I don&#x27;t understand Amazon&#x27;s cloud HSM product. Amazon says they don&#x27;t have access to your HSM but presumably they do if they wanted to. Also, how does HSM protect the hot wallet if an attacker is able to get access to a machine that is using the HSM for signing? Your only hope is that you can obscure the credentials for the HSM from the attacker.<p>HSM for the hot wallet probably provides greater security than no HSM for the hot wallet but I don&#x27;t think it gives you that much extra security.