Bitcoin Custody for DAOs and Organizations: Multi-Sig Treasury Guide 2026

Organizations — whether they're DAOs, nonprofits, companies, or investment clubs — face a Bitcoin custody challenge that individuals don't: no single person should control the treasury unilaterally. The solution is multi-signature custody, properly structured for organizational governance.

The Problem with Single-Signature Org Treasuries

If an organization holds Bitcoin in a standard wallet controlled by one person:

• That person can steal the treasury
• That person's death or incapacitation locks the funds forever
• That person is a single point of failure for operations
• No audit trail of who approved transactions

Professional organizations need multi-signature custody where transactions require approval from M-of-N authorized parties.

Multi-Sig Structures for Organizations

2-of-3 (Small Teams)

Setup: 3 key holders, any 2 can sign

• Treasurer, CFO, CEO each hold a key
• Any transaction requires 2 of 3 to approve
• Redundancy: one key holder can be unavailable
• Risk: 2 colluding insiders can steal

Best for: Small companies, investment clubs, small nonprofits with 3 trusted officers

3-of-5 (Mid-Size Organizations)

Setup: 5 key holders, any 3 can sign

• Board members or committee members each hold a key
• Higher bar for collusion (3 insiders required)
• Resilient to key loss (can lose 2 keys)

Best for: Mid-size companies, nonprofits with active boards, DAOs with governance committees

4-of-7 (Large Organizations)

Setup: 7 key holders, any 4 can sign

• Large governance committee or full board
• Very resilient to individual failures
• Slow for routine transactions (need 4 signatures)

Best for: Large organizations, public companies, institutions with strong governance requirements

Custody Solutions for Organizational Bitcoin

Unchained Capital (Business)

Unchained offers business multi-sig custody:

• 2-of-3 setup where your organization holds 2 keys and Unchained holds 1
• You can spend without Unchained (using your 2 keys)
• Unchained helps if you lose a key
• Supports multiple authorized signers per organization key
• Best for: Small-to-mid businesses wanting professional custody support

Casa for Business

Casa offers organizational multi-sig:

• 3-of-5 options for business clients
• Key management services for authorized signers
• Best for: Companies wanting a managed service

BitGo Institutional

BitGo's policy engine is purpose-built for organizations:

• Define who can approve transactions
• Set spending limits by role
• Require multi-person approval for large transactions
• Full audit trail
• Best for: Large institutions, exchanges, funds with complex approval workflows

DIY with Hardware Wallets

For DAOs or tech-savvy organizations:

• Each signer gets their own hardware wallet (Coldcard, Trezor)
• Multi-sig wallet configured in Sparrow Wallet or Specter
• No custodian dependency
• Full sovereignty
• Requires technical setup and documentation
• Best for: Bitcoin-native organizations with technical team

Governance: Who Holds Keys?

Assigning keys is a governance decision:

Principle of minimal authority: Each key holder should be someone who MUST sign for the organization to function, not just anyone with access.

Typical org structure:

• CEO or Executive Director
• CFO or Treasurer
• Board Chair or independent director
• For redundancy: backup key with a law firm or corporate secretary

Key holder obligations:

• Secure storage of hardware wallet and seed phrase
• Availability for signing within reasonable timeframe (24–72 hours)
• Notification to board of any device loss or security concern
• Transfer of key access upon role change/termination

Operational Procedures

Spending Policy

Document spending authority tiers:

• Under $10,000: CFO + Treasurer (2 signatures)
• $10,000–$100,000: CFO + Board Chair (2 signatures)
• Over $100,000: Full board approval + 3 of 5 signatures

Transaction Verification

Before signing any organizational Bitcoin transaction:

1. Receive transaction request through official channel (email, Slack, board resolution)
2. Independently verify the destination address through a separate channel
3. Confirm amount and purpose match the authorization
4. Sign only after verification

Never sign a transaction just because a colleague says to — phishing and social engineering target organizational Bitcoin treasuries.

Annual Key Ceremony

Once per year:

1. Verify all key holders can still access their hardware wallets
2. Update documentation if key holders have changed
3. Test a small test transaction to confirm the multi-sig still works
4. Review and update the spending policy if needed

Accounting and Reporting

Organizational Bitcoin requires proper accounting:

• FASB ASU 2023-08: As of fiscal years beginning after December 15, 2024, Bitcoin must be reported at fair value with mark-to-market accounting on corporate balance sheets
• Unrealized gains and losses appear in net income each period
• This creates income statement volatility — prepare stakeholders for this
• Work with a CPA experienced in crypto accounting (not all CPAs handle this correctly)

DAO-Specific Considerations

Decentralized Autonomous Organizations have unique custody challenges:

• No legal entity: DAOs may not have legal standing to hold assets — multi-sig provides a practical workaround where key holders are individuals
• Governance tokens: DAOs typically use on-chain governance votes to authorize spending, then key holders execute based on vote outcomes
• Geographic distribution: DAO contributors are global — hardware wallet signing from multiple jurisdictions
• Key holder compensation: Some DAOs compensate key holders for custody duties

Common DAO multi-sig setup: 3-of-5 or 4-of-7 Gnosis Safe (for Ethereum-based DAOs) or Sparrow Wallet multisig for Bitcoin-focused DAOs

Frequently Asked Questions

Can a nonprofit hold Bitcoin? Yes. US nonprofits can accept and hold Bitcoin as property. The IRS requires nonprofits to report cryptocurrency holdings and may require Form 990 disclosure. Consult a CPA and attorney familiar with nonprofit crypto holdings.

What happens to organizational Bitcoin if key holders leave? This must be addressed in your governance documentation. Key rotation procedures should be in place: outgoing key holders transfer their hardware wallet through a secure ceremony, or a new multi-sig is set up and Bitcoin moved to it. Never let departing employees retain keys.

Is Gnosis Safe appropriate for Bitcoin? Gnosis Safe is a smart contract multi-sig wallet designed for Ethereum and EVM chains. It does not support Bitcoin. For Bitcoin organizational custody, use Sparrow Wallet multisig, Unchained, BitGo, or Casa.

How do we handle taxes on Bitcoin received by our organization? Bitcoin received as payment for services is ordinary income at fair market value when received. Capital gains apply on the appreciation when eventually sold. Proper accounting from day one prevents major headaches at tax time.