Cryptocurrency exchanges should implement hard dollar limits on hot-wallet holdings instead of depending exclusively on cold-storage ratios for security assessments, according to cybersecurity firm CertiK. The recommendation follows recent disclosures by several trading platforms detailing their cold-storage percentages to reassure users after a major Binance hack targeting hot wallets. Gate reported holding 88.26% of assets in cold storage, while Coinbase stated it keeps over 99% offline.
CertiK's research team noted that while storing assets offline reduces online exposure, cold storage alone is not a comprehensive security score. Different jurisdictions currently enforce varying baseline requirements for cold storage, ranging from 80% in South Korea to 98% in Hong Kong. However, CertiK cautioned that extremely high cold-storage levels offer diminishing security benefits and can potentially slow user withdrawals, trigger hurried transfers, and concentrate risk within key-management systems.
To address these vulnerabilities, CertiK suggested exchanges establish hot-wallet caps for individual assets and blockchains based on three metrics: customer liability percentages, estimated withdrawal demands, and absolute loss ceilings tied to the platform's financial recovery capacity. Meanwhile, Binance stated it has replaced roughly 98% of the tokens affected by the recent hack, while blockchain analytics firm Elliptic reported that North Korea-linked hackers have utilized newly launched memecoins to launder a portion of the stolen funds.
For crypto participants and market observers, evolving exchange security practices and hot-wallet risk management remain critical focal points following significant exploits and subsequent platform recovery efforts.