While testing the implementation of mpcium, I noticed a behavior that seems inconsistent with the expected fault-tolerance guarantees of a threshold MPC scheme.
In a standard MPC / threshold signature model, when the threshold is set to t, the system should be able to:
- Remain functional as long as any t out of n nodes are available
- Successfully complete signing operations with t participating nodes
- Tolerate up to n − t node failures or unavailability
However, in the current mpcium implementation, signing only succeeds when at least t + 1 nodes are ready and participating in the protocol.
This effectively means:
- The real operational threshold is t + 1, not t
- The system tolerates fewer node failures than expected
Is the t + 1 requirement an intentional design decision?