A hot wallet is a crypto wallet connected to the internet — a phone app, a browser extension or an exchange account. The opposite is a cold wallet, which keeps the keys on an offline device.
Why a hot wallet at a casino anyway
Because play assumes movement. A deposit, a withdrawal and the next deposit happen in minutes, and fetching a confirmation from a cold wallet every time is not realistic. A hot wallet is the right tool for that — when it holds only playing money.
Three rules
- A separate wallet for play. Not the one holding your investments. That way the damage from a breach or malware is limited to the budget you were risking anyway.
- Two-factor authentication everywhere it exists — both in the wallet and on the casino account.
- Clipboard checks. The most common malware swaps a copied address for the attacker's. Always check the first and last four characters before sending.
What that does for a playing budget
A separate hot wallet is also one of the most effective limits possible at a crypto casino at all. If the wallet holds a week's budget and you do not top it up, the limit physically exists — unlike the limit settings at Estonian casinos, which crypto houses mostly do not have. See the self-assessment and the limits guide.
Related
The seed phrase applies to both wallet types the same way: whoever knows it owns the money.
What kinds of hot wallets exist
A mobile app, a browser extension, a desktop program and an exchange account are all hot wallets, but the risk differs. An exchange account is held by a third party: the keys are theirs, not yours (see custodial wallet). A browser extension is convenient but lives in the same environment where you open everything else, including random pages. A mobile app with no other software that you use only for gaming usually has the smallest attack surface.
Three threats players often do not expect
- Contract permissions. "Connect wallet" and "approve" buttons can give a page the right to spend your tokens. Approve only what you recognise and revoke permissions you do not need. Background is in the term smart contract.
- A fake link. A "wallet update" that arrives as an ad or a message is a typical scam. Download the app only from the official store or the maker's site.
- A signing request. If a page asks you to "sign a message", read what you are signing. No genuine service ever asks for a seed phrase.
Fee reserve and test amount
The wallet also needs a small amount of the network's native coin to pay the fee (for example ETH on Ethereum or TRX on Tron, see gas fee). The fee is paid from the same wallet. Make the first transfer with a small test amount and check the recipient address to the last character. Example: if this week's gaming money is 50 USDT, put 50 USDT and the fee reserve in the wallet, no more. The structure of an address is explained under wallet address; the options are compared in the wallet article. For capping the budget see also the limit planner on freespin.ee. General device security is covered in ethereum.org: Security.