Security
Crypto Wallet Types: Exchange Custody vs Hot Wallets vs Cold Wallets
Is it safe to leave coins on an exchange? What are hot wallets, cold wallets, and seed phrases? A clear comparison of the three custody options and the mistakes beginners make most.
The question that follows every first purchase: where do I keep my coins? The answer depends on how much you hold and how you use it. Here are the three options, clearly explained.
The three ways to store crypto
1. Exchange custody (where beginners start)
Your coins sit in your exchange account; the exchange holds the private keys — like keeping money in a bank.
- ✅ Convenient: trade any time, and customer support can help if you forget your password
- ✅ Top-tier exchanges publish proof-of-reserves and maintain protection funds
- ❌ You don't control the keys ("Not your keys, not your coins")
- ❌ If the platform fails (hack, insolvency), your assets can be affected
2. Hot wallet (self-custody, online)
A wallet app on your phone or browser (exchange-affiliated Web3 wallets, MetaMask, etc.) where you hold your own keys.
- ✅ Full control of your assets; access to DeFi, NFTs, and on-chain apps
- ❌ Always online, so exposed to hacks (phishing approvals, malicious apps)
- ❌ Lose the seed phrase = lose the assets permanently. No support desk can help.
3. Cold wallet (self-custody, offline)
A dedicated hardware device (Ledger, Trezor, etc.) whose keys never touch the internet.
- ✅ Highest security; suited to large, long-term holdings
- ❌ Costs money and takes learning to use correctly
- ❌ The seed phrase is still entirely your responsibility
What is a seed phrase?
A self-custody wallet gives you 12 or 24 English words — the seed phrase, the master key to everything in the wallet:
- Write it on paper and store it somewhere safe (two copies in separate places is common).
- Never: screenshot it, store it in the cloud, send it to anyone, or type it into any website.
- Any 'support agent', 'airdrop', or 'verification' asking for your seed phrase is a scam. No exceptions.
How to choose (by use case)
| Situation | Recommendation |
|---|---|
| Need frequent trading | Keep only the required trading balance, enable 2FA and withdrawal allowlisting, and accept platform custody risk |
| Starting to explore DeFi/NFTs | Practice with small amounts in a hot wallet; learn to spot phishing approvals first |
| Large, long-term holdings | Cold wallet, with the seed phrase stored securely offline |
The most common setup is hybrid: trading funds on the exchange, long-term holdings in a cold wallet.
The most common beginner mistakes
- Screenshotting the seed phrase to the phone gallery — once it syncs to the cloud, it's exposed.
- 'Verifying the wallet' on a phishing site — one signed approval and the wallet gets drained.
- Withdrawing on the wrong network — deposits and withdrawals must use the same network.
- Moving everything into self-custody before understanding it — match custody complexity to your skill level, step by step.
Further reading
- Crypto Exchange Security Guide: Phishing and Scam Prevention
- How to Buy Bitcoin: Complete Beginner Walkthrough
- What Is USDT?
⚠️ Risk warning: Self-custody means you alone are responsible for your keys. A lost or leaked seed phrase means unrecoverable assets. This article is educational and not investment advice.
📍 Regional notice: This site's content is not directed at residents of mainland China.
Verification card: 2026-07-12 (UTC+8)
Wallet choice should not be based only on balance size. Consider usage frequency, on-chain application access, ability to back up a recovery phrase, inheritance planning, and acceptable worst-case loss. A hardware wallet reduces private-key exposure to connected devices but cannot stop the owner from signing a malicious transaction.
Core rule: keep the recovery phrase offline; never photograph it, cloud-sync it, or enter it into support or an unfamiliar site. Test every new wallet route with a small transfer.
Official reading: Ethereum wallets | Security and scam prevention