Cryptocurrency exchanges should implement strict financial limits on their online hot wallets rather than relying strictly on cold-storage ratios to measure overall platform security, according to a recent analysis by cybersecurity firm CertiK. The recommendation was issued as various digital asset platforms recently disclosed their offline storage percentages in an effort to restore customer confidence following a record-breaking security breach that targeted Binance's hot wallets.
In the wake of the incident, major trading venues highlighted their offline security measures. Gate reported that approximately 88.26% of its aggregate assets are kept in cold storage, while Coinbase stated that it maintains more than 99% of customer holdings offline. CertiK’s research team emphasized that while cold-storage percentages serve as a helpful metric for online exposure, they should not function as a standalone security score. Several jurisdictions enforce minimum offline storage requirements, including South Korea at 80%, Singapore at 90%, Japan at 95%, and Hong Kong at a baseline of 98% for licensed trading platforms. The cybersecurity firm noted that although higher offline storage levels typically decrease online vulnerabilities, the protective advantage diminishes significantly at extreme thresholds.
Furthermore, maintaining overly rigid storage ratios can inadvertently delay customer withdrawals, necessitate rushed asset transfers, and dangerously concentrate risk within key-management systems. To address these vulnerabilities, CertiK suggested that digital asset exchanges establish hot-wallet caps for individual assets and blockchains based on the most stringent of three distinct metrics: a set percentage of customer liabilities, projected withdrawal demands, and an absolute loss ceiling calculated from the exchange's financial resources and recovery capabilities. Incorporating flexibility maintains essential operating liquidity, whereas strict financial ceilings and circuit breakers effectively mitigate potential losses.
Meanwhile, Binance reported that it has successfully replenished roughly 98% of the tokens impacted by the recent breach, committing to absorb the resulting losses entirely. In an update provided on Wednesday, the exchange explained that the remaining unacquired tokens exhibit lower liquidity and will require additional time to obtain. Concurrently, investigative findings from Elliptic indicate that hackers with suspected ties to North Korea have utilized newly created memecoins to launder funds stolen during the attack. The blockchain analysis firm successfully traced approximately $430,000 moving through six recently launched tokens on the NEAR network, where liquidity pools were exploited to obscure wallet-to-wallet transfers, though the transactions remained visible onchain. Readers can explore further updates and developments within the digital asset sector by visiting our dedicated Crypto news hub.
