A hot wallet and a cold wallet in a crypto exchanger are not a technical detail — they are a matter of business survival. Most new operators keep everything on the hot side for convenience, and that single habit is one of the most common causes of real losses.
Why "everything on hot" is a gamble
A hot wallet is connected to the internet around the clock. That is convenient: auto-withdrawals work instantly, rates update in real time. But every hour keys stay online is another hour an attacker has to probe for a weak point. One server vulnerability, one code flaw, one phishing hit on an admin — and the funds are gone.
Small exchangers have lost everything overnight — not because they were careless, but because they kept too much on the hot side. There is no insurance for crypto exchangers. There is no backup plan either, unless you built one in advance.
Hot and cold: what the difference actually means
Think of the hot wallet as the cash register — always open, always within reach. The cold wallet is the vault in the basement: nobody touches it daily, but that is where the bulk of the money lives.
Technically: a hot wallet stores private keys on a server or device that stays permanently online. A cold wallet holds keys that never touch the internet — a hardware wallet (Ledger, Trezor), an air-gapped machine, or a paper backup in a physical safe.
How much to keep hot: the 24-hour rule
The hot wallet should hold no more than the funds needed to cover 24 hours of outgoing payments. If your exchanger pays out $8,000 per day, keep $8–12k on hot with a small buffer. Everything else goes to cold storage.
This is not paranoia — it is standard practice. If the hot wallet is compromised, the damage is contained. The business survives.
How to set up cold storage without the headache
Three options, from simple to complex:
- Hardware wallet — Ledger Flex, Trezor Safe 5, or equivalent. Private keys never leave the device. Works well up to $100–200k. Main risk: physical loss or damage.
- Air-gapped machine — a laptop that has never been online. Transactions are signed offline and transferred via QR code or USB. More labour-intensive, but rock-solid.
- Multisig wallet — multiple keys, multiple signers. No single admin can move funds alone. This is the next tier of protection.
Multisig: when you need it and when you do not
Multisig (multi-signature) is a setup where signing a transaction requires several keys — for example, 2-of-3. One key is compromised: nothing happens, the others hold the line.
When you need it:
- Cold storage holds more than $50,000.
- Multiple administrators have access to funds.
- Your exchanger operates under a jurisdiction with compliance requirements.
If you are just launching and balances are under $20–30k, start with a hardware wallet and the 24-hour rule. That alone blocks the vast majority of typical risks.
Three mistakes every exchanger makes
First: no separation — operational funds and reserves sit in the same wallet. Second: the seed phrase for the cold wallet is stored in the cloud or on the same machine. Third: multiple people have cold-storage access, but nobody keeps a log — who went in, when, and why is anyone's guess.
Each of these mistakes is survivable on its own. All three together are a reliable way to lose everything.
Conclusion
Splitting hot and cold storage is not optional — it is the foundation. The 24-hour rule, a cold reserve, multisig as volumes grow. Start simple: create a dedicated wallet for operational funds right now. If you are building or scaling a crypto exchanger, iEXWallet is a native wallet system built for exchanger operators — no middleman fees.
