Post

#GateLaunchesPoSECProofOfSecurity



PoSEC does not ask "do you have reserves?" It asks a harder question: "if your hot wallets get hit, can your cold storage alone still cover what you owe?"

That shift is the whole point. Most reserve checks show total assets. PoSEC checks where those assets sit, and what happens in the worst case.

On Nov 5, a new security framework called Proof of Security, PoSEC, was launched. The first snapshot was taken at 00:00 UTC on Nov 4. It showed a cold storage coverage ratio of 104.58%.

Read that number slowly, because it is not the same as a normal reserve ratio.

What PoSEC actually measures

PoSEC introduces one core metric: cold storage coverage ratio.

Cold storage coverage = cold storage assets / total user assets.

Cold storage means assets held offline, away from internet-connected systems. Hot wallets mean assets held online for daily trading, withdrawals, and fast settlement.

In the Nov 4 snapshot:
• Cold storage: 88.26% of total assets
• Hot wallets: 11.74% of total assets
• Cold storage coverage: 104.58%
104.58% means cold storage alone covers more than 100% of what is owed to users. Even if every hot wallet were wiped out in a breach, cold storage alone would still cover user assets, with a small buffer left.

That is different from saying "total reserves are 118.49%." As of Oct 18, total reserves were about $8.688 billion, with an overall reserve ratio of 118.49%. Total reserves include both cold and hot. PoSEC strips out the hot part and asks: does the cold part alone hold?

For a user, that is the more useful question. Hot wallets are the part most exposed to attack. Cold storage is the part meant to survive it.

What PoSEC does NOT measure

PoSEC is strong on storage. It is silent on other risks. That limit matters.

It does not prove how keys are managed. It does not prove who can move cold assets, how many approvals are needed, or how passwords and access are controlled. It does not prove internal controls, staff access, or vendor risk. It does not prove that a platform can keep operating during a crisis, only that cold assets can cover user balances on paper.

It is also a snapshot, not a live feed. A snapshot at 00:00 UTC on Nov 4 tells you the state at that minute. It does not tell you the state at 00:01, or next week. The value of PoSEC depends on how often snapshots are repeated, and whether an independent audit checks them.

The launch notes mention an independent audit for the figures. That audit is the part to watch. A self-reported ratio without a fresh audit is a claim. A ratio with a fresh, independent check is evidence.

How to read the 104.58% number

Do not read it as "safe forever." Read it as three separate reads:
1. Above 100% is the pass line. Below 100% would mean cold alone is not enough. 104.58% clears it, but the buffer is thin: 4.58 points above full cover. It is a pass, not a fortress.
2. The split matters as much as the ratio. Cold 88.26% / Hot 11.74% means most assets are offline. If hot share were 30% or 40%, the same 104.58% would be harder to hold, because more assets would sit in the exposed layer.
3. The trend matters more than one print. One snapshot at 104.58% is a start. Two, three, four snapshots holding above 100% would show discipline. One snapshot falling below 100% would show stress, even if total reserves still looked fine.
My check plan for PoSEC, in stages

I do not judge a security framework on launch day. I judge it on repeat.

First check now: Is the first snapshot clear? Yes. Date, time, cold share, hot share, and coverage ratio are all given. That clarity is a plus.

Second check next snapshot: Does coverage stay above 100%? Does cold share stay near 88% or higher? If cold share slips while total reserves stay high, that means more assets are moving into hot wallets. That is a yellow flag.

Third check audit and cadence: Is each snapshot backed by an independent audit? Is the cadence regular, or does it go quiet after launch? A framework that goes quiet after launch is marketing. A framework that keeps publishing is process.

What would raise my trust:
• Coverage holding above 100% across several snapshots;
• Cold share staying high, hot share staying low;
• Audit notes staying fresh and specific, not vague.
What would lower my trust:
• Coverage dipping below 100%, even once;
• Hot share rising fast without a clear reason;
• Snapshots stopping, or audit language getting vague.
PoSEC is not a promise that no hack can happen. It is a promise that, if the hot layer is hit, the cold layer alone can still cover users. At 104.58% on Nov 4, that promise held. The next snapshots will show if it keeps holding.

#WCTCS9
#ShareWeekly
post-image
This page contains third-party content and does not constitute any advice, nor does it represent Gate's endorsement of such views. For details, please see disclaimer.


Add a comment
Add a comment

Comment 2
HighAmbition
Can BTC hold here? 🤔
HighAmbition
Can BTC hold here? 🤔