Post

#GateLaunchesPoSECProofOfSecurity


Security Is More Than Holding Reserves. It Is About How Those Assets Are Protected.

In crypto, transparency should not stop at showing how much an exchange holds. An equally important question is how those assets are stored, what controls protect them, and how much exposure exists during normal platform operations. This is where Gate's introduction of PoSEC (Proof of Security) brings an important dimension to the conversation around exchange security.

Proof of Reserves and Proof of Security address different aspects of asset protection. Proof of Reserves focuses on whether the platform holds sufficient assets to cover customer balances. PoSEC introduces another perspective by focusing on the storage structure behind those assets, particularly the relationship between cold storage and user liabilities.

The distinction between hot and cold wallets matters. Hot wallets support routine platform operations, including deposits and withdrawals, but their online accessibility also creates a different security exposure. Cold storage, on the other hand, is designed to reduce online exposure by keeping assets under more restricted access and security controls. Multi-signature authorization, offline key management and additional custody safeguards can help reduce the risks associated with unauthorized access.

What makes the PoSEC concept interesting is its emphasis on making this storage structure more transparent and measurable. Rather than discussing security only in general terms, a dedicated cold storage coverage metric gives users another way to evaluate how platform assets are protected.

The reported 104.58% cold storage coverage figure is particularly noteworthy. If calculated against total user assets as described, a ratio above 100% indicates that the reported cold storage holdings exceed user asset liabilities. This is an important distinction because it focuses on the amount held in a more restricted storage environment rather than simply looking at total reserves.

However, security should never be reduced to one percentage. A strong cold storage ratio does not automatically eliminate every possible risk. Operational controls, private key management, withdrawal authorization, internal access policies, cybersecurity infrastructure and independent verification all matter. The methodology behind the numbers is just as important as the numbers themselves.

This is also why independent auditing deserves attention. Publicly explaining how a security metric is calculated is a positive step, while external verification can provide another layer of confidence. Users should be able to understand what is included in the calculation, how frequently the information is updated and whether the reported holdings can be independently assessed.

Gate has already established a broader transparency foundation through its Proof of Reserves framework. Its October 2026 report showed $8.688 billion in total reserves and an overall reserve ratio of 118.49%, covering 500 crypto assets. The development of PoSEC represents a different area of focus: moving the security discussion beyond reserve quantities and toward the way assets are protected.

For me, the most important aspect of this development is the direction it encourages for the entire industry. Exchange security should not depend entirely on reputation or marketing statements. It should be supported by measurable information, understandable methodologies and meaningful verification.

As digital asset platforms continue to grow, users need more than convenient trading tools and access to new markets. They also need confidence in the infrastructure holding their assets. Strong security requires multiple layers working together, and greater transparency makes those layers easier to evaluate.

PoSEC is a constructive step in that direction. The real value will come from consistent reporting, clear technical standards and independent verification over time. Ultimately, trust is not established by a single announcement. It is built through security practices that can be examined, tested and demonstrated continuously.

@GateSquare @Gate_Square

$MU $NVDA $AMD
post-image
Dr.Han
Recently, a series of thefts have occurred across the industry. Every security incident affects not just one company, but everyone’s trust in the crypto industry.

It also reminds me of why we started working on Proof of Reserves (PoR) in 2020. The idea was simple: if users entrust their assets to an exchange for safekeeping, they have the right to know whether those assets are fully backed. Trust isn’t about believing promises; it requires verifiable evidence.

Over time, PoR was adopted by more and more exchanges and became a very important part of the industry’s security framework.

When change happens, it can look like just an experiment. Only in hindsight do we realize that it has gradually become an industry consensus.

Over the past few years, we have consistently made platform security and user funds our top priorities, continually optimizing and improving our exchange security measures. But these recent incidents have made me realize that Proof of Reserves alone is not enough for an exchange.

PoR can tell users whether an exchange has sufficient asset reserves, but it doesn’t answer another equally important question: how exactly are those assets stored? No exchange can promise that it faces no risk of theft, but how much of its assets are in cold wallets and how much in hot wallets? In the worst-case scenario, would the assets in cold storage still be enough to cover user assets? This information can be disclosed to users transparently; the industry just doesn’t yet have a public, unified measurement standard.

So today, Gate launched Proof of Security (PoSEC). With PoSEC, users no longer have to simply take an exchange’s word that “assets are safe.” They can directly view the cold storage coverage ratio, calculation methodology, and asset storage structure, with the relevant data verified through a third-party audit.

PoSEC introduces a straightforward metric: the cold storage coverage ratio. As long as this figure is at least 100%, it means that even if the assets in an exchange’s hot wallets were wiped out, the assets in cold storage would still be sufficient to cover all user assets.

Gate’s latest PoSEC cold storage coverage ratio is 104.58%.

Here, cold storage includes not only on-chain crypto assets, but also traditional off-chain assets involved in the platform’s business. For on-chain digital assets counted as cold storage, private keys are kept offline, asset transfers require multiple signatures, and transaction details are independently verified before signing. Traditional assets such as stocks and U.S. Treasuries are held by independent custodians and transferred and managed according to established authorization procedures. We are working with an independent third-party audit firm, and the report will be published on our official website once the audit is complete. We will also share more details over time.

Cold storage is important because keeping private keys offline can greatly reduce the risk of on-chain assets being exposed to online attacks. The higher the cold storage coverage ratio, the greater the safety buffer for user assets in extreme situations. This is increasingly drawing attention from regulators. Recently, South Korean regulators have also been discussing raising the required proportion of exchange assets held in cold wallets.

When Proof of Reserves went live in 2020, I had no idea how far it would go.

This time, we also hope PoSEC will become more than just a security measure at Gate and can become an industry consensus. If more platforms are willing to disclose their hot and cold wallet structures and let users verify how their assets are protected, users will have a genuine standard for comparison, and the industry’s overall security threshold will rise.

True trust should be built on public, transparent, and verifiable data.

PoSEC’s calculation methodology and cold storage standards are now public. We welcome our peers to refer to them, and all users to scrutinize them.

gate.com/proof-of-security

Don’t trust, verify.
This page contains third-party content and does not constitute any advice, nor does it represent Gate's endorsement of such views. For details, please see disclaimer.
MUMU-6.98%
NVDANVDA-3.03%
AMDAMD+0.88%

  • 2

Add a comment
Add a comment

Comment
APYCollector
2 minutes ago
PoSEC is the right direction. Reserves are just numbers on paper; how they’re stored is what matters.
0View Original
ArbitrageFox
16 minutes ago
From PoR to PoSEC, industry transparency is evolving, but it’s all for nothing if user education doesn’t keep pace.
0View Original
ProtocolGoldRusher
20 minutes ago
@Gate_Square Is the update frequency monthly or real-time? Can historical data be traced?
0View Original
CrossChainArchaeology
23 minutes ago
Security isn't a percentage game; supporting measures like private key management, internal processes, and SOC2 also need to be disclosed in tandem.
0View Original
IndicatorOverboughtHandler
23 minutes ago
Full coverage of 500 assets? The computational complexity seems substantial. Curious how they implement the Merkle tree.
0View Original
ChartMassage
24 minutes ago
The hot wallet attack surface is always a risk; PoSEC at least lets users know where their exposure lies.
0View Original
FractionalFan
35 minutes ago
Gate’s move is pretty smart: with the PoR race going nowhere, it’s now competing on PoSEC—a differentiated strategy.
0View Original
EthSentinel
37 minutes ago
Independent audits need to catch up quickly; self-reported data has limited value, while third-party endorsement carries more weight.
0View Original
PvtMomentumist
38 minutes ago
First Review
Does the cold wallet multisig solution use HSM or MPC? Security varies quite a bit across architectures.
0View Original
View More