Federation (Bitcoin)

A federation, in Bitcoin, is a fixed set of independent operators who collectively control funds or a secondary network through a threshold multisignature scheme. Instead of one custodian or a fully permissionless validator set, a federation distributes trust across a known group, where a quorum — for example 11 of 15 members — must agree before funds move or a block is finalized. The system is secure as long as fewer than the threshold of members collude or fail. Federations are Bitcoin's pragmatic answer to a hard question: how do you offer features the base layer cannot, without asking users to trust a single company?

How Federations Are Used

The best-known example is Blockstream's Liquid Network, a federated sidechain where 15 functionaries take turns proposing blocks and the backing bitcoin is locked in an 11-of-15 multisig. Users peg in by sending BTC to a federation-controlled address and, after a confirmation delay, receive an equivalent asset on the sidechain; pegging out reverses the process through the federation's signers via a peg-out. Fedimint applies the same idea to community custody: federation guardians jointly back Chaumian ecash, so a village, family, or community group can share custody without any single member being able to abscond. In every case the federation enforces its own network's rules and processes transfers, but it cannot rewrite the underlying Bitcoin ledger — its authority stops at the funds explicitly placed in its care.

The Machinery of Membership

What separates a federation from an informal multisig group is operational structure. Members — called functionaries in Liquid's design — run dedicated, hardened signing hardware, follow published procedures, and are publicly identifiable institutions with reputations to lose. Signing is automated: the hardware enforces the network's rules (only sign valid blocks, only release peg-outs that match sidechain burns), so a compromised operator's machine still refuses to sign theft. Geographic and jurisdictional distribution matters too, since a federation whose members all sit under one legal authority can be compelled as a unit. The honesty assumption is explicit, the membership is auditable, and that transparency is the model's core defense.

The Trust Trade-off

Federations occupy a deliberate middle ground between full self-custody and a single trusted third party. They unlock features Bitcoin's base layer cannot offer natively — faster settlement, confidential transactions, token issuance, or shared community custody — while accepting that a colluding quorum could censor withdrawals or, in custodial designs, seize funds. That is a real cost, and it should be named plainly: bitcoin held through a federation is not bitcoin held under your own keys. The honest way to use one is with eyes open, for the specific job it does well, with amounts sized to the trust you actually extend.

Why the Model Persists

Purely trustless alternatives to federated pegs remain research problems on Bitcoin, so federations persist as the working compromise: dramatically better than one custodian, deliberately weaker than self-custody, and honest about the difference. For a sovereign Bitcoiner the framework is a useful thinking tool beyond sidechains — any time a group must share control of something valuable, threshold trust among known parties is the pattern to reach for. The federation model underpins ecash systems like the Chaumian mint, anchors sidechain transfers through the peg-in and peg-out cycle, and contrasts instructively with trustless sacrifice schemes such as the fidelity bond, which buy Sybil resistance with provable cost instead of known identities.

Before placing funds under any federation, run the practical checklist: Who are the members, and are they named and reputationally exposed? What is the exact threshold, and what happens when it cannot be met — are there timelocked recovery paths, or do funds strand? Under which jurisdictions do the signers operate, and could one legal order reach a quorum? A federation that answers these questions in public documentation is behaving like the accountable middle ground it claims to be; one that will not is a custodian with extra steps.