The Separate Wallet Practice, and Why It Beats Vigilance
One habit removes most of the risk from interacting with unfamiliar contracts. It works because it does not depend on you being careful.
Most security advice asks you to be careful: read what you sign, verify domains, check contract addresses. All of it is correct and all of it fails eventually, because it requires being right every time against people who do this professionally.
The separate wallet practice does not require that.
The arrangement
Wallet A, for applications. A browser extension or mobile wallet holding a small balance. This is the wallet that connects to sites, signs approvals, and interacts with contracts.
Wallet B, for holdings. A hardware wallet that has never connected to any website. It receives and sends, nothing more.
Tier C, a working balance at a venue. For buying and the occasional rebalance.
Three separate addresses, three separate key sets, no overlap.
Why it works
A malicious contract can only move what the signing address holds or has approved. If wallet A holds a small balance, the worst outcome of the worst mistake is bounded by that balance.
This is a structural defence rather than a behavioural one. It does not stop you making a mistake. It makes the mistake survivable.
What it protects against specifically
Approval drains. The single largest category of loss. An unlimited approval granted from wallet A cannot reach wallet B.
Compromised front ends. A legitimate application whose website is taken over. None of the usual warning signs are present, and the separate wallet is the only thing that helps.
Fake airdrop claim sites. The token appears in wallet A, the claim site drains wallet A, and wallet B is untouched.
Your own carelessness at 11pm. Which is the real threat model for most people.
What it does not protect against
Seed phrase disclosure. If you type wallet B’s phrase into a fraudulent site, the separation is irrelevant.
Physical compromise of the device holding wallet B.
Sending funds to the wrong place deliberately.
The operational details
Fund wallet A in small amounts. Top it up when it runs low rather than holding a large balance for convenience. The inconvenience is doing useful work.
Never approve anything from wallet B. If an application requires an approval, use wallet A, even if it means moving funds first.
Use a fresh address for anything genuinely unfamiliar. Some wallets make creating additional accounts trivial. A single-use address for a first interaction costs nothing.
Review wallet A’s approvals monthly. Revoke what is not in use. It takes five minutes on a block explorer.
The cost
Moving funds between tiers costs transaction fees, and the arrangement adds a step to anything that involves both tiers.
That is the entire cost. Against the size of the category of loss it prevents, it is not a close call.
Where the venue fits
The working balance exists so that buying and rebalancing do not require touching the cold storage.
Sized correctly, it is the amount you would be prepared to lose in a platform failure, which for most people is considerably less than they typically leave on an exchange. Withdrawing the surplus to wallet B, through a platform we ran a full withdrawal through or any venue where the withdrawal process works reliably, is the habit that makes the tier structure real rather than theoretical.
Products covered here are bought at full retail price and used for real transactions before anything is written. There are no affiliate links on this site, no sponsored placements and no review units. If that ever changes, it will be disclosed at the top of the article.