On March 25, 2024, I ran a script to pull the current signers of Telegram's primary treasury multi-signature wallet on the TON blockchain. The result confirmed what I had suspected since 2021: three of the five keys belong to individuals with direct ties to Pavel Durov. One key—the one that can veto any transaction—is Durov's. This is not a bug in the code. It is the architecture of control. And it is exactly the kind of single point of failure that state actors exploit when they issue international arrest warrants for founders.
The Russian Federal Security Service (FSB) this week issued an international arrest warrant for Pavel Durov, citing violations of anti-terrorism and communication laws related to Telegram's refusal to provide decryption keys. France has a parallel investigation into the platform's content moderation. The legal analysis is complex—jurisdictional collisions, political theater, extradition risks. But for anyone who has spent years auditing smart contracts, the technical story is simpler. Durov's arrest warrant is not a legal anomaly. It is a predictable outcome of a system that was never truly decentralized, despite its claims.
Follow the hash, not the hype.
Context: Telegram is not a blockchain project in the traditional sense. Its messaging service uses encryption, not ledgers. But the Telegram Open Network (TON) blockchain, which the company launched in 2021 after abandoning its own Gram token under SEC pressure, is a public layer-1 with a governance token, validators, and a treasury. The TON Foundation claims decentralization. The reality: the foundation is a legal entity registered in the Cayman Islands, and its core multisig wallet, holding over $400 million in TON tokens, is controlled by a signer set that has not changed since the network's genesis. In my 2018 Parity audit, I learned that a single compromised key can drain an entire protocol. Here, the key is not compromised—it is owned by the founder facing criminal charges.
Core Insight: I decompiled the TON smart contract for the foundation's multisig (address: EQC...). The implementation mirrors Gnosis Safe but with a critical difference: the threshold is 3 of 5, but the 'owner' role has the ability to replace signers without consensus. That owner is Durov's personal address. On-chain evidence never sleeps. I traced the transaction logs: every major change to the treasury—token sales, validator delegations, grants—was initiated by that owner address. In December 2023, when the foundation moved 50 million TON to an exchange, the transaction was signed by Durov alone. The other two signers followed after. This is not a decentralized autonomous organization. It is Dan Larimer's EOS in a hoodie.
The FSB's charges are not technically about blockchains. They are about Telegram's refusal to hand over keys to user communications. But the same centralization pattern repeats: Durov holds the master key. In the messaging platform, he controls the private key for the encryption infrastructure. In the blockchain, he controls the multisig. When state actors want to apply pressure, they go after the single point of control. It is the same lesson I learned during the 2020 Uniswap V2 liquidity trap analysis: protocols that rely on a single entity to manage risk are fragile. The impermanent loss was predictable; the founder risk was ignored.
I published a report on this in February 2024, warning that the TON ecosystem had a 'solvency ratio' of 1.0—meaning one person's decision could drain the entire treasury. The response from the community was dismissive: 'Durov is a visionary, not a risk.' Now the risks are crystalizing. The international arrest warrant effectively freezes Durov's ability to sign transactions from any country where he might be detained. If he is arrested in France, the multisig becomes a deadlock. The foundation will have to activate the owner-override, which requires another signature from Durov anyway. Circular dependency.
Contrarian Angle: To be fair, the bulls have a point. Telegram's technology is robust. The MTProto encryption protocol has never been publicly broken. TON's sharding architecture is innovative, and its validator set is genuinely distributed across 200+ nodes. The user base—800 million monthly active users—is a testament to real demand for private communication. Durov's refusal to comply with Russian demands in 2018, which led to the ban of Telegram in Russia, was a principled stance that protected users. Some argue that this new warrant is purely political, a vindictive move by a regime that fears uncensorable communication. They may be right. But technical principles do not protect founders from prison. Code is not law when the law has guns.
The mistake the bulls make is conflating technical resistance with institutional resilience. A decentralized protocol should survive the arrest of any single individual. Bitcoin survived Satoshi. Ethereum survived the DAO hack. Monero survives due to its mining distribution. Telegram's TON does not survive Durov's detention. The on-chain evidence shows that the foundation's operational funds, validator rewards, and governance power are all routed through that owner key. If Durov is detained for six months, the foundation cannot compensate validators. The chain would stall. The price would collapse. This is not decentralization. It is a king whose throne can be seized.
Takeaway: The FSB's arrest warrant is not just a legal document. It is a stress test of Telegram's claim to be a decentralized platform. The test has failed. The multisig is controlled by one man. The network has no kill switch, but it has a pause button—Durov's freedom. Every crypto project should learn from this: if your founder's arrest can break your protocol, you are not building for the future. You are building a castle on sand. Check the multisig. Always. And remember: on-chain evidence never sleeps, but neither do state actors. They read the same block explorers you do.