CertiK recommends exchanges set hard USD holding limits for hot wallets
BIBIBI
AT A GLANCE
According to BlockBeats, CertiK recommends that exchanges set hard USD holding limits for hot wallets and not assess security solely on the proportion held in cold wallets.
Article
CertiK: Crypto exchanges should set hard USD holding limits for hot wallets
BlockBeats reported,November 10, that the CertiK research team said crypto exchanges should not rely solely on the proportion of assets held in cold wallets to assess security, but should also set clear USD holding limits for hot wallets. The recommendation came after a Binance hot wallet was attacked, prompting several exchanges to disclose their cold-wallet reserve ratios to bolster user confidence. Gate disclosed that 88.26%of its total assets were held in cold wallets, while Coinbase said more than 99%of its customer assets were offline.
The CertiK research team noted that the proportion held in cold storage can indicate the extent of assets' online exposure, but cannot serve as a security score on its own. Increasing the proportion held in cold wallets generally helps reduce online risk, but further increases may offer limited benefits when the proportion is already high. Overly rigid storage ratios can also slow withdrawals, force platforms to transfer assets hastily, and concentrate risk in key management systems.
CertiK recommends that exchanges set separate hot-wallet limits for each asset and blockchain, taking into account criteria: a proportion of customer liabilities, estimated withdrawal demand, and an absolute loss limit based on the platform's financial resources and ability to recover assets. The organization believes that platforms should maintain operational liquidity while limiting potential losses through hard USD limits and circuit breakers.
Original article link:https://m.theblockbeats.info/flash/376485
Key points
01
BlockBeats reported on November 10 that the CertiK research team recommended exchanges set clear USD holding limits for hot wallets.
02
The report said the recommendation came after an attack on a Binance hot wallet prompted several exchanges to disclose their cold-wallet reserve ratios.
03
Gate disclosed that 88.26%of its total assets were held in cold wallets; Coinbase said more than 99%of its customer assets were offline.
04
CertiK said the proportion held in cold storage reflects the extent of assets' online exposure but cannot serve as a security score on its own.
05
CertiK recommends setting separate hot-wallet limits for each asset and blockchain, taking into account a proportion of customer liabilities, estimated withdrawal demand, and an absolute loss limit, alongside circuit breakers.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
The recommendation emphasizes that, in addition to the amount of assets held offline, the USD amount held in hot wallets also matters. CertiK advocates considering both withdrawal needs and the losses a platform can withstand and recover from, rather than simply pursuing a higher proportion in cold wallets.
Why it matters to readers
CertiK noted that overly rigid storage ratios may slow withdrawals, force platforms to transfer assets hastily, and concentrate risk in key management systems. Its recommendation seeks to balance operational liquidity with limiting potential losses.
A high cold-wallet proportion disclosed by a platform should not be treated as a complete security score. This report offers other perspectives, including hot-wallet limits and withdrawal demand.
Risks and unknowns
The material is a media account and does not include CertiK's complete original statement.
The material does not identify which exchanges have adopted the limits or circuit breakers, nor does it provide information on their effectiveness.
The material does not provide details of the Binance hot-wallet attack, the amount lost, or the investigation's findings.
The ratios disclosed by Gate and Coinbase concern total assets and customer assets, respectively. Because their measurement bases differ, they should not be used to directly compare security.
Related Developments
Loading event timeline…
Related concepts
cold wallet
This term is not in the glossary yet. Browse related concepts in the glossary.