> Mitigation:
> - **M-of-N multisig** (e.g., 3-of-5 signers)
> - Signers geographically and organizationally independent
> - On-chain transparency — all treasury movements public
> - Time-locks on large withdrawals