Here are our guideline for self-custody of project or DAO funds. Always use Gnosis Safe with multiple people and different wallets and separate devices (2FA with OTP) for $10K+ funds. No need for hardware wallets, but Google Authenticator.

$20M Grants & Bounties on Wallets

Why Harmony? Technical Overview of Protocols, Validators & Bridges

Requirements

• Minimum 3-out-of-6 multisignature setup:
  • three people, each with two separate wallets on different devices
  • non-overlapping passwords or authenticators
  • freshly-created passwords and brand-new addresses without history
• Support Wallet Connect for Gnosis Safe
  • Support Two-Factor or Multi-Factor Authentication (2FA or MFA) using One-Time-Password (OTP) like Google Authenticator
• Support low-fee and decentralized networks like Harmony, Polygon and Arbitrum

Gnosis Safe Setup

• Three persons (A, B, C), each setups 2 wallets (1 and 2)
  • To diversify risks, use both 1Wallet and MetaMask
  • To diversify risks, use both desktop and mobile devices
  • For Gnosis Tx Signing on mobile, use Chrome or disable "Block Pop-ups" for Safari on iPhone's settings
  • For Google Authenticator, enable “Privacy Screen” with Face ID check under “Settings”
  • For Polygon networks, use MetaMask on desktop and use imToken on mobile devices with 2FA
• Store the login password for MetaMask using 1Password manager
  • Use this uncommon setup to avoid the theft of the seed phrase: Do NOT backup the seed phrase. These wallets store trivial amounts of funds for gas fees only. In our 3-out-of-6 multisig Gnosis Safe here, the loss of a single MetaMask wallet has minimal impact – compared to a hacker gaining one third of access. The lost wallet can be easily replaced by a new one in the Gnosis Safe with approvals.
  • To surpass the "Protect Your Wallet" reminder, you may go through the backup process but destroy the copy of the seed phrase right away. Do NOT use "Back up again" or "Reveal Recovery Secret Phrase" under "Security & Privacy".
  • Copy addresses in Ethereum format and 1wallet's label on Authenticator to the section below
  • Copy URLs of Gnosis's transactions (T1-T4) and final funding tx (T5) below
• Person A funds 10 ONE tokens to all 6 addresses for the gas fees of approvals
  • T1: Person A creates a fresh Gnosis Safe with all 6 addresses. (Note that creating a safe then adding 5 additional addresses as owners create a known backdoor. Owners are responsible for all transactions hereafter.)
  • T1x: A funds the new Safe with 10 ONE tokens
  • T2: C1 sends 1 ONE to Address A2 via approvals by A1 and B1
  • T3: B1 sends 1 ONE to C1 via approvals by A2 and C2
  • T4: A1 sends 1 ONE to B2 via approvals by A2 and B2
  • T5: A funds with $25K or more ONEs
• If necessary, configure "New Spending Limit" for USD $1K daily in ONE tokens. Unlike Argent, Gnosis Safe has no tools for capping the total wallet spend per day.
• Repeat test runs of T2 & T3 & T4 as audit every month (or every quarter for <$50K)

MetaMask Setup for Harmony (only Firefox/Brave/Edge, no Safari)

(Or, search and click "Connect Wallet" for "Harmony Mainnet Shard 0" on https://chainlist.org. Use MetaMask's builtin browser for mobile.)

1. Network Name: Harmony Mainnet
2. New RPC URL: https://api.harmony.one
3. Chain ID: 1666600000
4. Currency Symbol: ONE