Last reviewed: 2026-09-27

Key facts

Overview

Coldcard, made by Coinkite, is a Bitcoin-only hardware wallet aimed at security-conscious and advanced users. It uses dual secure elements and fully open-source, independently reproducible firmware, and supports true air-gapped transaction signing over NFC or microSD rather than a direct USB link to a possibly-compromised computer. The Q model adds a keyboard, QR scanner and colour screen, letting it operate without any companion app. In July 2026, Coinkite disclosed that a firmware build error dating to March 2021 had weakened seed randomness on some devices, and attackers subsequently stole an estimated $116M from affected wallets — one of the largest hardware-wallet security failures on record. Current firmware fixes the randomness bug and now requires additional user-supplied entropy, but any seed generated on the vulnerable firmware window remains compromised and must be replaced. Unlike Ledger and Trezor, Coldcard supports Bitcoin only, not a broad multi-asset lineup, and its advanced feature set (multisig, air-gapped workflows) suits experienced users more than beginners.

Availability

Coldcard is available in: Global. Always confirm availability for your country on the official site, as regional support changes. Availability, regulation and tax treatment vary by country. Check your local laws before trading, and confirm current details on the official site. Regional note — India: Indian residents face 30% tax on crypto gains and 1% TDS on transactions above ₹50,000 per the Finance Act 2022.

Fees deep-dive

Coldcard has no trading or platform fees — the only cost is the one-time hardware purchase. The Mk4 lists at roughly $178 and the newer Q model at roughly $249, both sold directly through Coinkite's own store to avoid supply-chain tampering risk from third-party resellers. There is no subscription, no companion-app fee and no cut taken on transactions; on-chain network fees are set by the user when broadcasting a signed transaction from separate wallet software, since Coldcard itself only signs — it doesn't broadcast. Compared with Ledger (from ~$79) and Trezor (from ~$49), Coldcard sits at the pricier end of the hardware-wallet market, reflecting its narrower, more specialised Bitcoin-only focus rather than broad multi-asset coverage.

Security architecture

Coldcard's design centres on air-gapping: transactions can be signed entirely offline and moved to and from a computer via NFC tap or microSD card, so the device never needs a direct USB data connection to a potentially compromised machine. It uses two independent secure elements from different vendors (an ATECC608A and a DS28C36B) so a flaw in one doesn't fully compromise key storage, and its firmware is open-source and built to be independently reproducible, letting researchers verify that the published source matches what actually runs on the device. That said, Coldcard's 2026 record includes a severe real-world failure: a 2021 firmware build error weakened seed-generation randomness on some devices, undetected for roughly five years, and was exploited at scale once discovered, resulting in an estimated $116M in losses. This was a software/build-process failure rather than a flaw in the secure-element hardware itself, and Coinkite's response (mandatory additional entropy sources, public disclosure, remediation guidance) followed established incident-response practice — but the scale of the loss means the device's real-world security track record in 2026 is worse than its architecture alone would suggest. Owners must treat any pre-patch seed as burned and generate a new one.

Who it is for

• Best for: Bitcoin-focused users who want fully open-source, air-gapped signing and are willing to generate a fresh seed on current firmware.
• Avoid if: You want multi-asset support, a simple beginner setup, or generated a seed on Coldcard before the July 2026 patch and haven't yet migrated funds to a new seed.

Verdict

A technically strong, fully open-source Bitcoin-only wallet whose air-gapped design is excellent, but the 2026 seed-generation incident is serious and unresolved for anyone who hasn't migrated to a freshly generated seed. Choose it deliberately, and act on the security advisory if you already own one.

Alternatives

• Ledger — Multi-asset support (5,500+ coins) and a simpler companion app, at the cost of closed-source firmware.
• Trezor — Fully open-source like Coldcard but multi-asset and touchscreen-friendly, with a cleaner 2026 security record.

User reviews

Real reader reviews — separate from FlixoCrypt's own editorial rating above. Every submission is moderated before it appears here.

/ 5 average ·

Withdrawal reports from reviewers

smooth · delayed · failed

No reviews yet — be the first to leave one.

Loading reviews…

Write a review

Rating * Choose a rating 5 — Excellent 4 — Good 3 — Okay 2 — Poor 1 — Bad

Title *

Your review *

Name (optional)

Did you try withdrawing funds? (optional)

The single most important practical question for a crypto platform — only answer if you actually attempted one.

Didn't try / prefer not to say Went smoothly Delayed but eventually worked Failed / still unresolved

Submit review

Related

⚔️ Ledger vs Coldcard ⭐ Best Hardware Wallets

Coldcard FAQ

What is Coldcard? +

Coldcard, made by Coinkite, is a Bitcoin-only hardware wallet aimed at security-conscious and advanced users. It uses dual secure elements and fully open-source, independently reproducible firmware, and supports true air-gapped transaction signing over NFC or microSD rather than a direct USB link to a possibly-compromised computer. The Q model adds a keyboard, QR scanner and colour screen, letting it operate without any companion app. In July 2026, Coinkite disclosed that a firmware build error dating to March 2021 had weakened seed randomness on some devices, and attackers subsequently stole an estimated $116M from affected wallets — one of the largest hardware-wallet security failures on record. Current firmware fixes the randomness bug and now requires additional user-supplied entropy, but any seed generated on the vulnerable firmware window remains compromised and must be replaced. Unlike Ledger and Trezor, Coldcard supports Bitcoin only, not a broad multi-asset lineup, and its advanced feature set (multisig, air-gapped workflows) suits experienced users more than beginners.

Is Coldcard safe? +

Coldcard is lightly regulated or non-custodial. A build-configuration error introduced in firmware 4.0.1 (March 2021) caused some Coldcard devices to derive wallet seeds from a weak software pseudorandom generator instead of the device's hardware entropy source. Coinkite disclosed this 30 July 2026; attackers who could predict the weak randomness drained an estimated 1,800+ BTC (roughly $116M) from 5,200+ addresses in the following weeks — one of the largest hardware-wallet losses on record. Current firmware uses hardware entropy plus mandatory user-supplied randomness (dice rolls, key presses or coin flips), but any seed generated on the affected firmware between 2021 and the July 2026 patch remains compromised regardless of the current firmware version and must be replaced with a freshly generated seed. As with any platform, use strong security and only hold what you need on it.

Does Coldcard require KYC? +

No — KYC is not required (non-custodial or minimal verification), which shifts custody and compliance responsibility to you.

What are Coldcard's fees? +

Coldcard fees: maker n/a, taker Hardware purchase; in-app buy/swap via partners; withdrawals: Network gas only. Always confirm current fees on the official site, as crypto fees change often.

Is Coldcard available in my country? +

Available globally, with some regional restrictions. Availability, regulation and tax treatment vary by country. Check your local laws before trading, and confirm current details on the official site. Regional note — India: Indian residents face 30% tax on crypto gains and 1% TDS on transactions above ₹50,000 per the Finance Act 2022.

What is Coldcard best for? +

Bitcoin-focused users who want fully open-source, air-gapped signing and are willing to generate a fresh seed on current firmware.

When should you avoid Coldcard? +

Avoid Coldcard if: You want multi-asset support, a simple beginner setup, or generated a seed on Coldcard before the July 2026 patch and haven't yet migrated funds to a new seed.

What are the main pros and cons of Coldcard? +

Pros: Dual secure elements (ATECC608A + DS28C36B) with fully open-source, reproducible firmware; True air-gapped signing via NFC or microSD — no USB connection to a computer required; Advanced, expert-friendly features: flexible multisig, full PSBT support, no mandatory companion app on the Q model. Cons: Bitcoin-only — no support for Ethereum, other altcoins or tokens; A 2026 seed-generation flaw led to roughly $116M in confirmed thefts from seeds created between 2021 and mid-2026; Steeper learning curve than Ledger or Trezor; not aimed at non-technical beginners.

Is Coldcard regulated? +

No / limited. Hardware vendor

When was this Coldcard review last verified? +

This review was last verified on 2026-09-27 against the official site.

Sources

• Coldcard — official site — verified 2026-09-27