A hot wallet is the exchanger's cash register — money leaves it in seconds. A cold wallet is the safe in the back room, reachable only with extra steps or several signatures. Keep everything in the register and you're one breach away from disaster. Keep everything in the safe and customers wait half a day for a payout. What an exchanger actually needs is a working ratio between hot and cold, not a gut feeling.
Why split reserves at all
Because hot and cold wallets do different jobs, and confusing them is an expensive mistake. A hot wallet stays connected to the internet and handles payouts through an API — a customer clicks "withdraw," the funds move. A cold wallet stays offline, often on hardware devices behind multisig, and it exists for safety, not speed.
Exchanger hacks almost always start with the hot wallet, because it's the only part anyone can reach remotely. Look back at the high-profile platform breaches of 2024-2025 and one pattern repeats: too much of the reserve was sitting "within reach" instead of in cold storage.
How much to keep in the hot wallet
A rule that actually holds up: your hot wallet should cover a bit more than 24-48 hours of peak payouts — and not a coin more. For a small exchanger that might be 5-10% of total reserves; a larger one with predictable traffic can often run leaner.
- Take your average daily payout volume from the last month, but size the buffer to the peak day, not the average.
- Add a 30-50% cushion for spikes — a new coin listing, a promo, a surge of clients from a Telegram Mini App.
- Sweep anything above that threshold into cold storage automatically, on a schedule — not "whenever someone remembers."
If the hot wallet keeps running dry and customers see "please wait, topping up," the limit is set too low. If it sits full of untouched surplus for months, you're just widening the attack surface for no reason.
What to do with the cold portion
The cold reserve should be boring, and that's the point. Split it across at least two or three storage points, physically or organizationally, so one compromised link doesn't cost you everything. Multisig — requiring several independent keys to move funds — isn't a luxury here, it's the baseline: no single employee should be able to walk off with the reserve alone.
Write down the actual process for topping up the hot wallet from cold: who initiates the transfer, who confirms it, how long it takes. A process that lives only in one admin's head isn't a process — it's a single point of failure.
Common mistakes in reserve splitting
The most common one: keeping the hot wallet padded "just in case" because moving funds to cold storage feels like extra work. The second: reusing the same key or access for both the hot wallet and cold storage management, which means the split only exists on paper.
The third shows up in fast-growing exchangers — the hot wallet limit was set six months ago for a fraction of today's traffic and never revisited. The business tripled, the register didn't, so either customers wait or someone manually shuffles funds back and forth, defeating the whole point of automation.
When and how to revisit the ratio
At minimum, once a quarter — and always after a sharp volume jump: a new payment channel, a viral mention, a new token added to your lineup. Revisit not just the number but the logic behind it — a newly added, less liquid asset may need its own, more conservative cap.
And honestly: there's no universal percentage that fits everyone. 5% in hot reserve is fine for one exchanger and dangerously thin for another where peak payouts hit in sudden weekly bursts. The rule is to calculate from your own traffic, not to copy a number from an article.
Conclusion
The hot/cold balance isn't a one-time setting — it's a process that grows with your exchanger's volume. Keep the hot wallet stocked for exactly what payouts need, and route the rest into cold storage behind multisig with a documented top-up process. If you'd rather automate that reserve logistics instead of manually approving every transfer, it's worth a look at a dedicated wallet built for exchanger owners — iEXWallet, with no middleman fee and flexible hot/cold controls.
