Crypto Wallets

What Is a Crypto Wallet?

A crypto wallet does not actually "store" your cryptocurrency — your crypto always lives on the blockchain. What a wallet stores is your private key, the secret password that proves you own your crypto and lets you send it. Think of it like a key to a safe deposit box: the valuables are in the vault (the blockchain), but you need the key (your private key) to access them.

Hot Wallets vs. Cold Wallets

• Hot wallets are connected to the internet — phone apps (Trust Wallet, Phantom), browser extensions (MetaMask), or exchange accounts (Coinbase). Convenient for daily use but more vulnerable to hacking.
• Cold wallets are kept offline — hardware devices (Ledger, Trezor) or paper wallets. Much more secure for long-term storage but less convenient for frequent transactions.

Custodial vs. Non-Custodial

When you keep crypto on an exchange like Coinbase or Binance, the exchange holds your private keys for you — that is a custodial wallet. It is convenient (the exchange handles security and recovery), but you are trusting them with your funds. A non-custodial wallet (MetaMask, Phantom, Ledger) gives you full control of your keys — no one can freeze or access your funds, but if you lose your seed phrase, nobody can help you recover them.

Seed Phrases Explained

When you create a non-custodial wallet, you are given a seed phrase (also called a recovery phrase or mnemonic phrase) — typically 12 or 24 English words in a specific order. This seed phrase is a human-readable representation of the master private key from which all of your wallet's accounts and keys are derived. With this seed phrase, you can restore your entire wallet — all accounts, all balances — on any compatible device.

Hardware Wallets: The Gold Standard

A hardware wallet is a physical device (similar in size to a USB drive) designed specifically to store your private keys in a secure chip that never exposes them to the internet. When you sign a transaction, the hardware wallet displays the details on its screen, you confirm on the device, and the signed transaction is sent to the blockchain — but the private key itself never leaves the device.

• Ledger Nano X / Ledger Stax — broad coin and token support, Bluetooth connectivity, trusted secure element chip
• Trezor Safe 3 / Safe 5 / Safe 7 — open-source firmware, secure element, supports thousands of coins and tokens (Safe 5 and Safe 7 add a colour touchscreen)
• Keystone 3 Pro — air-gapped (no Bluetooth or USB data connection), communicates via QR codes for maximum isolation

Wallet Best Practices

1. Use a hardware wallet for any significant holdings (generally anything over $500-1,000)
2. Keep a small amount in a hot wallet for daily use and dApp interaction
3. Store your seed phrase on metal (Cryptosteel, Billfodl) to protect against fire and water damage
4. Consider splitting seed phrase storage across two secure locations
5. Never approve unlimited token allowances — revoke old approvals periodically using Revoke.cash

HD Wallets and Key Derivation (BIP-32/39/44)

Modern crypto wallets use Hierarchical Deterministic (HD) key derivation as specified in BIP-32. From a single seed (entropy), a master private key is generated. Using a tree structure, child keys are deterministically derived at different paths, allowing a single seed phrase to generate an unlimited number of accounts across different blockchains. BIP-39 defines the mnemonic word list (2048 English words), and BIP-44 standardizes derivation paths (e.g., m/44'/60'/0'/0/0 for the first Ethereum account).

The derivation uses HMAC-SHA512 to produce 512-bit outputs split into a private key (256 bits) and a chain code (256 bits). Hardened derivation (using indices >= 2^31) prevents child key compromise from revealing the parent key, which is critical for security. Extended public keys (xpubs) allow watch-only wallets that can generate receiving addresses without access to spending keys.

Multi-Signature and MPC Wallets

• Multi-sig (e.g., Gnosis Safe) — requires M-of-N signatures from distinct private keys to authorize a transaction, implemented on-chain as a smart contract. Transparent but gas-intensive per transaction.
• MPC (Multi-Party Computation) — splits a single private key into multiple "shares" distributed among parties. Signatures are computed collaboratively without ever reconstructing the full key. Off-chain computation means regular transaction fees, but trust assumptions differ from on-chain multi-sig.
• Social recovery (e.g., Ready, formerly Argent) — designates trusted "guardians" who can collectively authorize a wallet recovery if the owner loses access, without guardians ever having spending power during normal operation.

Operational Security for High-Value Holdings

• Use a dedicated, air-gapped device for hardware wallet interactions — never on your everyday computer
• Implement a multi-sig setup (e.g., 2-of-3) with geographically distributed keys for large holdings
• Store seed phrase backups in bank safe deposit boxes or fireproof safes in separate locations
• Use a passphrase (BIP-39 25th word) as an additional encryption layer on your seed
• Maintain a separate hot wallet for dApp interaction with limited funds — never connect your cold storage wallet to random websites

Account Abstraction (EIP-4337) and Smart Contract Wallets

EIP-4337 fundamentally changes how Ethereum wallets work by letting smart contract wallets act as the account that originates transactions, without any change to the consensus layer and alongside existing Externally Owned Accounts (EOAs). Instead of transactions originating from a private key, a UserOperation is submitted to a separate mempool, bundled by a Bundler, and executed through an EntryPoint contract. This enables programmable validation logic — wallets can require biometric authentication, session keys (temporary permissions for dApps), spending limits, automated recurring payments, and social recovery — all without users managing raw private keys. Paymasters can sponsor gas fees, allowing users to pay in any ERC-20 token or have a dApp cover fees entirely. Projects like Safe (formerly Gnosis Safe), ZeroDev, Biconomy, and Alchemy's Wallet APIs (the supported successor to its Account Kit) are building the infrastructure layer for this new wallet paradigm. Since the Pectra upgrade on 7 May 2025, EIP-7702 also lets an ordinary EOA set its address to run chosen smart contract code, so existing accounts can gain features such as transaction bundling and gasless transacting without changing address.

• MPC (Multi-Party Computation) wallets split key generation across multiple parties — Fireblocks and Fordefi use threshold signatures (TSS) where no single party ever holds the complete key, enabling institutional-grade custody without hardware wallets, while Privy shards keys with Shamir's secret sharing and reconstructs them only briefly inside trusted execution environments when needed
• Smart contract wallets (Safe, Kernel, Modular Account) store assets in on-chain contracts with programmable access control, enabling features impossible with EOAs: batch transactions, gas abstraction, and arbitrary verification logic
• Session keys allow dApps to execute transactions on your behalf within scoped permissions (e.g., 'swap up to 1 ETH on Uniswap for the next 24 hours') without requiring approval for every action
• Passkey-based wallets (using WebAuthn) let users authenticate with Face ID or fingerprint instead of seed phrases, dramatically lowering the barrier to entry for non-crypto-native users
• The tradeoff: smart contract wallets have higher gas costs per transaction than EOAs, and EIP-4337 infrastructure (bundlers, paymasters) introduces new trust assumptions and potential centralization vectors