Cold Wallet

A cold wallet (or cold storage) is a cryptocurrency wallet whose private keys live on systems that are never exposed to the internet. Keys are generated offline, stored offline, and used to sign transactions on air-gapped or dedicated hardware. Because the keys never touch an internet-connected machine, remote attackers cannot steal them directly, which makes cold storage the standard for exchange reserves, protocol treasuries, and any funds that do not need to move frequently.

Cold vs. Hot Wallets

A hot wallet keeps keys on an internet-connected system (a browser extension, a mobile app, an exchange's operational server) so it can sign quickly. That convenience is also its exposure: any compromise of the host machine can leak the key. Cold wallets invert the tradeoff. Signing is slower and more deliberate, often requiring physical access to a hardware wallet or an air-gapped machine, but the key itself stays out of reach.

Institutions typically layer the two: a small hot-wallet float for daily operations, with the bulk of funds in cold storage behind a multi-signature wallet requiring several independent signers.

The Limit of Cold Storage

Cold storage protects the key, not the transaction. The key never leaves the device, but the transaction payload the device signs is prepared by an internet-connected computer, and that computer can lie.

The February 2025 Bybit hack made this failure mode concrete: the exchange's ETH cold wallet was drained despite hardware wallets, multi-sig, and offline key storage, because the compromised Safe{Wallet} frontend fed signers a malicious payload while displaying a routine transfer. The signers approved it without independent verification, a practice known as blind signing.

Operating Cold Storage Safely

• Verify on the device, not the screen: confirm the full destination address and decoded calldata on the hardware wallet display before approving.
• Simulate before signing: run high-value transactions through an independent simulation tool and compare the predicted end state against intent.
• Bound the blast radius: pair cold wallets with timelocks, withdrawal limits, and whitelisted destination addresses so a single deceived signing session cannot move everything.