Coldcard

⚠ CRITICAL — Coldcard firmware seed-entropy exploit (July 2026). A March-2021 firmware bug generated some seeds with a software PRNG instead of the hardware RNG, cutting key strength to as low as 40 bits and letting an attacker derive private keys remotely, without touching the device — ~1,816 BTC (~$116M) swept from 5,200+ addresses. Grade cut A → D. If you use a Coldcard, verify firmware against Coinkite's advisory and migrate funds to a seed made on known-good hardware. See the incident timeline below.

ColdCard is Coinkite's Bitcoin-only hardware wallet, built for users who treat their signing device as a hostile-environment appliance: dual secure elements, a true air-gap option, and a long list of anti-coercion features that assume someone may eventually point a wrench at you.

Background Made in Canada by Coinkite, ColdCard (current models Mk4 and the keyboard-equipped Q) has earned a reputation as the signer of choice for security-maximalist Bitcoiners. The firmware is source-available and the device is designed so that it can be used entirely offline, passing signed transactions via microSD card or QR rather than ever touching a computer's USB stack if you prefer.

What you trust You trust two independent secure-element chips (a defense-in-depth design so a break in one does not expose the seed), the source-available firmware, and Coinkite's track record. The air-gap modes let you minimize trust in your connected machine entirely — PSBTs move on a microSD card or, on the Q, by QR.

Operational specs Bitcoin-only. Dual secure elements; PIN with anti-phishing words that prove the device hasn't been swapped; optional "duress" PINs that open a decoy wallet, and a "brick-me" PIN that destroys the secure element. Trick PINs, BIP39 passphrases, and multisig are all supported. The Q model adds a full keyboard, larger screen, and built-in QR scanner; the Mk4 favors microSD and NFC. Fully functional in a permanently air-gapped workflow with Sparrow, Electrum, and others.

Philosophy ColdCard's design philosophy is adversarial: assume the supply chain, the connected computer, and even the physical custody of the device may be compromised, and engineer countermeasures for each. The duress and brick-me PINs are an explicit acknowledgment that the threat is sometimes a person, not just malware.

Grade rationale Grade A. A mature, defense-in-depth signer with genuine air-gap capability and the deepest anti-coercion feature set in the category. The Bitcoin-only scope and the source-available (rather than fully free) firmware license are the only marks against an otherwise exemplary security posture.

Useful when You hold meaningful Bitcoin and want a battle-tested, air-gappable signer; you need duress/decoy features for plausible deniability; you are building multisig and want a coordinator-agnostic device; you prefer microSD/QR transfer over USB trust.

Caveats Bitcoin-only — not a Monero device. Firmware is source-available, not fully open-source/free, which some purists weigh against it. The breadth of security features has a learning curve; misconfigured duress or passphrase setups can lock you out as effectively as an attacker. Buy only from Coinkite or authorized resellers to limit supply-chain risk.