Hot Wallet vs. Cold Wallet: The Nuance Most Explainers Skip

We've already covered the basic difference between a hot and cold crypto wallet: a hot wallet is a wallet, app, or exchange account connected to the internet (your phone, your browser, your exchange login), while a cold wallet is a device or medium that never connects to the network directly (a hardware wallet, a metal plate with a seed phrase engraved on it). But there's a finer point that rarely makes it into standard explainers: cold storage doesn't protect you from risk at the exact moment funds are moved out of it.

• 158,000 personal crypto wallet theft incidents were recorded in 2025 — nearly triple the 54,000 seen in 2022.
• Over 80,000 unique victims, with combined losses of $713 million.
• The overwhelming majority of these cases involve hot wallets compromised through phishing or malware, not a physical breach of cold storage.

"Attackers are targeting more users, but stealing smaller amounts per victim" is how Chainalysis describes the 2025 trend, and that's a textbook hot-wallet pattern: lots of small individual losses rather than one catastrophic breach.

But cold storage has a weak point too — the moment funds move out of offline storage into circulation. That's exactly how North Korea-linked hackers stole $1.5 billion from Bybit in February 2025, the largest crypto hack on record. The attack didn't break the cold wallet itself: attackers compromised a developer machine at Safe{Wallet}, the multisig service Bybit used, and altered the transaction-signing interface at the exact moment funds were being moved from cold storage into a "warm" wallet — Bybit's own staff approved what looked like a routine transaction while it actually redirected the funds to an attacker-controlled address, TRM Labs explains.

The practical takeaway is simple: use a hot wallet for money you touch regularly, and a cold wallet for savings you won't touch for months. We've already covered which hardware wallets are worth considering as a beginner, and what happens if you lose your private key or seed phrase.

*None of this should be read as personalized investment advice.*