What it means
A cryptocurrency holding is really control of a private key, a long secret number that authorises transfers. Whoever holds the key controls the coins, which is why key security rather than account security is the heart of digital asset custody.
Cold storage covers several methods: hardware devices that sign transactions without exposing the key, offline computers that never touch a network, and paper or metal backups of the key held in a vault. What they share is the absence of any live connection an intruder could exploit.
The counterpart is the hot wallet, a connected wallet holding a small working balance so that customer withdrawals can be processed automatically. Custodians run a deliberate split, keeping the large majority of assets cold and only enough in the hot wallet to meet expected daily outflows.
Cold storage moves the risk rather than eliminating it. Losing the key or the backup means the assets are permanently unreachable, so serious operations use multi-signature arrangements requiring several people to approve a transfer, geographically separated backups and rehearsed recovery procedures.
For finance and audit teams the practical questions are governance ones. Who holds each key share, how are transfers authorised, how often is the recovery process tested, and can an independent party verify the balances, which is the purpose of a proof of reserves exercise.
In practice
Real-world examples.
Example
A crypto exchange keeps 98% of client assets in geographically separated cold vaults and tops up its hot wallet twice a day at fixed times. When a phishing attack drains part of the hot wallet, losses are limited to the working balance rather than the whole book.
Example
A listed technology company that holds cryptocurrency on its balance sheet places the entire holding with a qualified custodian using multi-signature cold storage. Its auditors test the key governance controls as part of the year-end audit rather than relying on a screenshot of a balance.
Example
A family office allocates a small share of its portfolio to digital assets and uses hardware wallets held in two bank safe deposit boxes in different cities. Transfers require two of the three trustees to sign, which slows every transaction by a day but removes any single point of failure.
Formula
Calculation
Cold storage ratio = value of assets held offline / total assets under custody. Hot wallet balance = total assets under custody - cold storage balance.
A digital asset custodian holds $400,000,000 of client cryptocurrency and sets a policy of keeping 95% offline. The cold storage balance is $400,000,000 x 0.95 = $380,000,000, and the hot wallet holds $400,000,000 - $380,000,000 = $20,000,000.
To sanity-check the policy, the operations team looks at withdrawal demand. Average daily client withdrawals run at $8,000,000, and the busiest day in the past year saw $18,000,000. The $20,000,000 hot wallet therefore covers the average day 2.5 times over ($20,000,000 / $8,000,000 = 2.5) and still leaves $20,000,000 - $18,000,000 = $2,000,000 of headroom above the worst day recorded, so the 95% policy is workable without forcing manual cold storage withdrawals on busy days.Case study
Seen in the real world.
This scenario is illustrative and the firm described is fictional. Salterwyn Digital Custody launched with $400,000,000 of client assets and a stated policy of holding 95% in cold storage, leaving $20,000,000 in its hot wallet against average daily withdrawals of $8,000,000.
Six months in, a market sell-off pushed withdrawals to $18,000,000 in a single day. The hot wallet held, with $2,000,000 to spare, but the incident review found that the manual top-up procedure took eleven hours because two of the three required signatories were in different time zones and one had never actually performed the process outside a test.
Salterwyn kept the 95% ratio but rewrote the operating model around it, adding a fourth signatory in a third time zone, scheduling quarterly live rehearsals of the top-up procedure, and publishing a monthly proof of reserves attestation. In this fictional case the lesson was that the cold storage percentage is the easy part, and the recovery and top-up procedures around it are what actually determine whether the arrangement works under stress.
Watch out
Common mistakes.
- Treating cold storage as a product you buy rather than a set of procedures, when the security depends far more on who holds the keys and how transfers are approved.
- Keeping a single backup of the recovery phrase in one location, which converts a hacking risk into an equally serious fire, flood or loss risk.
- Assuming an exchange account balance shown on a screen means the assets are held offline, when only an independent proof of reserves or custody attestation actually evidences that.
Questions
People also ask.
What is the difference between cold storage and a hot wallet?
A hot wallet is connected to the internet so it can process transfers automatically, while cold storage is kept offline and requires deliberate human action to move anything.
Is a hardware wallet the same as cold storage?
A hardware wallet is the most common consumer form of cold storage, because the private key never leaves the device, though it is only as secure as the backup phrase written down alongside it.
Why do custodians not hold 100% in cold storage?
Because customers expect same-day withdrawals, and a small hot wallet balance is what makes that possible without a manual cold storage retrieval for every single transaction.
From the founder's library
Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%Related