Gate debuts Proof of Security standard built to survive a hot-wallet wipeout

Gate introduced its Proof of Security framework, or PoSEC, on November 5, 2026, pitching it as the first standard of its kind among digital asset trading platforms. The first snapshot, taken at 00:00 UTC on November 4, showed a cold storage coverage ratio of 104.58%. According to the disclosure, 88.26% of user assets sit offline, with 11.74% in internet-connected hot wallets. In plain terms: Gate claims it could cover every customer balance even if its hot wallets were emptied tomorrow.

The backdrop is about as grim as it gets. On October 29, 2026, attackers pulled roughly $6.34 billion out of Binance's hot wallets, a heist attributed to a group linked to North Korea and described as the largest recorded theft in crypto, according to Crypto Briefing. Gate founder and CEO Lin Han voiced solidarity with Binance after the attack and used the moment to push for stricter standards across the sector.

PoSEC is designed to answer what Proof of Reserves leaves open. Reserve snapshots confirm the money exists, but say nothing about how exposed it is to an attacker. Gate has published reserves since 2020, starting with Merkle trees that let users verify their balance was counted without exposing anyone else's data, then layering on zk-SNARKs for privacy. The exchange manages more than $10 billion in user assets and says its reserves have consistently topped liabilities.

Lin Han's ambitions stretch past his own platform. He has called for an industry-wide security alliance to tighten standards and coordinate incident responses, and floated a separate Vault system built on multi-party computation, which splits a private key across parties so no single compromised machine can move funds alone. His version pairs that key-splitting with withdrawal delays, giving defenders time to react before money walks out the door.

The framework has limits it can't paper over. It measures where assets sit, not who holds the keys, how access gets logged, or whether an insider could bypass procedures, and Gate says the standard is independently audited. Cold storage is safer, not invincible. There's also a friction trade-off: the more funds kept offline, the slower withdrawals can get, a tension Lin Han's own Vault proposal leans into with its deliberate delays.

For users, the takeaway is a new question to ask an exchange. Not just whether it holds your funds, but what happens if its hot wallets get drained. A self-designed standard where the designer scores well will draw scrutiny, especially when it can't audit the controls that matter most. Still, after back-to-back breaches at major platforms, a metric that stress-tests the worst case is a reasonable next step.