Monad co-founder releases a 10-point protocol security self-checklist, highlighting key risks in multi-signature and permission management.

According to Odaily, Monad co-founder Keone Hon published a protocol security self-checklist on X, focusing on core issues such as administrative authority, fund security, and multisig mechanism design. The main points include the following ten items:

1. Clearly identify which admin functions may lead to fund loss;

2. Ensure all relevant operations have timelock settings;

3. Establish a real-time monitoring mechanism;

4. Issue timely alerts when admin functions are called;

5. Review all privileged accounts and adopt a multisig (k-of-n) structure whenever possible;

6. Clearly define signature threshold parameters;

7. Multisig signers should use independent cold devices strictly for signing operations and follow best practices (such as independently verifying transaction hashes);

8. Set withdrawal rate limits and ensure they are not controlled by the same multisig group;

9. Ensure employee devices have malware detection and management capabilities;

10. Preset extreme scenarios where multisig signers are compromised, reverse engineer potential attack paths from an attacker's perspective, and optimize system design accordingly to increase the cost and complexity of attacks.