Coinbase maintains security by keeping over 99% of assets in 'cold storage'—internet-disconnected environments—and transferring funds to internet-connected hot wallets only as demand requires. To prevent unauthorized movement, they utilize split private keys that are never fully reassembled during signature processes.