A cold wallet is key storage that has never touched a network: keys generated and held on an offline device, signatures made in isolation, transactions ferried by QR or USB. Nothing connected can steal what nothing connected ever saw.
The operational cost is friction: every cold signature is a ceremony. The pattern that works is tiered, hot for the float, cold for the reserve, with the split set by how much loss would hurt.
A cold wallet holds keys without exposure to networked devices: the secret material lives on an offline device, an air-gapped machine, or paper, and signing happens through a deliberate transfer of an unsigned transaction to the cold side and the signed result back. The internet never touches the keys; the work travels.
The operational cost is latency, measured in the physical ceremony of moving data across the gap, which is precisely the point: every use of the keys requires a deliberate act that cannot happen automatically, and therefore cannot happen to you by malware. What cold storage trades away is convenience, and what it buys is an attack surface that ends at the air.
The mature business pattern is tiering: hot wallets hold operational floats sized to a day's needs, cold wallets hold reserves, and the movement between them is a scheduled, multi-eye ceremony. The treasury that survives its own growth is the one whose largest balances are the least reachable.
A treasury keeps a month's float in a hot wallet for daily flows and the reserve in cold storage. Daily operations never touch the reserve; refilling the hot side is a weekly two-person ceremony through the air gap.
Merchants point checkouts at whichever wallet tier fits the exposure: the hot float settles daily, the cold reserve sweeps on a schedule, and the non-custodial architecture never forces funds into platform custody in between.
Merchants taking non-custodial settlement own their own security posture, and tiering is the standard shape: settlement addresses sweep to cold storage on a rhythm, so a compromise of any online system reaches only the operational float. U.CASH's non-custodial model makes this discipline yours, and worth doing deliberately. On the ceremony itself: keep it boring and written down. The movement procedure, the two-person rule, the verification step on the destination: ritualized is the goal, because ceremonies that live in one person's head degrade exactly when that person is unavailable and the reserve needs moving.
Every term behind the rails, the assets, and the settlement.