What it means
Owning cryptocurrency really means controlling a private key, which is a secret number that authorises transfers. If that key sits on a server, a phone or a browser extension that touches the internet, the wallet is hot.
If it sits on a device that never connects, such as a hardware device in a safe or a key printed and stored in a vault, the wallet is cold. The trade-off is speed against exposure.
A business that processes customer withdrawals cannot ask a director to fetch a hardware device from a safe for every transaction, so it keeps a working balance hot and the rest cold. Nearly every large theft in the sector has involved hot wallet keys rather than cold storage, which shapes how prudent operators size that working balance.
The standard control is a float policy: hold only as much in the hot wallet as normal operations require over a short buffer period, and sweep the excess to cold storage automatically. Alongside that sit withdrawal limits, multi-signature approval for large transfers, address allow-lists and monitoring that flags unusual outflow patterns.
Insurance, where available, is usually priced against the hot balance. Accounting and audit teams care about this because the split determines how custody is evidenced.
Auditors will typically want proof of control over the keys, not just a balance shown in an app, and the procedures for demonstrating that differ between hot and cold storage. A business holding customer assets also needs to show segregation between customer funds and its own.
The nuance often missed is that hot and cold is a spectrum, not a switch. A multi-signature setup where two of three keys are offline and one is online behaves very differently from a single key on a web server, even though both involve an internet-connected component.
In practice
Real-world examples.
Example
An online marketplace lets sellers cash out in digital currency within minutes. It keeps two days of expected payouts in a hot wallet with a per-transaction cap and sweeps everything above that threshold to cold storage each night.
Example
A treasury team at a technology company holds a small strategic allocation of digital assets that it does not intend to trade. It moves the entire holding to a multi-signature cold setup and keeps no hot wallet at all, accepting that any future sale will take a day to arrange.
Example
A charity accepting donations in cryptocurrency uses a hot wallet to receive gifts and a scheduled conversion that sells the balance to dollars twice daily. The hot balance rarely exceeds a few thousand dollars, which is a deliberate choice to limit exposure.
Formula
Calculation
Hot wallet float = Average daily outflow x Buffer days, and Hot exposure ratio = Hot wallet float / Total assets under custody
A payments business holds $60,000,000 of digital assets on behalf of customers. Its records show average customer withdrawals of $400,000 a day, and its operations team wants enough on hand to cover three days without a manual top-up from cold storage. The hot wallet float is $400,000 x 3 = $1,200,000.
The hot exposure ratio is $1,200,000 / $60,000,000 = 2%. That means a total compromise of the hot wallet would cost 2% of customer assets, which the business can size its insurance and its capital buffer against. If withdrawals later rise to $600,000 a day, the same three-day policy pushes the float to $1,800,000 and the exposure ratio to 3%, so the risk committee has a clear trigger to revisit the policy.Case study
Seen in the real world.
This illustrative scenario involves a fictional exchange called Beacon Ledger. In its first year it kept roughly 30% of customer assets in a hot wallet, because the operations team had been burnt by delayed withdrawals and wanted plenty of headroom.
A new head of risk asked a simple question at a board meeting: what is the largest amount we could lose in a single night, and can we survive it? The answer, based on the then current balances, was a figure larger than the company's entire equity. The board approved a float policy sized on three days of average withdrawals plus a manual top-up process for unusually large requests.
The hot balance fell from about 30% of assets to roughly 2%, and withdrawal times rose from near instant to a median of eleven minutes. In this illustrative case a handful of customers complained, but the company could truthfully say a total hot wallet loss would no longer be existential, which turned out to be the argument that satisfied its banking partners.
Watch out
Common mistakes.
- Assuming that funds held on an exchange app are in your own wallet, when in most cases the exchange controls the keys and you hold a claim rather than the asset.
- Sizing the hot wallet around convenience rather than around a stated buffer period, which leads the balance to drift upwards until a loss would be catastrophic.
- Treating a hardware device as cold while its recovery phrase is stored in cloud notes, which puts the effective key back on the internet.
Questions
People also ask.
What is the difference between a hot and a cold wallet?
A hot wallet keeps private keys on an internet-connected device for speed, while a cold wallet keeps them offline for security at the cost of convenience.
Is a hot wallet ever appropriate for large balances?
Rarely, and where it happens it should be paired with multi-signature approval, withdrawal limits and monitoring rather than relying on the wallet software alone.
How does this affect a company's audit?
Auditors will test how key custody is controlled and evidenced, so the hot and cold split, the sweep process and the approval records all become part of the control documentation.
From the founder's library
Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%Related