CertiK Calls for Hard Dollar Limits on Exchange Hot Wallets to Prevent Systemic Risk

Why Cold Storage Ratios Aren’t Enough

Cybersecurity firm CertiK is urging crypto exchanges to adopt hard dollar caps on their hot-wallet holdings, arguing that cold-storage ratios alone cannot prevent systemic losses. According to CertiK’s research team, as reported to Cointelegraph, “cold storage is a useful measure of online exposure, but it is not a standalone security score.” The firm’s recommendation comes on the heels of the record Binance hack, which specifically targeted hot-wallet assets, prompting several major exchanges to publicly disclose their cold-storage practices to reassure customers. Gate reported holding 88.26% of assets in cold storage, while Coinbase said it keeps more than 99% of customer assets offline.

A Three-Layer Risk Management Framework

Rather than imposing rigid percentage thresholds, CertiK proposes that exchanges establish hot-wallet caps for each asset and blockchain based on the most restrictive of three limits: the percentage of customer liabilities, estimated withdrawal demands, and an absolute loss ceiling tied to the exchange’s financial resources and recovery capabilities. “Flexibility should support operating liquidity, while hard dollar ceilings and circuit breakers limit potential loss,” CertiK said. The firm notes that while higher cold-storage levels generally reduce online exposure, the security benefits plateau at very high percentages. Additionally, overly stringent storage mandates could slow withdrawal processing, trigger rushed transfers, and concentrate operational risk within key-management systems.

Global Frameworks Already in Place

Regulators across multiple jurisdictions have already begun establishing cold-storage minimums. South Korea requires at least 80% of customer crypto assets in cold storage, Singapore calls for 90%, Japan mandates 95%, and Hong Kong’s baseline for licensed crypto trading platforms is 98%. Despite these high percentages already being in place, CertiK’s research suggests that percentage-based standards may not fully capture the complexity of exchange risk management and operational resilience.

The Binance Hack and Broader Implications

The scale of recent exchange breaches underscores the urgency of better security frameworks. Following the Binance hack, the exchange reported replenishing approximately 98% of the affected tokens and committed to absorbing the losses entirely. The remaining tokens, being less liquid, required additional time to recover. Beyond the direct impact, the breach revealed a secondary threat: North Korea-linked hackers reportedly created new memecoins to launder funds stolen from the hack. According to blockchain analysis firm Elliptic, approximately $430,000 flowed through six newly launched tokens on NEAR, where liquidity pools helped obscure the wallet transfers—though the transactions remained traceable on-chain.

CertiK’s proposal for dynamic, asset-specific hot-wallet caps represents a step toward more sophisticated exchange security practices. By combining flexibility for operational needs with hard loss ceilings, exchanges could better protect customer assets without compromising liquidity or withdrawal speed. Better exchange security practices reduce systemic risk across crypto and protect all market participants.

Source: CertiK, via Cointelegraph. Not financial advice.