As $AI capabilities grow, zero-day vulnerabilities are becoming more common, exposing crypto assets to enormous risks. Attackers can breach an operations computer, then exploit EIP-7702's delegation mechanism to transfer funds out of a hot wallet.
This made me take another look at exchange security design. Hot wallets will always be targeted. The real questions are twofold: how much money is kept in hot wallets—that's the largest risk exposure—and whether an attacker who compromises one endpoint can make their way all the way to a large withdrawal.
Coinbase $COIN , which custodies as much as $377 billion, mentioned its security measures in official materials I reviewed.
The first layer is the asset structure. More than 99% of customer assets are held in offline cold wallets. Hot wallets contain only what's needed for day-to-day withdrawals, and any excess is continually transferred back to cold wallets. Customer assets are held on a 1:1 basis and recorded separately from company assets in the books; they won't be lent out or misappropriated without customer authorization.
The second layer is protection for the cold wallets themselves. Private keys are split up and distributed across multiple secure systems, and they're never reassembled into a single complete private key for signing. Transfers from cold wallets to hot wallets are subject to limits and anomaly detection. Suspicious transfers are blocked and investigated before being processed. If necessary, an emergency stop can also be triggered to pause some or all fund movements and take signing keys offline.
The third layer is investment in offense and defense. The bug bounty program offers substantial rewards for critical vulnerabilities; AI agents continuously run adversarial tests covering code, applications, and infrastructure; AI is used to audit smart contracts; and Coinbase works with Anthropic and OpenAI to get early access to new models and permission to use them for security defense. For users, protections include prompts to verify official calls, anti-fraud quizzes before large transfers, and warnings about risky recipient addresses.
In terms of transparency, Coinbase is a Nasdaq-listed company. Its quarterly financial statements are reviewed by Deloitte, and it undergoes a full audit at year-end. As of September 30, 2026, the company had $8.6 billion in cash and cash equivalents of its own, while holding about $377 billion in assets in custody for platform users. In multiple hot wallet incidents, neither Coinbase's systems nor customer funds were affected. The general should probably still think twice before targeting the United States, for now.
This made me take another look at exchange security design. Hot wallets will always be targeted. The real questions are twofold: how much money is kept in hot wallets—that's the largest risk exposure—and whether an attacker who compromises one endpoint can make their way all the way to a large withdrawal.
Coinbase $COIN , which custodies as much as $377 billion, mentioned its security measures in official materials I reviewed.
The first layer is the asset structure. More than 99% of customer assets are held in offline cold wallets. Hot wallets contain only what's needed for day-to-day withdrawals, and any excess is continually transferred back to cold wallets. Customer assets are held on a 1:1 basis and recorded separately from company assets in the books; they won't be lent out or misappropriated without customer authorization.
The second layer is protection for the cold wallets themselves. Private keys are split up and distributed across multiple secure systems, and they're never reassembled into a single complete private key for signing. Transfers from cold wallets to hot wallets are subject to limits and anomaly detection. Suspicious transfers are blocked and investigated before being processed. If necessary, an emergency stop can also be triggered to pause some or all fund movements and take signing keys offline.
The third layer is investment in offense and defense. The bug bounty program offers substantial rewards for critical vulnerabilities; AI agents continuously run adversarial tests covering code, applications, and infrastructure; AI is used to audit smart contracts; and Coinbase works with Anthropic and OpenAI to get early access to new models and permission to use them for security defense. For users, protections include prompts to verify official calls, anti-fraud quizzes before large transfers, and warnings about risky recipient addresses.
In terms of transparency, Coinbase is a Nasdaq-listed company. Its quarterly financial statements are reviewed by Deloitte, and it undergoes a full audit at year-end. As of September 30, 2026, the company had $8.6 billion in cash and cash equivalents of its own, while holding about $377 billion in assets in custody for platform users. In multiple hot wallet incidents, neither Coinbase's systems nor customer funds were affected. The general should probably still think twice before targeting the United States, for now.