Vitalik: The ideal security rule for multisig is to change signer keys after every operation

Vitalik posted on X platform that for multisig, the ideal security rule is for each signer to change their key after every operation. The implicit assumption of this rule is that ECDSA may become insecure, but will not be instantly broken, so it is still necessary to guard against mempool front-running. Vitalik stated that if possible, signatures should still be collected offline to minimize the time gap between "signature exposure" and "key invalidation"; misconfigured and rushed upgrades can easily lead to loss of funds, so do not act hastily.