A hot wallet is any wallet connected to the internet: browser extensions like Phantom, mobile apps, exchange accounts. A cold wallet keeps keys offline — hardware devices like Ledger or paper backups stored physically.
Hot wallets win on speed. They're required for anything interactive: swaps, bot operations, connecting to dApps. They're also the larger attack surface — phishing sites, malicious approvals, and malware all target hot wallets because that's where the keys are live.
Cold wallets win on security. Signing a transaction on a hardware device means the private key never touches an internet-connected machine. The tradeoff is friction: every signature requires physical access to the device.
The sensible default is a split: keep long-term holdings in cold storage, keep an operating balance hot for active trading and bots, and fund bot wallets with only what each strategy needs. An attacker who drains a hot wallet gets the working capital, not the treasury.
One more layer: periodically review token approvals on your hot wallet. Approved spenders persist until revoked, and old approvals to abandoned protocols are free attack surface.
Track it all on Dexana
Portfolio analytics, swap execution, DCA and grid bots, and AI insights — one dashboard for your Solana activity.
Create a free account