User balances are not stored anywhere – they are derived as the sum of all user transactions. This is safer than storing a single number that could be easily manipulated.
If you have deposited or withdrawn via cold storage then that would, by design, affect the wallet balance but not the user balances. So the difference would be expected.