#GateLaunchesPoSECProofOfSecurity

#Gate推出行业首个资金安全证明
Proof of Reserves Was Only Part of the Security Question. Now Comes Proof of Storage.

For years, one of the biggest questions users have asked centralized exchanges has been simple: are customer assets fully backed?

Proof of Reserves was an important step toward answering that question. But there is another issue that deserves just as much attention: even when an exchange holds enough assets, how are those assets actually stored, and what happens if its online wallets are compromised?

Gate's newly introduced Proof of Security framework, or PoSEC, attempts to address this second question.

The difference between these two measurements is important. PoR focuses on whether reserves are sufficient to cover user balances. PoSEC focuses on the storage structure and whether qualifying cold-storage assets could cover user assets under an extreme hot-wallet-loss scenario.

What Does the 104.58% Figure Actually Mean?

Gate reports a cold-storage coverage ratio of 104.58%, based on its November 4, 2026 snapshot.

The disclosed storage distribution is:

Cold storage: 88.26% of the reported storage structure.

Hot wallets: 11.74%.

User assets: 84.39% of the separate reserve structure.

Platform-owned assets: 15.61%.

The reported coverage ratio compares the cold-storage share with the user-asset share. A result above 100% means the qualifying cold-storage share is greater than the user-asset share under Gate's stated methodology.

In practical terms, Gate's calculation indicates that cold storage alone would be sufficient to cover all user assets, even under a scenario where all hot-wallet assets were lost.

That is a meaningful security metric, but the methodology deserves attention. The storage and reserve figures come from different snapshots and different totals. Gate itself explains that intervening price movements and fund flows are not included in this comparison.

So the 104.58% figure should be understood as a disclosed coverage calculation, not as a synchronized, independently confirmed dollar-for-dollar balance at one exact moment.

Cold Storage Is About More Than Moving Coins Offline

Keeping private keys offline reduces exposure to online attacks, but secure custody involves several layers.

Under Gate's published criteria, qualifying cold storage must not be used directly for routine deposits and withdrawals, must be held offline or through independent custody, must require multiple-party authorization for transfers and must be independently verifiable.

For on-chain assets, this involves offline private-key storage, multiple signatures and verification of transaction details before signing.

There is another detail worth understanding: Gate also includes certain traditional assets, such as stocks and U.S. Treasuries held by independent custodians, within its cold-storage calculation.

These are not blockchain cold wallets. They are off-chain assets held under separate custody and authorization arrangements. That distinction matters when users compare the reported coverage figure with publicly visible blockchain wallet balances.

The Audit Is the Next Important Test

Gate says an independent third-party audit is currently underway. The review is intended to cover three important areas: whether the assets exist and are controlled by the platform, whether valuation and reporting methods are accurate, and whether the coverage calculation is correct.

I would pay close attention to the completed report.

A published methodology is a good starting point, but independent verification is what allows users to assess whether the disclosed figures and classifications stand up to external scrutiny.

There are also questions worth following over time: will snapshots become more frequent, will reporting dates be aligned, how will asset valuations be handled during volatility, and how will changes in custody arrangements be disclosed?

My Take

I see PoSEC as an important expansion of the transparency conversation. Reserve sufficiency and storage security answer different questions, and users should not have to rely on one metric to understand both.

However, no coverage ratio can eliminate every risk. Cold storage does not automatically protect against every operational failure, custody issue, valuation problem or legal claim.

The real value of PoSEC will depend on consistent disclosures, clear methodology and independent verification that users can examine themselves.

My view is simple: don't judge an exchange's security by one impressive percentage. Look at the reserves, storage distribution, custody arrangements, verification process and how transparently the platform reports changes.

What additional security information would you want every exchange to disclose: wallet-level proof, independent custody reports, audit frequency or real-time cold-storage coverage?

Not financial advice.

$GT @Gate_Square