---
title: "CertiK Urges Crypto Exchanges to Adopt Hard Dollar Caps on Hot Wallets"
description: "Cybersecurity firm warns that cold-storage ratios alone fail to mitigate risk after a massive exploit on Binance's hot wallets."
url: https://basisdesk.news/news/certik-crypto-exchanges-hot-wallet-caps
published: 2026-11-10T05:36:20.044Z
modified: 2026-11-10T05:36:20.044Z
section: Security & Hacks
author: Basis Desk Newsroom (AI-generated, source-verified)
sentiment: neutral
tickers: [NEAR]
tags: [certik, exchanges, hot-wallets, cold-storage, binance, cybersecurity]
license: Quote with attribution to Basis Desk (basisdesk.news). Not financial advice.
---

# CertiK Urges Crypto Exchanges to Adopt Hard Dollar Caps on Hot Wallets

Cybersecurity firm warns that cold-storage ratios alone fail to mitigate risk after a massive exploit on Binance's hot wallets.

## At a glance

- **What happened:** CertiK urged cryptocurrency exchanges to institute hard dollar limits on hot wallets instead of relying solely on cold-storage percentages.
- **Why it matters:** High cold-storage ratios do not eliminate exposure and can cause operational delays during withdrawal spikes.
- **Who is affected:** Centralized crypto exchanges, custodians, and institutional compliance teams.
- **What's next:** Exchanges evaluating risk architectures while Binance completes recovery of the final 2% of drained illiquid assets.
- **Status:** guidance
- **Primary source:** [Crypto exchanges need hard dollar caps on hot wallets, CertiK says](https://cointelegraph.com/news/crypto-exchanges-need-dollar-caps-on-hot-wallets-certik?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound) — cointelegraph.com

## Key points

- CertiK urged exchanges to set hot-wallet dollar caps instead of relying solely on cold-storage reserve ratios.
- Asian regulatory frameworks enforce cold-storage baselines ranging from 80% in South Korea to 98% in Hong Kong.
- Binance replenished roughly 98% of assets stolen in its recent hot-wallet hack as laundering traces emerged on NEAR.

## Editorial remark

- **Context:** Following a major hot-wallet exploit against Binance, centralized exchanges published cold-storage percentages to restore market confidence, despite cybersecurity experts questioning the sufficiency of offline ratios.
- **Impact:** Exchanges face operational trade-offs between maintaining regional cold-storage compliance and ensuring seamless withdrawal processing without exposing large nominal hot-wallet balances.
- **Watch:** Binance's acquisition of the remaining illiquid tokens and whether global regulators shift guidance toward absolute hot-wallet thresholds.

Cryptocurrency exchanges must establish absolute dollar caps on their hot wallets rather than depending strictly on cold-storage ratios to measure operational risk, according to cybersecurity firm CertiK [1]. The advisory follows voluntary reserve disclosures across trading venues after a historic hack hit Binance hot wallets [1]. Gate reported holding 88.26% of assets in offline reserves, while Coinbase disclosed keeping over 99% of customer holdings in cold storage [1]. 

Jurisdictional mandates across Asia enforce strict offline asset baselines [1]. Regulators in South Korea require virtual asset service providers to maintain at least 80% of customer funds in cold wallets [1]. Singapore guidelines mandate a minimum of 90%, Japan demands at least 95%, and Hong Kong requires licensed platforms to hold 98% of client crypto offline [1]. However, CertiK cautioned that marginal security gains diminish at extreme cold-storage ratios [1]. Stiff quotas can introduce operational friction by delaying normal customer withdrawals, inducing hasty rebalancing transfers, and concentrating vulnerability within key-management architectures [1]. 

## Dollar-Based Limits and Asset Recovery

To manage exposure without compromising liquidity, CertiK recommended exchanges implement hot-wallet ceilings tailored per asset and network [1]. The firm suggested calibrating limits to the most conservative of three criteria: a set percentage of liabilities, expected withdrawal volumes, or an absolute loss threshold bounded by an exchange's balance-sheet recovery capabilities [1]. CertiK emphasized that operational flexibility must be paired with dollar ceilings and automated circuit breakers to restrict worst-case downside [1].

The security recommendations emerge as Binance reported replacing roughly 98% of the assets drained in its recent hack, committing to absorb the shortfall directly [1]. Binance noted that recovering the final balance would require more time because of lower liquidity in the remaining token pools [1]. Separately, blockchain analytics firm Elliptic reported that North Korea-linked actors laundered about $430,000 of the stolen Binance capital by launching six memecoins on NEAR, attempting to break the transaction trail through decentralized liquidity pools [1].

## Sources

1. [Crypto exchanges need hard dollar caps on hot wallets, CertiK says](https://cointelegraph.com/news/crypto-exchanges-need-dollar-caps-on-hot-wallets-certik?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound) — cointelegraph.com, 2026-11-10

---
Basis Desk Newsroom · AI-generated, source-verified · https://basisdesk.news/about/how-we-use-ai