• On-chain data shows multisig signers performing non-multisig activities such as trading memecoins, swapping on DEXs, and bridging, creating phishing risks by linking production multisig keys to websites