Wallet dossier

COLDCARD

hardwareactive

Bitcoin-only self-custody hardware signing-device family made by Coinkite, with multiple Mk generations and the Q model.

Developer / company
Coinkite Inc.
Origin
Launch
2017
Custody
self_custody
Confidence
high
Last verified
2026-08-14

Product family

Products

Chronology

Lifecycle timeline

2026-07-30
vulnerability_disclosedcritical

Seed-generation entropy defect disclosed

COLDCARD disclosed a seed-generation defect in affected firmware lines. Fixed releases restore the intended hardware-randomness path for future seed generation, but existing affected seeds require migration unless an advisory exception applies.

Scope: seed_generationFunds affected: unknownAction: update, migrateEvidence: 1
2026-07-31
firmware_fixcritical

Fixed COLDCARD firmware released across supported model lines

Coinkite released fixed firmware for the supported COLDCARD model and track matrix and published migration guidance for existing affected seeds.

Scope: seed_generationFunds affected: unknownAction: update, migrateEvidence: 2

Sources

Evidence