South Korea Considers Rule Requiring Crypto Exchanges to Store 99% of Customer Assets Offline

South Korea is reportedly considering a rule that would require cryptocurrency exchanges to keep 99% of customer assets in offline storage. The measure would matter because centralized platforms often hold digital assets on behalf of ordinary customers, much the way a bank holds depositors' money. For customers, the difference between connected and disconnected storage can determine how much of their money is exposed in a security incident.

The report arrives without a government notice, proposed legislative text, or a named regulator. The available record consists only of a search trail referencing the reported proposal, so it should be treated as under consideration rather than enacted law.

What the reported proposal covers

The idea, as reported, concerns customer assets held by centralized crypto exchanges — companies that operate account platforms and control the wallets used for customer deposits.

South Korean platforms already operate within a national oversight framework that includes identity-linked account requirements and information-security certification, so a custody threshold would, if adopted, layer onto rules exchanges already follow rather than replace them.

Under the reported offline-storage threshold, only a very small share of customer holdings would remain connected to exchange systems. The record provides no detail on which assets, companies, or account types the rule would cover.

That omission is significant. A rule can sound simple, but its practical effect depends on definitions, exemptions, audits, and enforcement. The absence of those specifics leaves the proposal's scope and seriousness open questions. The available trail supplies no start date, penalty, or final vote. Until official details emerge, users should not treat the reported measure as an active withdrawal rule.

Offline storage in plain terms

Offline storage is commonly known as cold storage: keeping the private keys that move cryptocurrency away from internet-facing systems. A private key is the secret credential that authorizes a crypto transfer — think of it as the master key to a locked digital vault.

An online wallet, often called a hot wallet, stays connected so an exchange can process deposits and withdrawals quickly. Cold storage generally requires more deliberate steps before funds can move. That separation can reduce the amount exposed if an internet-facing system suffers unauthorized access.

Cold storage itself is a long-standing industry practice rather than a novel idea. Exchanges around the world already describe keeping the bulk of customer funds offline in their security materials, and the safeguarding of exchange-held customer assets is an area where several jurisdictions have set rules of their own.

The report frames the proposal around customer assets rather than an exchange's own funds. That focus raises the question of custody — how a platform protects coins belonging to its users. Crypto custody simply means holding the keys needed to control crypto. When coins sit on an exchange, the platform generally handles that custody on the account holder's behalf.

Why a near-total offline target would matter

A near-total offline target would place cold-storage procedures at the center of exchange operations. Platforms would need a careful process for bringing assets online whenever customers request withdrawals.

It would also change the nature of the practice itself. Today, how much a platform keeps offline is largely an internal security choice; a codified threshold would turn that choice into an external obligation that can be defined, audited, and checked — the difference between a platform describing its storage approach and a regulator verifying it.

The process involves a trade-off. Faster access favors keeping more funds ready online, while greater separation favors storing more offline. How exchanges resolve that balance would directly affect how quickly customers can withdraw their money. The record does not show how South Korean platforms would strike it, and it establishes nothing about withdrawal speed, review steps, or customer fees.

For customers, the practical question raised by the reported policy is straightforward: can the platform still send coins when needed? A custody policy requires clear withdrawal procedures and transparent communication.

Security questions extend across the wider industry. CoinLineup has covered research on crypto theft incidents, though that reporting does not verify this proposal. A separate CoinLineup report on a Binance hack allegation should likewise not be conflated with the South Korean measure; that event cannot confirm it.

What it does and does not mean for users

The report concerns exchanges, not individual holders. Someone with a small exchange balance should not assume account rules have changed.

Users can still ask useful questions: does the platform explain custody, withdrawals, account security, and support channels in plain language? Those questions matter for anyone following the South Korean storage report. They also help newcomers distinguish a trading app from a self-custody wallet they control themselves.

Self-custody means a user holds private keys rather than an exchange. It offers direct control but places backup and security duties on the individual. Nothing in the supplied evidence suggests the reported proposal would require self-custody; it concerns exchange handling of customer assets, not an instruction to manage every key alone.

Payment access is a separate matter. A prior CoinLineup report that Westpac may reject some crypto-exchange payments is unrelated to the storage proposal.

What the evidence cannot establish

The available record cannot establish that any exchange has adopted a new custody practice, nor an effective date, exemptions, or an enforcement method. It also does not identify which agency, if any, is behind the idea, and it cannot show whether a draft was withdrawn, revised, or merely discussed. An official document is the needed next confirmation.

Readers should avoid drawing price or company conclusions from the limited record. The material contains no usable market data or verified exchange statement.

What to watch next

The clearest signal would be an official South Korean document that identifies the responsible authority, the proposal's legal status, the meaning of “offline,” and the compliance checks involved. It should also spell out how adherence to the offline threshold would be verified.

If the proposal develops further, exchange announcements should follow. A useful notice would state when a change starts, what it affects, and how withdrawals work.

It remains sensible to separate confirmed facts from headlines. The current trail does not supply final policy text or implementation terms. The practical takeaway is straightforward: do not make rushed decisions; review current exchange custody and withdrawal information, then wait for an official South Korean update.

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.