Share
Most crypto exchanges can show you they hold your money. Gate wants to show it can lose a big chunk of that money and still pay you back.
The exchange has rolled out what it calls a Proof of Security framework, or PoSEC. It arrives one week after Binance suffered what has been described as the largest crypto theft on record. The timing is not subtle.
What Proof of Security actually measures
Gate founder and CEO Lin Han’s pitch is simple. An exchange should survive a total wipeout of its online wallets without customers taking a hit.
Think of it like a bank branch. Proof of Reserves confirms the vault holds enough cash for every depositor. Proof of Security asks a harder question: if robbers cleaned out every teller drawer, would the vault alone still cover everyone?
In crypto terms, the “teller drawers” are hot wallets. These are internet-connected wallets that let exchanges process withdrawals quickly. The “vault” is cold storage, meaning keys kept offline and far harder for attackers to reach.
Gate launched PoSEC on November 5, 2026. The company bills it as the first framework of its kind among digital asset trading platforms.
The first snapshot was taken at 00:00 UTC on November 4. It showed a cold storage coverage ratio of 104.58%. According to the disclosure, 88.26% of user assets sit offline, with the remaining 11.74% held in hot wallets.
Put plainly, Gate says its offline holdings exceed customer balances. If every hot wallet were drained tomorrow, the company claims it could still cover what users are owed.
Lin Han has framed this as the bar the whole industry should clear. Gate says it is publishing the PoSEC methodology so rival platforms can adopt something similar.
The Binance hack that set this in motion
The backdrop is grim. On October 29, 2026, attackers pulled approximately $6.34 billion from Binance’s hot wallets.
The heist was attributed to a group linked to North Korea. It has been described as a highly coordinated operation, and it became the largest recorded theft in crypto.
The news moving money, markets, and the world—before your day starts.
Daily. Free. Join 34,000+ readers across crypto, finance, and policy.
We respect your privacy. Unsubscribe anytime.
That’s the exact scenario PoSEC is designed around. Hot wallets are convenient precisely because they are online. That same connectivity is what makes them a target.
Lin Han expressed solidarity with Binance after the attack. He also used the moment to push for tougher standards across the sector.
His proposals go beyond PoSEC. He has called for an industry-wide security alliance to improve standards and coordinate responses to incidents. He has also floated a “Vault” system built on multi-party computation, or MPC.
MPC splits a private key into pieces held by different parties, so no single compromised machine can move funds on its own. Lin Han’s version would pair that key-splitting with withdrawal delays, giving defenders time to react before money leaves the building.
How we got here: from Merkle trees to PoSEC
Gate is not new to this transparency game. It has run Proof of Reserves since 2020.
Those early attestations relied on Merkle trees. That is a cryptographic structure that lets each user check their balance was included in the total without exposing everyone else’s data. Gate later added zk-SNARKs, a type of zero-knowledge proof, to strengthen privacy in that process.
The exchange manages over $10 billion in user assets. Its reserve reports have consistently shown reserves exceeding liabilities.
Proof of Reserves became an industry talking point for good reason. Users wanted evidence that exchanges were not quietly lending out or losing deposits. But a reserve snapshot only tells you the money exists. It says nothing about how exposed that money is to an attacker.
PoSEC tries to fill that gap. It discloses the split between cold and hot storage, and it evaluates resilience against an extreme loss event, under independent audits according to Gate.
What PoSEC can’t tell you
The framework cannot verify an exchange’s internal security controls. A healthy cold storage ratio says nothing about who holds the keys, how access is logged, or whether an insider could bypass procedures.
Cold storage is safer, not invincible. PoSEC measures where assets sit. It does not grade how well the vault door is built.
There is also a trade-off the standard cannot make disappear. The more funds an exchange keeps offline, the slower withdrawals can become. Users who expect near-instant transfers may find that heavy cold storage and withdrawal delays feel like friction.
Lin Han’s own Vault proposal leans into that tension, with deliberate withdrawal delays.
What this means for exchanges and their users
For users, the immediate value is a new question to ask. Not just “do you hold my funds,” but “what happens if your hot wallets get emptied?” An exchange that can answer with a number above 100% is offering a different kind of reassurance than one that can only show reserves.
The competitive angle cuts both ways. After a theft of approximately $6.34 billion, security is a marketing asset, and Gate clearly knows it. A self-designed standard where the designer scores well deserves scrutiny, especially since it cannot audit the controls that matter most.
Still, the core idea has merit. Breaches at major platforms have repeatedly shown that reserve snapshots alone do not protect users from hot wallet failures. A metric that stress-tests the worst case is a reasonable next step.
