A cold wallet holds a key or keyshard in a way that is completely disconnected from any electronic networks. This isolation is the defining feature of cold wallets, designed to provide maximum security for digital assets by significantly reducing the risk of unauthorised access, hacking, or theft.
How does a cold wallet provide security?
A cold wallet stores a cryptographic key or keyshard in a manner that is entirely disconnected from electronic networks, including the internet, local area networks, and wireless connections. Complete network isolation is the defining characteristic of cold storage and the primary reason cold wallets offer the highest level of security available for digital assets.
Because cold wallets have no network connectivity, remote attackers cannot access the private keys they hold. Even if a sophisticated attacker compromises an exchange’s online infrastructure, funds stored in cold wallets remain beyond reach. Cold wallet signing operations require physical access to the storage medium, which adds a tangible barrier that online-only attacks cannot overcome.
Cold storage can take several forms, including hardware security modules (HSMs) stored in secure facilities, air-gapped computers that have never been connected to a network, and paper-based key backups kept in tamper-evident containers. Each approach shares the same core principle: the signing key never touches a networked device.
Platforms such as BitMEX rely on cold wallets as a fundamental component of their asset custody strategy. By holding the majority of user funds in cold storage, BitMEX ensures that the bulk of deposits benefit from the strongest possible protection. For information on how BitMEX balances cold and hot wallet usage, refer to the Does BitMEX Use a Hot Wallet? Article.
What is the difference between Hot and Cold wallets
Hot wallets are software-based tools (mobile apps, browser extensions, or desktop programs) designed for high accessibility.
- Convenience: They allow for instant transactions and easy interaction with decentralised applications (dApps).
- Risk: Because they are online, they are exposed to remote threats like exchange hacks or keyloggers on your device.
- Common Examples: MetaMask, Trust Wallet, Coinbase Wallet, and exchange-based wallets.
Cold wallets are physical storage solutions (hardware devices or paper) that isolate your private keys from the internet.
- Security: By keeping keys offline, they eliminate the primary attack path for remote hackers. Even when plugged in, transactions are "signed" within the device, ensuring the private key never leaves it.
- Friction: Using them requires physical access to the device and often multiple confirmation steps, making them slower for active trading.
- Common Examples: Hardware wallets like Ledger and Trezor, or paper wallets.
Many users adopt a hybrid approach, keeping a small amount in a hot wallet for daily use and the bulk of their assets in cold storage for long-term safety.