
Excess reserves are assets a cryptocurrency exchange holds beyond its recorded customer liabilities, while hot wallet assets are funds maintained in internet-connected wallets for everyday transactions. Comparing excess reserves vs hot wallet assets helps crypto users assess whether an exchange's financial buffer could absorb a major online wallet loss without reducing customer asset coverage.
A reserve ratio above 100% indicates excess reserves beyond recorded customer liabilities.
If excess reserves equal or exceed hot wallet assets, they may provide a financial buffer against a complete hot wallet loss, assuming the remaining assets are accessible and unencumbered.
Cold storage coverage of at least 100% means qualifying protected assets equal or exceed user assets under the stated methodology.
Proof of Reserves and wallet security reports measure different risks and should be evaluated together.
| Metric | Excess Reserves | Hot Wallet Assets |
|---|---|---|
| Definition | Assets exceeding recorded user liabilities | Assets held in operational online wallets |
| Main purpose | Provide additional financial coverage | Support deposits and withdrawals |
| Calculation | Total eligible reserves − user liabilities | Combined value of hot wallet balances |
| Primary risk | Asset valuation, liquidity and undisclosed liabilities | Hacking, phishing and compromised credentials |
| Security measures | Verified reserves, audits and liability reporting | MPC, multi-signature, monitoring and withdrawal limits |
| Coverage benchmark | At least equal to potential hot wallet losses | Ideally limited to operational liquidity needs |
| Verification | Proof of Reserves and financial records | Wallet disclosures and on-chain balances |
| Main limitation | Surplus may be inaccessible or encumbered | Internet connectivity increases exposure |
An exchange's reserve surplus is calculated by subtracting user liabilities from eligible reserve assets.
Excess Reserves = Total Reserve Assets − User Liabilities
A related coverage measure compares this surplus with the hot wallet balance:
Hot Wallet Loss Coverage Ratio = Excess Reserves ÷ Hot Wallet Assets × 100
For example, an exchange holding $120 million in eligible reserves against $100 million in user deposits has $20 million in excess reserves.
If its hot wallets hold $10 million, the surplus covers twice the reported online wallet exposure, producing a 200% coverage ratio.
This does not prove that withdrawals could continue uninterrupted. Reserve quality, liquidity, legal ownership and withdrawal speed remain important.
The main difference between a hot wallet vs cold wallet is how private keys are accessed and protected.
Hot wallets work through internet-connected infrastructure. Mobile wallets, desktop wallets, browser extensions and exchange wallets support frequent transactions, active trading and quick access to digital assets.
Non custodial hot wallets give users self custody and control over their private keys. Custodial wallets place key management with an exchange or financial institution.
Hot wallets store or access signing credentials through connected systems, making hot wallets more exposed to online threats. Secure enclaves, hardware security modules and multi party computation can reduce exposure without necessarily placing a complete private key on a single connected device.
Cold wallets work by keeping signing keys stored offline. Hardware wallets, carefully managed paper wallets and dedicated offline devices are commonly associated with long term storage and significant holdings.
The differences between hot and cold wallets affect both transaction convenience and security.
Institutions typically combine hot and cold wallets, sometimes adding a warm wallet as an intermediate operational layer. Hot wallets remain connected for routine activity, while cold storage holds the vast majority of assets wherever the custody structure permits.
Centralized exchanges commonly minimize hot wallet exposure by holding only what is necessary for near-term withdrawals. A frequently cited 2–5% allocation is not a universal industry standard; actual percentages vary by exchange.
Institutional-grade security arrangements may include:
Multi-signature authorization: Multiple parties must approve transfers, reducing dependence on a single point of control.
Multi-party computation (MPC): Cryptographic signing operations are distributed rather than exposing one complete private key.
Hardware security modules: Specialized physical devices protect sensitive cryptographic operations.
Withdrawal controls: Dynamic withdrawal limits, monitoring and additional checks for unusual withdrawal requests.
Account protection: Multi factor authentication, biometric authentication where supported, and phishing-resistant authentication.
A multi-signature wallet can reduce unilateral transfer risk, although compromised signers or operational failures remain possible.
Gate's Proof of Reserves report dated October 18, 2026, disclosed approximately $8.689 billion in reserve assets against $7.333 billion in customer net balances, representing an 118.49% reserve ratio and approximately $1.356 billion in excess reserves.
Separately, its November 4, 2026 Proof of Security disclosure reported 104.58% cold storage coverage. Cold storage represented 88.26% of total assets and hot wallets 11.74%.
The figures come from different reporting dates and must not be treated as a synchronized balance sheet.
Gate's methodology requires qualifying cold storage assets to meet four conditions: exclusion from routine withdrawal processing, offline or independent custody, multi-party transfer authorization, and verifiable ownership, balances and valuation.
The classification includes qualifying off-chain traditional assets, not exclusively blockchain cold wallets.
Gate reports using multi-signature and MPC technology for hot wallets, alongside dynamic withdrawal controls. Independent third-party verification of the November 2026 PoSEC disclosure remained in progress when checked.
Proof of Reserves compares disclosed assets with customer balances. Gate's 100% reserve policy uses Merkle Tree verification and zk-SNARKs, enabling users to check whether their recorded balances are included without publicly exposing account details.
The difference between proof of reserves and cold storage coverage matters because neither metric independently establishes complete solvency.
A comprehensive assessment should examine asset quality, highly liquid holdings such as Bitcoin and Ethereum, off-chain liabilities, borrowing arrangements, custody records, regulatory compliance and independent audits.
Reserve snapshots may miss undisclosed liabilities or temporary borrowing used to inflate balances. Third-party verification improves confidence but does not guarantee that every risk has been eliminated.
Hot wallets face cyber threats including malware, phishing attacks, malicious smart contracts and SIM swapping that can intercept SMS authentication codes.
For self custody, the Ethereum Foundation's security guidance recommends protecting recovery credentials and using hardware wallets where appropriate.
Users should keep only operational funds in hot wallets, back up their seed phrase securely, use two-factor authentication and verify transaction permissions before signing.
Cold storage reduces online risks but cannot eliminate physical theft, recovery failures or operational mistakes.
Yes, potentially. Excess reserves at least equal to hot wallet assets can absorb the reported loss mathematically, provided those reserves remain accessible, correctly valued and free of competing claims.
No. A 100% reserve ratio indicates reported assets equal recorded customer liabilities at a particular snapshot. It does not establish comprehensive solvency, operational security or immediate liquidity.
Cold wallets generally reduce internet-based key exposure because private keys remain offline. Hot wallets offer faster transaction access but face greater online attack risks.
Some exchanges provide Merkle proofs and cryptographic verification tools. These can confirm inclusion of individual balances, but independent audits and complete liability disclosures remain necessary for broader assurance.











