Opening
Are you worried that a hack could steal the crypto you keep on an exchange? This article explains what cold storage is, how it differs from hot wallets, and what the storage split means for the safety of your digital assets.
The plain explanation
Cold storage refers to cryptocurrency kept offline, away from any internet connection. Because the private keys that control the funds are stored on devices or media that cannot be accessed remotely, attackers cannot reach them through typical online methods. Common cold‑storage solutions include hardware wallets, air‑gapped computers, paper wallets, and secure vaults operated by custodial services.
Hot wallets are the opposite: they are online wallets that allow quick deposits, withdrawals, and trading. Exchanges keep a portion of user funds in hot wallets so that transactions can be processed instantly. The private keys for hot wallets reside on servers that are connected to the internet, making them vulnerable to hacking, phishing, or insider abuse.
The key trade‑off is speed versus security. A larger hot‑wallet balance means faster order execution but also a larger attack surface. A higher cold‑storage ratio reduces that surface but can introduce latency when users want to move funds, as the exchange must first move assets from cold to hot storage.
To understand how an exchange decides the split, consider three factors:
- Liquidity needs: Exchanges must have enough hot assets to meet daily withdrawal and trading volume.
- Risk management: Storing the majority of assets offline limits potential loss from a single breach.
- Regulatory requirements: Some jurisdictions set minimum cold‑storage percentages for custodial entities.
A real example
In November 2026, after a major attack on Binance’s hot‑wallet infrastructure that resulted in the theft of roughly $6.36 billion, several exchanges publicly disclosed their cold‑storage ratios. Gate launched a “Proof of Security” (PoSEC) framework, reporting that 88.26 % of its total assets were in cold storage, enough to cover 104.58 % of customer assets even if its hot wallets were completely drained. Coinbase said more than 99 % of customer assets were held offline, while Upbit in South Korea disclosed a 99.17 % cold‑storage share. These figures illustrate how exchanges use the cold‑storage ratio as a metric to reassure users about the resilience of their asset‑holding practices.
What it means for you
When you keep crypto on an exchange, you are trusting the platform’s security architecture. A high cold‑storage ratio suggests that the exchange has taken steps to limit the amount of money that could be stolen in a hot‑wallet breach. However, the ratio alone does not guarantee safety. Even offline wallets can be compromised if the signing process or internal controls are weak. Therefore, the storage split should be one of several factors you evaluate before depositing large sums.
If you prioritize immediate access for frequent trading, you may accept a lower cold‑storage percentage. If you plan to hold assets for the long term, choosing an exchange with a very high cold‑storage ratio—or moving the assets to your own hardware wallet—can reduce exposure to exchange‑level hacks.
What to check / how to judge
- Cold‑storage percentage: Look for recent, verifiable disclosures. Ratios above 95 % are generally considered strong, but compare them against the exchange’s typical daily volume.
- Third‑party audits: Independent security audits of the cold‑storage process add credibility. Verify that the audit reports are recent and publicly accessible.
- Insurance coverage: Some custodial services carry insurance for losses due to hacking. Understand the policy limits and exclusions.
- Access controls: Inquire about multi‑signature (multisig) requirements, hardware security modules (HSMs), and segregation of duties among staff.
- Regulatory compliance: Check whether the exchange meets local custodial regulations, such as minimum cold‑storage thresholds.
FAQ
Is cold storage completely safe?
Cold storage removes the online attack vector, but it can still be vulnerable to physical theft, insider fraud, or compromised signing procedures. Properly managed cold storage includes multiple layers of protection, such as multisig, secure facilities, and regular audits.
Can I see an exchange’s cold‑storage ratio in real time?
Most exchanges publish the ratio on a periodic basis (monthly or quarterly) rather than in real time. Look for transparency reports, blog posts, or regulatory filings that detail the current split.
Do I need to move my crypto to a personal hardware wallet?
If you plan to hold assets for an extended period and do not need frequent trading, a personal hardware wallet gives you direct control of the private keys, eliminating reliance on the exchange’s security measures.
What happens if an exchange’s hot wallet is drained?
In a worst‑case scenario, the exchange would need to transfer assets from cold storage to hot wallets to fulfill withdrawals. Exchanges with a cold‑storage ratio exceeding 100 % of customer balances (as Gate reported) have enough offline assets to cover a total hot‑wallet loss, though the process may take time.
This article references reporting from cointelegraph.com.
