Hot Wallet
Also known as: software wallet, online wallet, MetaMask, crypto hot storage, self-custody wallet
A hot wallet is a cryptocurrency wallet that is connected to the internet and actively used for sending, receiving, and trading cryptocurrency. 'Hot' refers to the continuous internet connection, which makes the wallet accessible and convenient, but also exposes it to online attack vectors (hacking, phishing, malware).
Hot wallets include exchange-based wallets (where the exchange holds the keys), software wallets (mobile apps like MetaMask, Trust Wallet, or Exodus), and browser extension wallets. For small amounts of crypto used frequently, hot wallets offer the best balance of convenience and security.
Hot Wallet, explained at three levels
At home
A hot wallet is the crypto equivalent of the cash in your physical wallet: it is connected, accessible, and convenient for everyday use, but you would not keep your life savings in it. If you use a mobile app like Coinbase Wallet, MetaMask, or Trust Wallet to hold or use crypto, that is a hot wallet. It is connected to the internet at all times, which makes it easy to send or receive crypto but means it could potentially be hacked or accessed if your device or account is compromised.
At work
Businesses that actively transact in crypto (paying suppliers, receiving customer payments, operating in DeFi) need hot wallets for operational liquidity, the crypto equivalent of a business checking account for daily transactions. For security, only the crypto needed for active operations should be held in hot wallets; the majority of crypto holdings should be in cold storage (hardware wallets or institutional custody). This mirrors how businesses keep operating cash in checking accounts and larger reserves in more secure instruments.
At home
Self-custody hot wallets (MetaMask, Trust Wallet, Exodus) differ critically from exchange hot wallets: in a self-custody wallet, you hold the private key (and seed phrase): the exchange or wallet provider cannot access your crypto. In an exchange-held wallet (Coinbase, Binance), the exchange holds the keys and you have a balance in their system. Self-custody means you have direct control but sole responsibility: lose your seed phrase and the crypto is permanently inaccessible. With exchanges, you can recover access through account recovery but depend on the exchange's solvency.
At work
Hot wallet security for businesses: multi-signature (multisig) hot wallets require multiple private key signatures (e.g., 2 of 3 keys) to authorize a transaction: no single person or compromised key can drain funds. This is the standard for business hot wallets holding significant value. Hardware security modules (HSMs) can secure the signing keys in tamper-resistant hardware even for online wallets. Regular audits of hot wallet access permissions, transaction authorization workflows, and key management procedures are security best practices.
At home
Connecting a hot wallet to a DeFi app works through token approvals. To let a decentralized exchange move your USDC, you sign a transaction that gives its smart contract an allowance, often an unlimited one. That allowance stays active after you leave the site. If that contract is later hacked, or was malicious all along, it can drain every approved token without asking. In my view, approving only what you need and revoking old allowances with a tool like Revoke.cash is basic hygiene.
At work
Institutional hot wallet architecture separates the signing key from the business logic: smart contract wallets (Safe, formerly Gnosis Safe) implement multisig and access control at the protocol level, with transaction proposals reviewed and approved by multiple signers before execution. This creates an auditable approval workflow for all outgoing transactions. Connecting institutional hot wallets to MPC (Multi-Party Computation) key management solutions (Fireblocks, Copper) provides cryptographic key distribution: the full private key never exists in any single location, eliminating single-point-of-compromise risk.
Real-world examples
At home
Carlos used MetaMask (a browser extension hot wallet) to interact with DeFi protocols and buy NFTs. He kept only 0.5 ETH in MetaMask for active use. His larger ETH holdings stayed on a hardware wallet (cold storage). When a DeFi protocol he had approved access to was hacked, attackers exploited unlimited token approvals from connected wallets, but because Carlos's MetaMask held only a small amount, the exposure was limited.
At work
Nadia managed a crypto treasury for a blockchain startup. Operational funds (daily vendor payments in USDC, gas fees for contract deployment) were held in a Safe (formerly Gnosis Safe) multisig hot wallet requiring 2-of-3 approvals from designated signers. Larger reserve holdings were in cold storage with an institutional custodian. The multisig setup meant no single employee could move funds unilaterally, and every transaction had an auditable approval trail.
Common confusions
- Many people think their crypto on an exchange is stored in a 'hot wallet' they control — When crypto is held on an exchange (Coinbase, Binance, Kraken), the exchange controls the private keys and you have a balance in their system: you do not have a wallet you control. Exchanges hold the actual crypto in their own hot and cold wallet infrastructure. If the exchange restricts withdrawals, is hacked, or becomes insolvent, your crypto is at risk. A true hot wallet you control means you have downloaded the wallet software and hold the private key or seed phrase yourself.
- Some users assume that simply using a reputable wallet app makes their crypto safe from all theft — Hot wallet security depends primarily on device security and user behaviour, not the wallet brand. A reputable wallet app (MetaMask, Trust Wallet) running on a malware-infected device is compromised. A user who enters their seed phrase on a phishing site loses access regardless of wallet quality. The largest hot wallet losses occur through: malware on the device, seed phrase entry on malicious sites, and malicious DeFi contract approvals. Wallet choice matters less than device hygiene, seed phrase security, and awareness of social engineering attacks.
For analysts
When a client asks about operational cryptocurrency wallets for business use, the architecture recommendation should separate hot wallet (operational) from cold storage (reserves) with a clear policy on maximum hot wallet balance. The hot wallet setup should use multisig for any business-critical account, with a documented approval workflow for transactions above a threshold. This prevents the common failure mode of single-employee cryptocurrency wallets where one person leaving or becoming compromised loses access to business funds.
History & origin
Hot wallets emerged with cryptocurrency itself: the first Bitcoin wallet (Bitcoin Core, 2009) was a software wallet connected to the internet. As exchanges became the primary access point for most crypto users, exchange-based hot wallets became the dominant form of crypto custody for retail users. The Mt. Gox exchange hack (2014) demonstrated the catastrophic risk of large-scale hot wallet custody. The category split between exchange custody (convenient, managed by the exchange) and software wallets (self-custody, controlled by the user's private key or seed phrase) created the current landscape. MetaMask (launched 2016) became the dominant browser extension wallet for DeFi access, growing to tens of millions of users as DeFi expanded in 2020-2021. Hardware wallets (cold wallets) emerged as the secure alternative for long-term storage.