§ 2.2Module 2

Cryptocurrency Wallets — Hot and Cold Wallets

2.2 — Cryptocurrency Wallets: Hot and Cold Wallets

Recall first. If coins are recorded on a blockchain, what does a wallet need to hold so that its owner can receive funds and spend them? Write two words: public key and private key. Then predict which one must never be shared.

A wallet does not contain coins

A cryptocurrency wallet is a key-management system and an interface to a blockchain. It normally:

generates or imports cryptographic keys;
shows addresses and balances derived from blockchain data;
signs transactions with a private key; and
broadcasts those signed transactions to the network.

The coins do not sit inside the phone app, laptop file, or hardware device as physical objects. The blockchain records spendable ownership conditions; the wallet holds the secret information needed to prove control of those conditions. [Book: Ch. 3 §3.3.3, lines 1875–1883]

Public and private keys

Item	Safe role	Secret?
Public key / address	Identify where funds may be sent; help verify signatures	Public, although address reuse can reduce privacy
Private key	Create a digital signature authorising a spend	Secret; possession normally means control
Seed/recovery phrase	Recreate a wallet’s key tree and accounts	As secret as the private keys it derives

A simplified send flow is:

recipient shares address
        ↓
sender builds transaction
        ↓
sender's wallet signs with sender's private key
        ↓
network verifies signature and ledger rules
        ↓
transaction is confirmed; recipient sees the new output

The recipient does not need the sender’s private key. The sender signs; anyone can use the relevant public information to verify that the signature matches. A wallet address is also not the same as a private key: an address is intended for receiving, while the private key authorises spending. [Book: Ch. 3 §3.3.3, lines 1875–1896]

Memory hook: Public to receive; private to spend. Sharing a public address is like giving an account number. Sharing a private key or seed phrase is like handing over the signing authority itself.

Hot versus cold

The primary classification in the syllabus is by internet connection:

Hot wallet = connected to the internet or readily accessible online. It is convenient for frequent transactions but exposes signing secrets to more online attack paths.
Cold wallet = kept offline except when deliberately used. It is better suited to long-term storage but less convenient and still vulnerable to loss, theft, damage, or unsafe recovery procedures. [Book: Ch. 3 §3.3.3, lines 1875–1896]

“Hot” and “cold” describe exposure, not a guarantee of safety. A badly managed hardware wallet can be unsafe; a carefully protected hot wallet can be suitable for a small spending balance.

Types in the book

Wallet type	Hot/cold tendency	Strength	Main risk or limitation
Desktop	Hot	Local control and rich features	Malware, disk failure, poor backups
Mobile	Hot	Convenient for everyday payments	Lost phone, malicious apps, exposed backup
Online/web	Hot	Accessible from a browser	Provider compromise, phishing, custodial control
Hardware	Cold when disconnected	Private keys kept on a dedicated device; PIN/recovery support	Device loss, fake hardware, malicious setup, recovery-phrase theft
Paper	Cold	No online attack while stored offline	Fire/water/physical loss, photography, difficult recovery and poor reuse practices

The book’s paper-wallet discussion reflects an older, simplified model in which a printed key pair may be intended for a single sweep. Modern wallet software and address standards are more nuanced, but the safety lesson remains: a printed secret is still a bearer secret and must be protected from copying, damage, and accidental partial-spend errors. [Book: Ch. 3 §3.3.3, lines 1883–1896]

Custody is a second axis

Do not confuse hot/cold with custodial/non-custodial:

Custodial wallet/exchange: a service controls the private keys on your behalf. You control an account or claim through the service; access may be convenient, but you rely on that provider.
Non-custodial wallet: you control the private keys or seed phrase. You gain direct control, but you also carry the backup and signing responsibility.

A web wallet is usually hot, but “online” does not by itself tell you who controls the keys. A hardware wallet is usually cold and non-custodial, but only if the user created and protects the keys correctly.

Wallet safety: the irreversible-action rule

The book stresses that a cryptocurrency transfer cannot normally be reversed by a bank if the private key is compromised or the address is wrong. Its safety recommendations include reputable wallet software, offline backups, keeping only a small amount in online wallets, strong unique passwords, two-factor authentication, multisignature controls where appropriate, phishing resistance, software updates, and checking the destination address carefully. [Book: Ch. 3 §3.5.6, lines 2060–2106]

Use this operational checklist:

Back up the seed phrase offline. Never put it in a screenshot, cloud note, email, or chat.
Never disclose the seed/private key. A legitimate support agent does not need it.
Test a small transfer first. Confirm the address and network before sending a large amount.
Separate balances. Keep everyday spending funds hot and long-term funds in appropriately protected cold storage.
Verify the device and software. Phishing wallets and fake links can steal a secret before the real wallet is ever used.
Use extra controls for shared funds. Two-factor authentication protects account access; multisignature requires multiple signing keys for a spend.
Plan recovery. A backup that nobody can find, or that one accident destroys, is not a backup.

Worked example — choose a wallet

A student needs:

₹ equivalent of small crypto balance for weekly payments;
a larger long-term holding that will not be touched for a year; and
a two-person club treasury.

Choose the most appropriate arrangement and explain the trade-off.

Revealed answer

Use a reputable hot wallet for the small weekly spending balance, because convenience matters and the amount is limited. Use a properly initialized cold/hardware wallet for the long-term holding, with an offline recovery backup. Use a multisignature arrangement for the club treasury so one person’s compromised key cannot unilaterally spend the funds. None of these removes the need to verify addresses and protect recovery material.

Exercise

A friend says: “I can safely send you my seed phrase because you only need it to help me restore my wallet.” What should you say, and why?

Revealed answer

Do not accept it. The seed phrase can recreate the wallet and authorise spending; whoever learns it may take the funds. The owner should restore the wallet privately on a trusted device, and any phrase already exposed should be treated as compromised and the funds moved to a newly generated wallet.

Exam lens

A strong hot versus cold wallet answer should include:

definition of a cryptocurrency wallet as key-management software/device;
public key/address for receiving and private key for signing/spending;
hot wallet: online, convenient, higher exposure;
cold wallet: offline, better for long-term storage, less convenient;
examples: desktop/mobile/online versus hardware/paper;
one limitation for each; and
the safety principle that loss or disclosure of the private key can mean irreversible loss.

Common traps:

A wallet does not literally store coins; the ledger does.
A public address is not a private key.
Cold does not mean indestructible or automatically non-custodial.
An exchange account is not necessarily the same as controlling a private key.
A password, PIN, private key, and seed phrase are related security materials but are not interchangeable terms.

Rapid revision

Can I complete “public to ___; private to ___”?
Can I define hot and cold without claiming either is absolutely safe?
Can I separate internet exposure from custody?
Can I name one hot and one cold wallet type and their main risks?
Can I explain why an address mistake and a leaked seed phrase are different failures?

Key takeaways

A wallet manages keys and signs transactions; the blockchain records the assets.
The public key/address is shared for receiving; the private key/seed is secret and controls spending.
Hot wallets favour convenience; cold wallets favour reduced online exposure.
Custodial versus non-custodial is a separate question from hot versus cold.
Backups, phishing resistance, address checking, and key secrecy are essential because blockchain transfers are normally irreversible.

Sources

S. Chandramouli, Asha A. George, Abhillash K. A., and Meena Karthikeyan, Blockchain Technology. Primary extract: Ch. 3 §3.3.3 “Cryptocurrency Wallets” (lines 1875–1896), including hot/cold, desktop/mobile/online, hardware, and paper wallets; Ch. 3 §3.5.6 “Cryptocurrency Safety” (lines 2060–2106), including exchange, storage, transaction, password, backup, 2FA, multisignature, and phishing precautions. OCR typos have been corrected where unambiguous; no historical exchange-hack numbers are treated as current evidence.