#GateLaunchesPoSECProofOfSecurity
The Real Meaning of Exchange Security Begins Where Reserve Numbers End
In cryptocurrency, transparency should never be judged by a single percentage. An exchange can demonstrate that it holds more assets than its users' total balances, but that alone does not explain how those assets are protected. The real question is what happens when the security of its online infrastructure is challenged. Can customer balances still be covered if the assets exposed to internet-connected systems become inaccessible? This is the question that makes Gate's Proof of Security (PoSEC) framework worth examining.

Traditional Proof of Reserves focuses on whether an exchange has sufficient assets to support its reported user liabilities. It is an essential foundation for accountability, but reserve quantity and asset protection are not the same thing. A platform may report sufficient reserves while users still have limited visibility into how those assets are stored. PoSEC introduces a different dimension to this discussion by examining cold storage coverage and the proportion of assets maintained outside routine online wallet infrastructure. It shifts the conversation from simply measuring what an exchange holds to understanding how its reserves are structured.

Gate's November 4, 2026 snapshot reports a cold storage coverage ratio of 104.58%. This is particularly important because the figure exceeds 100%, indicating that the reported cold storage assets are sufficient to cover the total user asset balance under the framework's defined calculation. In practical terms, this means the cold storage pool is designed to provide coverage even under a hypothetical scenario in which all hot wallet assets are lost. It is a meaningful security metric because it evaluates the capacity of offline reserves rather than relying exclusively on the combined value of online and offline holdings.

The storage distribution adds another layer to this picture. Gate reports that 88.26% of its assets are allocated to cold storage, while 11.74% are maintained in hot wallets. These two categories serve different purposes. Cold storage reduces exposure to internet-based attacks by keeping assets outside routine online transaction systems, while hot wallets provide the liquidity needed to process everyday deposits and withdrawals. The objective is not simply to eliminate online wallets, because exchanges still need operational liquidity. The more important consideration is whether the majority of assets remain protected while sufficient liquidity is available for normal platform activity.

There is also an important distinction between cold storage coverage and the overall reserve ratio. A reserve ratio above 100% indicates that reported reserves exceed user liabilities. A cold storage coverage ratio above 100% goes further by indicating that the qualifying cold storage assets alone are sufficient to cover those liabilities under the published methodology. These measurements answer different questions, and combining them provides a more complete perspective on asset protection. Neither figure, however, should be interpreted as a guarantee against every possible operational or cybersecurity failure.

The methodology behind the numbers deserves as much attention as the numbers themselves. Gate's PoSEC calculation uses reported asset shares from its published snapshots to determine cold storage coverage. The underlying storage distribution and reserve information come from different snapshot timings, so it is important not to assume that every figure represents one simultaneous balance. Price movements, asset transfers and changes in user liabilities can affect the underlying data. Understanding these calculation details is necessary when comparing security metrics or evaluating how consistently they are reported.

Another important consideration is what actually qualifies as cold storage. Offline storage is not merely a wallet that is rarely used. Effective protection also depends on private-key control, authorization procedures, custody arrangements and the ability to verify asset ownership. Gate's published methodology includes requirements relating to offline or independent custody, restricted routine transaction access and multi-party authorization. Its cold storage classification also includes certain assets held through independent custodians, so the reported 88.26% should not automatically be interpreted as cryptocurrency held entirely in publicly identifiable offline blockchain addresses.

This brings us to the most important part of the PoSEC discussion: independent verification. A security framework becomes more credible when its calculations and supporting evidence can be examined by an independent third party. Gate has announced that its PoSEC data is undergoing independent verification, covering asset authenticity and control, valuation and reporting methodology, and the accuracy of the coverage calculations. The audit report is expected to be published after completion. Until that report becomes available, the distinction between a published company-reported metric and an independently verified result must remain clear.

My perspective is that PoSEC introduces a useful question that the cryptocurrency industry should have been discussing more seriously. Users should not have to evaluate exchange security through reserve percentages alone. They deserve a clearer understanding of where assets are held, how access is controlled, how much is exposed to online infrastructure and whether offline holdings can independently support customer balances. At the same time, cold storage coverage cannot replace broader cybersecurity assessments, operational safeguards or transparent liability reporting. Security is a system, not a single number.

What makes the 104.58% figure particularly relevant is the standard it attempts to establish. It gives users a measurable way to examine whether cold storage is merely a secondary protection layer or whether it has sufficient reported capacity to cover the entire user asset base. The real value of this approach will depend on consistent updates, clearly documented calculations and independent verification that users can review for themselves.

Ultimately, trust in a cryptocurrency platform should not be built on attractive percentages or reassuring statements. It should be earned through evidence, accountability and security practices that remain transparent even when market conditions become difficult. Proof of Reserves addresses the question of whether assets are sufficient, while PoSEC adds the question of how those assets are protected. Both perspectives are important, and the industry will benefit if transparency evolves into something that users can continuously examine rather than something they are simply expected to believe.

DYOR

$BTC

‌$ETH