How Should Businesses Split Funds Between Hot and Cold Wallets?

How should businesses split funds between hot and cold wallets? There is no fixed ratio that suits every business. The principle is that a hot wallet should only hold enough to cover withdrawals and payments for a short period, while most assets stay in cold wallets or more tightly controlled wallets. Businesses should set upper and lower limits for the hot wallet based on daily outflows, peak demand, and how quickly it can be refilled: anything above the upper limit moves to cold storage, and when the balance drops below the lower limit, it is topped up from the cold wallet with approval.

Why Shouldn’t All Funds Sit in a Hot Wallet?

A hot wallet has to stay online and sign automatically at any time, which is why it carries the highest risk in any comparison of crypto wallet security. Keeping most assets in cold wallets puts a ceiling on losses: even if hot wallet security risks such as a compromised server or stolen credentials materialize, the most you can lose is the small amount it holds.

How Much Should a Hot Wallet Hold?

A practical approach is to look at outflows and refill speed. Track the average and peak daily outflows for each chain and asset, then see how long it takes to top up from the cold wallet. The hot wallet only needs to cover peak outflows for that period, plus a small buffer. The faster you can refill it, the less it needs to hold. Exchanges see withdrawals spike during sharp market moves, and payment companies make more payouts around settlement dates, so those peaks need to be factored in. The split is not set once and forgotten; it should be adjusted regularly based on actual outflow data.

How Should Funds Move Between Hot and Cold Wallets?

When the hot wallet balance rises above the upper limit, the excess moves to the cold wallet; when it falls below the lower limit, the cold wallet tops it up. The two directions follow different rules for moving funds between hot and cold wallets: moving funds into cold storage can be automated, while moving funds out of the cold wallet should go through an approval workflow, with the destination locked to the business’s own hot wallet by an address whitelist.

Does an MPC Wallet Change the Hot and Cold Split?

Partly. The danger of a traditional hot wallet is that the complete private key sits on an online server, whereas an MPC wallet spreads the key as shares across multiple parties, so compromising one server does not yield the full key and the hot wallet itself becomes much safer. Many businesses use MPC to build tiered wallets: the hot wallet signs automatically within limits, a middle tier needs approval from a few people, and large reserve wallets require sign-off from several departments or even an offline device. A policy engine sets different limits and approval rules for each tier. The idea of tiering remains; it is just that no tier has a single point of failure anymore.

Conclusion

Keep only enough in the hot wallet to cover a short period of outflows, hold most assets in cold wallets, govern the movement between them with limits, approvals, and whitelists, and adjust the split regularly based on real outflow data. Safeheron’s MPC Wallet-as-a-Service provides MPC key management and a policy engine for businesses.

Want to design a hot and cold wallet architecture for your business? Contact Safeheron’s Sales Team to Book a 1:1 Demo