In February 2025, roughly $1.5 billion vanished from a single crypto exchange in a matter of minutes.
The largest theft in crypto’s history, and it didn’t happen because someone fell for a phishing email or reused a weak password. The attackers, later linked to North Korea’s Lazarus Group, had found something far more unsettling: a crack in the exchange’s own internal process for approving transactions, the very system meant to catch something like this before it happened. By the time anyone at the exchange realized what was going on, the money was already gone.
Table of Contents
Stories like that are exactly why so many people ask the same nervous question the moment they set up their first wallet:
Is a hot wallet actually safe to use?
The honest answer isn’t a simple yes or no. It depends on understanding what “hot” actually means, what’s genuinely being risked, and where the real danger tends to sit, because for most people, it isn’t where they’d expect.
So, Are Hot Wallets Safe for Storing Crypto?
For everyday use, small to moderate amounts, active trading, paying for things, and interacting with apps, a hot wallet is reasonably safe when paired with basic precautions like strong device security and two-factor authentication.
For large, long-term holdings, a hot wallet carries meaningfully more risk than keeping funds offline.
That’s the direct answer. But it comes with a nuance worth understanding before anything else: the safety of a hot wallet has less to do with the wallet itself and more to do with what’s around it, the platform holding it, the habits of the person using it, and increasingly, the security of the infrastructure behind the scenes.
The rest of this article walks through exactly what that means.
What Is a Hot Wallet, and Why Does It Put Crypto at Risk?
A hot wallet is any crypto wallet that stays connected to the internet, a mobile app, a browser extension, or an account on an exchange. That constant connection is exactly what makes it useful: instant transactions, easy access to trading and decentralized apps, and no extra hardware required.
It’s also exactly what creates the risk. The wallet’s private key, the piece of information that proves ownership and authorizes every transaction, lives on a device that’s reachable from the internet. Most modern hot wallets protect that key with real encryption, typically AES-256, and sign transactions locally on the device before broadcasting them, so the raw key itself generally doesn’t leave the device during normal use. That’s a genuine layer of protection. But the device it’s stored on is still online, still reachable, and still a target, which is the entire trade-off a hot wallet makes: convenience in exchange for a larger attack surface.
What Actually Puts Crypto in a Hot Wallet at Risk?
Several distinct things can put crypto held in a hot wallet at risk, and they’re worth understanding separately, since they call for different precautions.
Phishing and fake apps. A fake exchange login page, a message pretending to be customer support, or a wallet app downloaded from an unofficial source can trick someone into handing over access directly. This remains the most common way individual users lose funds.
Malware on the device itself. Malicious software installed on a phone or computer, sometimes without the owner ever noticing, can quietly monitor for wallet activity or intercept transaction details before they’re sent.
Trusting an exchange with custody. Many hot wallets are actually accounts held by an exchange, meaning the exchange holds the private keys on a user’s behalf, not the individual user. If that exchange is hacked or mismanaged, funds can be lost even though the account holder did nothing wrong themselves.
Compromised infrastructure behind the wallet or exchange. This is the risk that’s grown fastest, and it’s the one most beginner guides skip entirely. Instead of tricking one individual user, attackers increasingly go after the company running the exchange itself, stealing an employee’s login credentials, slipping malicious code into a software update, or breaking into the backend systems that approve transactions. A single successful break-in like this can move enormous amounts of money out all at once, without ever needing to fool an individual wallet holder.
Ido Sofer, founder of the key-management firm Sodot, described this shift clearly on the “On The Margin” podcast, pointing to the Bybit hack and others that followed a similar pattern. In his account, these attacks start outside the blockchain itself, inside a company’s internal systems, and only show up as missing funds once the money has already moved. The break-in isn’t a stolen password from a regular user. It’s stolen access to the tools that employees themselves use to manage the exchange.
This pattern showed up again in 2026. Two of the year’s largest crypto losses, $293 million from Kelp DAO and $285 million from Drift Protocol, didn’t come from any flaw in the underlying blockchain code. Both happened because attackers found a way into the internal systems that verify and approve transactions behind the scenes. As one security analyst summed up the Drift incident: there was no bug in the code at all, just a transaction that got approved by something that should never have approved it.
How Much Crypto Has Been Lost to Hot Wallet Attacks?
The scale is larger than most casual crypto users realize. CertiK’s mid-2026 security report, covered by Forbes, put total losses at $1.3 billion across 344 separate incidents in just the first half of 2026 alone, with wallet compromise now standing as the single costliest attack category, ahead even of smart contract exploits. A separate analysis of 2024 losses found that 78% of attacks that year were linked specifically to compromised hot wallets, out of $2.2 billion stolen in total.
These numbers aren’t meant to be alarming for the sake of it. They’re a useful reality check against the more casual “hot wallets are a little riskier” framing that a lot of beginner guides settle for. The risk is measurable, and it’s concentrated in exactly the place the name suggests.
Is Cold Storage Safer Than a Hot Wallet for Crypto?
See Also: Hot Wallet vs. Cold Wallet: Which Crypto Storage Is Safer?
Generally, yes, but not as absolutely as many assume, and a real case from 2024 illustrates why. During the WazirX exchange hack, attackers didn’t stop once they’d drained the hot wallet. They used that initial access to manipulate the smart contract governing the exchange’s multisig cold wallet setup, eventually gaining full control without ever needing WazirX’s actual private keys. Once the contract was altered in their favor, the distinction between “hot” and “cold” stopped mattering; the attackers had found a way around it entirely.
The lesson isn’t that cold storage is pointless; it remains meaningfully safer for the vast majority of situations. It’s that security depends on the whole system around a wallet, not just whether the wallet itself happens to be connected to the internet at any given moment.
What New Hot Wallet and Crypto Risks Are Emerging in 2026?
One development worth watching is the growing use of AI agents with direct wallet access, tools that can execute trades or transactions on a person’s behalf without a human approving each step.
Boaz Sobrado, a fintech leader writing for Forbes, described the risk this creates in blunt terms: an AI agent with wallet access is essentially a new kind of privileged key holder, except its decision-making can be manipulated through inputs in ways a human might catch, and a poorly guarded agent won’t.
It’s a newer category of risk than phishing or malware, but it follows the same underlying pattern found throughout this article: anything with the ability to move funds is a target, whether that’s a person, a piece of software, or an AI system acting with too much autonomy and too little oversight.
What Do Crypto Security Experts Recommend for Hot Wallets?
Charles Guillemet, Chief Technology Officer at Ledger, addressed exactly this landscape on the Ledger Podcast, walking through recent large-scale software supply-chain attacks and the rise of commoditized wallet-draining malware available to attackers with relatively little technical skill. His conclusion was direct: hardware wallets combined with “clear signing,” actually verifying what a transaction does before approving it, rather than blindly trusting whatever a screen displays, are the only reliable defenses against these sophisticated new threats.
That recommendation lines up with a pattern showing up across nearly every serious source on this topic: not choosing hot or cold exclusively, but combining them deliberately based on how funds are actually being used.
What Keeps a Hot Wallet Safe? Practical Crypto Security Steps
Keep only what’s needed in the hot wallet. The bulk of any long-term crypto holdings is safer moved to cold storage, with just enough left in the hot wallet for active trading or spending.
This limits how much is ever exposed to the wallet’s online attack surface at one time.
Turn on hardware-based two-factor authentication. SMS codes and app-based prompts can be intercepted or rerouted. A hardware security key closes off one of the most common paths attackers use to break into an account.
Protect the seed phrase like a physical asset, not a digital one. A seed phrase can regenerate an entire wallet if it’s ever lost, which also means anyone who finds it can access everything in that wallet. It should be written down and stored offline, never saved in a note-taking app, email, or photo.
Review and revoke old smart contract permissions. Many crypto apps request ongoing permission to access funds when they’re first connected. A forgotten, outdated approval from months earlier can quietly become a backdoor if that app is ever compromised.
Choose exchanges with a transparent security track record. As the WazirX case showed, a wallet’s own security can still be undone by weaknesses in the infrastructure or third-party services around it, so the platform matters as much as the wallet itself.
Consider a hybrid setup for larger holdings. Combining a hardware cold wallet for savings with a hot wallet for everyday activity gives most of the convenience of a hot wallet without keeping significant crypto exposed to the internet at any point.
None of this makes a hot wallet risk-free. It makes the risk proportionate to what’s actually being kept there, which is the realistic goal, not eliminating risk entirely, but keeping it sized to something manageable.
FAQs
Are hot wallets safe to use?
They carry real, measurable risk, since the funds are accessible from an internet-connected device, but that risk can be managed by limiting how much is kept in a hot wallet and pairing it with strong account security.
What is the biggest risk with hot wallets?
Historically it was phishing and malware targeting individual users. More recently, the largest losses have come from compromised credentials and infrastructure behind exchanges and platforms, not just mistakes by individual wallet holders.
Is a cold wallet completely safe from hacks?
No wallet type is completely immune. Cold wallets are significantly safer for most situations, but incidents like the 2024 WazirX hack show that attackers who gain a foothold elsewhere in a system can sometimes still reach cold storage too.
How much crypto has been lost to hot wallet hacks recently?
CertiK’s 2026 report found $1.3 billion lost across 344 incidents in the first half of 2026 alone, with wallet compromise identified as the costliest category of attack that year.
Related Articles
Why Does a Stock Price Drop After a Dividend Is Paid?
