The Bakkt Warehouse is comprised of both online (“warm”) and offline, air-gapped (“cold”) digital asset storage. Bakkt rebalances between warm and cold storage tiers to minimize risks associated with warm storage. To further protect our customers, Bakkt’s warm and cold wallets are covered by a US$125,000,000 insurance policy from a leading global carrier.

The Bakkt Warehouse supports the physical delivery of bitcoin futures, and is also available for institutional custody services for bitcoin storage outside of futures markets.

Dual Warm + Cold Wallet Structure

• Majority of assets stored offline in cold wallets
• Insurance policies for cold and warm wallets
• Multi-zone physical security, including bank-grade vaults

Comprehensive Cybersecurity Program

• Mandatory two-factor authentication (2FA)
• IP address and withdrawal address whitelisting
• Regular penetration tests and security audits

Secure Wallet Architecture + Storage

• Multi-signature wallet policies
• Shamir's Secret Sharing for key sharding
• Hardware security modules (HSMs) and offline storage of private key material