromised shares under adversarial conditions without ever materializing the full key.

How I score the opportunity

The Opportunity Score is my own read, not a measurement: how much it hurts, how often it bites, and how little exists to solve it today. Higher means I think it is more worth building.

Severity9/10

How much pain it causes when it shows up.

Frequency7/10

How often people actually run into it.

Whitespace8/10

How little good tooling exists for it today.

More problems worth solving