Hot wallet

The mechanism is direct: the private key or seed is stored on the connected device, sometimes encrypted with a password, and signing happens from the app or browser extension. That immediacy is its advantage. In exchanges and custodians, the hot wallet is the liquidity pool for withdrawals and daily operations, usually with limits and periodic top-ups from cold storage.

It is the optimal option for frequent use, payments, trading and DeFi interaction, where speed counts. The trade-off is a larger online attack surface: malware, phishing, leaked keys or signing a malicious approval. Best practice is to treat it as the day-to-day wallet, keeping only working balances in it and holding the bulk of the holdings in cold storage, a separation that limits exposure without giving up operability.

The most common consumer examples are MetaMask, Phantom or Trust Wallet, and the operational hot wallets of exchanges like Binance or Coinbase. The sector's history makes the institutional best practice clear: minimize the hot balance and harden the controls around it, since it is the environment with the greatest online exposure. The ratio between hot and cold funds is, in fact, a trust metric watched closely in professional custody.