Hot vs cold wallet

How it works

A "hot" wallet is any wallet whose private keys live on an internet-connected device — your phone, laptop, or an exchange's servers. Convenient: open the app, sign a transaction, done in seconds. Risky: every piece of malware, every browser exploit, every compromised npm package is a potential attack on the keys.

A "cold" wallet keeps the keys on a device that doesn't (or rarely) touches the internet:

• Hardware wallets (Ledger, Trezor, Coldcard) — the most common form
• Paper wallets — printed private key + address (mostly historical; risk of paper damage)
• Air-gapped computers — a laptop that's never connected to wi-fi, used only for signing
• Steel backup plates — for the seed phrase, fireproof and waterproof

Cold storage is slower (extra step to sign each transaction) but the security improvement is order-of-magnitude.

Example

A practical two-wallet setup most active crypto users adopt:

• Hot wallet (MetaMask or Phantom) — holds $500–2,000 of "spending money" for daily DEX swaps, NFT mints, DeFi positions. Acceptable to lose if compromised.
• Cold wallet (Ledger or Trezor) — holds the long-term position. Used only when consolidating gains, rebalancing, or moving to/from the hot wallet.

Money flow: payday → exchange (or self-custody) → cold wallet. When you want to do something on-chain, transfer just enough to the hot wallet for that activity. Cold wallet only signs transactions when you're consolidating or moving long-term funds.

Why it matters

The hot/cold distinction matters because internet-connected devices are an enormous attack surface. Examples of hot-wallet drainage in just the last few years:

• Browser-extension malware — fake MetaMask clones in Chrome Web Store stole millions before takedown
• Malicious contract approvals — token approvals from hot wallets enabled the Ledger Connect Kit hack (Dec 2023, $600k drained)
• Sim-swap → SMS 2FA — telecom attacks bypass exchange 2FA, drain the account
• NPM supply chain — compromised JS dependencies inject wallet-draining code into trusted apps

Cold storage immunizes against all of those. What it doesn't immunize against:

• Physical theft of the device + seed phrase (split storage helps)
• You authorizing a malicious transaction through the hardware wallet — read the screen carefully
• Lost backups — losing both the device and seed phrase is permanent

A simple rule for most users: amount > 1 month's expenses in self-custody → hardware wallet. Below that threshold, software wallet is fine. The ratio of hardware wallet cost ($79) to potential loss is so favorable that "I'll get one later" is one of the most common regrets in crypto.