A hot wallet is a crypto wallet whose private keys sit on a device or server that is connected to the internet, so transactions can be signed and sent at once. Mobile wallet apps, desktop wallets, browser-extension wallets and the online wallets that exchanges use to process customer withdrawals are all hot wallets. They exist because many uses of crypto, from paying a merchant to running a trading platform, need funds that can move in seconds.
The opposite is a cold wallet, which keeps keys offline. Most serious holders and nearly every exchange use both: a small hot balance for day-to-day activity and a larger reserve in cold storage. A side-by-side comparison of hot, cold, hardware and software options is on the Hot, Cold, Hardware and Software Wallets page; this entry looks at hot wallets alone.
Hot wallet in plain terms
A shop keeps a cash register at the counter and a safe in the back office. The register holds enough money to make change all day, and staff can open it in a second. The safe holds the rest, and opening it takes time and more than one person.
A hot wallet is the cash register. It is convenient precisely because it is always within reach, and for the same reason it is the first thing a thief goes for. Sensible shops keep little in the register and empty it into the safe regularly. Sensible crypto users and businesses do the same: they keep only working money in a hot wallet and move the rest to offline storage.
How a hot wallet works
A hot wallet generates or imports a private key, usually from a seed phrase, and stores it encrypted on the device, protected by a password, PIN or the phone's secure hardware. When the owner sends funds, the software unlocks the key, signs the transaction with a digital signature and broadcasts it to the network, where it waits in the mempool until a block includes it.
Consumer hot wallets are usually non-custodial: the user holds the key. A Web3 wallet running as a browser extension is a typical example. The hot wallets of a centralized exchange (CEX) are different: the exchange controls the keys, pools customer funds, and pays withdrawals out of them. Exchanges refill these wallets from cold reserves as needed, and many publish proof of reserves (PoR) reports that cover hot and cold addresses together.
Risks
Any key that sits on a networked machine can, in principle, be reached by an attacker. The main threats are:
- Malware and remote access. Programs that read clipboard contents, log keystrokes or copy wallet files can take the key outright. A private key sweeper script then empties the address the moment funds arrive.
- Phishing and social engineering. Fake support agents, fake wallet apps and lookalike websites trick users into typing their recovery words or approving a malicious transaction.
- Account takeover. When a hot wallet or exchange account relies on text-message codes, SIM swapping can hand an attacker the second factor.
- Address tricks. A wallet address poisoning scam plants a lookalike address in the transaction history in the hope that the user copies it.
- Insider and infrastructure failures at custodians, such as weak key management on exchange servers.
Documented exchange hot wallet hacks
Exchange hot wallets have been among the largest targets in crypto, which is why the cold-storage split exists. Two widely reported cases illustrate the pattern:
- Coincheck, January 2018. The Japanese exchange lost NEM tokens then worth roughly $530 million from a wallet connected to the internet. It later said it would compensate affected customers from its own funds, and the incident led Japanese regulators to tighten oversight of exchanges.
- Binance, May 2019. Binance disclosed that attackers had withdrawn more than 7,000 BTC from its bitcoin hot wallet in a single transaction, which it said was about 2% of its total bitcoin holdings. The exchange covered the loss from its Secure Asset Fund for Users (SAFU), so customer balances were not reduced.
The earlier collapse of Mt. Gox in 2014 is also often cited in discussions of exchange key management. Stolen funds are frequently traced with blockchain analytics as they move through mixers and other exchanges.
Safeguards and good practice
Individual users reduce hot-wallet risk by keeping only spending money in it, backing up the seed phrase offline, using app-based or hardware multi-factor authentication (MFA) rather than text messages, checking addresses character by character, and revoking token approvals they no longer need. A multi-sig wallet or a hardware signer can be paired with a hot interface so that the online device never holds a complete key.
Exchanges and custodians typically set hot-wallet limits as a share of total holdings, use multi-party computation or multi-signature schemes, require several approvers for large movements, monitor withdrawals for unusual patterns, and keep the bulk of client assets in cold storage. Licensing regimes such as the NY BitLicense include custody and cybersecurity requirements for firms that hold customer crypto.