A hot wallet is connected to the internet. A cold wallet is not. This simple distinction creates a massive difference in security profile. A hot wallet can be compromised remotely through software vulnerabilities, phishing, or malware. A cold wallet requires physical access to compromise. Nearly every major crypto theft has targeted hot wallets or systems connected to them.
Cold storage comes in several forms. The most secure is a hardware wallet that has never been connected to the internet, with the seed phrase stored on metal plates in a physical safe. Air-gapped computers used solely for signing transactions offer similar security. Multi-signature setups, where multiple keys stored in different locations must agree to sign a transaction, add another layer. Institutional custody solutions combine all of these approaches.
The inconvenience of cold storage is real. To send a transaction from a properly secured cold wallet, you need to create the transaction on a connected device, transfer it to the air-gapped signing device (often via QR code or USB), sign it offline, then transfer the signed transaction back to the connected device for broadcasting. This process can take 10-30 minutes and is impractical for frequent trading.
Hot wallets exist because people need to use their crypto. MetaMask, Trust Wallet, and similar browser extensions are hot wallets. Exchange accounts are hot wallets managed by the exchange. DeFi interactions require hot wallets by definition, since smart contract interactions need a connected wallet to sign transactions. If you are actively trading or farming, some portion of your assets needs to be hot.
The security surface area of a hot wallet is substantial. The wallet software itself could have vulnerabilities. The browser it runs in could be compromised. The operating system could have malware. The network could be monitored. Phishing sites can trick users into signing malicious transactions. Approval exploits can drain wallets through previously granted token approvals. Each of these is a realistic attack vector that has been exploited in practice.
Hardware wallets like Ledger and Trezor occupy a middle ground. They store private keys on a dedicated device with a secure element chip, but they connect to a computer for transaction signing. The key never leaves the device. Even if the computer is fully compromised, the hardware wallet only signs what is displayed on its screen. The user needs to physically confirm the transaction details on the device. This makes them significantly more secure than software hot wallets while still being practical for regular use.
Multi-signature wallets add security without going fully cold. A 2-of-3 multisig means any two of three keys must sign a transaction. You might keep one key on a hardware wallet at home, one in a bank safe deposit box, and one with a trusted party. An attacker would need to compromise two separate locations. Gnosis Safe is the most widely used multisig solution on Ethereum, securing billions of dollars for DAOs and institutions.
The right approach for most individuals is a tiered system. Keep the majority of long-term holdings in cold storage, with the seed phrase backed up securely. Keep a working amount in a hardware wallet for regular transactions. Keep a small amount in a hot wallet for daily DeFi activity. The specific percentages depend on how active you are, but the principle of not keeping more in a hot wallet than you can afford to lose is universal.
Institutional custody adds additional layers like insurance, regulatory compliance, and segregated accounts. Custodians like Fireblocks, BitGo, and Coinbase Custody use MPC (multi-party computation) technology that distributes key material across multiple parties so that no single party ever has the complete key. This provides cold-storage-level security with hot-wallet-level convenience, which is why institutions pay significant fees for these services.