Coldcard Review: Costs, Access and Key Trade-offs

Coldcard is a line of Bitcoin-only hardware signing devices made by Coinkite Inc., and the flagship in our evidence evidence record is the COLDCARD Q at $319 8. This review works from one imported snapshot: Coinkite product and security documents, the company's own disclosure history, and third-party reporting. It covers purchase cost, US and New York access, the signing and recovery model, and the firmware incident disclosed on July 30, 2026. No device was purchased, set up or recovery-tested for this page.

Who this hardware wallet suits

The Q is built for someone who already runs their own coordinator software and wants the signing key kept off a networked machine. Coinkite's product page describes the Q as carrying more features than any other COLDCARD, with a QR camera, full keyboard, dual microSD and two secure elements 8. Support is Bitcoin only, a single chain as recorded on September 26, 2026 15.

The trade-off sits in recovery. Seeds follow BIP-39, and in place of SLIP-39 shares Coinkite offers its own Seed XOR split, which is N-of-N: every piece is needed, so a lost fragment is a lost backup. Arbitrary multisig is supported, which is the redundancy route most Coldcard owners end up taking instead.

Device model, cost and availability

$319 is the figure on Coinkite's official Q page as of September 26, 2026 8. That is the device only. Shipping, any duty and your state sales tax land on top, and since our evidence record holds no checkout capture, we publish no landed total for an Ohio or a Texas address. Colored variants have appeared on the Coinkite store at lower promotional prices, so read the configuration line before you pay.

The company behind it is Coinkite Inc., founded in 2012 and operating from Toronto, Canada 1. That named legal entity is disclosed in Coinkite's own materials, which matters for warranty, returns and any claim you might later bring, because it is a Canadian company rather than a US one.

US availability is recorded as yes, with no excluded states listed, checked September 26, 2026 8. New York is a separate scope in our data and does not inherit that US line automatically. It is recorded as available with the basis field empty: the reasoning is that selling a hardware device is not money transmission or custody of customer funds under NYDFS rules, not a Coinkite statement about New York shipping. A New York buyer should confirm delivery at checkout rather than rely on our inference. Selling hardware without needing a license is also not a regulator's approval of the product.

Signing, connectivity and compatibility

Connections on the flagship are USB-C, NFC and QR. Bluetooth appears on none of the official pages in our evidence record, which is a design choice for air-gapped use rather than an omission in our record. The screen is an LCD paired with physical keys, not a touchscreen, and there is no dedicated mobile app or native iOS support, so the device talks to third-party coordinators such as Sparrow or Electrum over QR codes, microSD, NFC or cable.

Clear signing is documented directly by Coinkite: the device independently recalculates the payment address and shows it on its own screen so you can compare it against what your computer displays 15. That is the check that defeats a tampered desktop, and it only works if you actually read both screens.

Chain coverage is one. Bitcoin and Bitcoin testnet, nothing else, per the Coldcard FAQ 15. For a reader holding ETH, SOL or stablecoins, this device cannot be the single answer.

Documented item	Dated value and scope	What it means for you
Chains supported	Bitcoin only, 1 chain; checked September 26, 2026	Anything other than BTC needs a second wallet
US availability	Sold to US buyers, no excluded states listed; checked September 26, 2026	Ordering from the US is within documented scope
New York scope	Recorded available, basis field empty (our inference, not a Coinkite statement on NY)	Confirm shipping to NY at checkout before ordering
Flagship price	COLDCARD Q at $319 on the official product page; September 26, 2026	Shipping, duty and state sales tax are extra; we publish no total
Incident and compensation	Seed-generation flaw disclosed July 30, 2026; no compensation program announced as of September 26, 2026	Losses from that event stayed with holders; our uncompensated-hack caution dates from July 30, 2026
Published security material	Security verification page and disclosure history published; checked September 26, 2026	A useful trail, but not one external audit of the full firmware

Recovery model and security history

Your recovery path is a BIP-39 phrase, optionally split with Seed XOR. There is no threshold scheme in that split, so plan storage for every fragment, and treat multisig as the path if you want a quorum rather than a complete set.

On July 30, 2026, Coinkite disclosed that a firmware integration bug with the hardware random number generator weakened seed entropy in affected versions, which let attackers brute-force private keys offline. The devices were not remotely hacked; funds were stolen from some addresses because the keys themselves were guessable 4. Loss estimates differ by source and by the date of measurement, from roughly $70 million in one on-chain snapshot to 1,367 BTC, about $88.6 million, in reporting tied to Proofpoint 2, and above $130 million across multiple attackers in later coverage. Coinkite has not published a total of its own. Fixed firmware shipped for every supported model, including 5.6.0 for Mk4 and Mk5 and 1.5.0Q for the Q 4.

No compensation program from Coinkite appears anywhere in our evidence record as of September 26, 2026. What does appear is a law firm, Stoltmann Law, soliciting affected users for claims against the company 22. That combination is why this profile carries an uncompensated-hack caution dated July 30, 2026.

Worth knowing before your inbox fills: a phishing campaign impersonating a "COLDCARD security audit" from a lookalike domain pushed a remote access tool onto victims' machines after the disclosure 2. Third-party fraud riding the panic, not a flaw in the device.

Coinkite does publish security material, including a verification page and a disclosure history logging 30 security events since 2019, 13 of them with confirmed coordinated disclosure 21. An internal review ran in May and June of 2026, with findings fixed, rejected or accepted as design decisions. Read that as a chronology plus internal work, not as a single external penetration test covering the whole firmware.

What remains outside this review

We did not unbox a Q, verify a firmware signature, restore from a Seed XOR split or time a support reply. Durability, screen legibility and keyboard feel are untested here. Nothing in the evidence record captures the checkout shipping list, so the New York conclusion stays an inference. We also have no affiliate terms, no Trustpilot or app store ratings (there is no app to rate) and no official final loss figure for the July 2026 incident.

An empty field in our data is a gap in the record, not evidence that a feature is missing. If Coinkite documents something we have not recorded, the primary page wins over this snapshot. Our criteria are set out in how CoinReckon assesses services.

How to choose for your custody needs

Run through this before you order:

• Identity and geography. You are buying from Coinkite Inc., Toronto, Canada 1. If you are in New York, confirm delivery at checkout rather than trusting our basis-empty record.
• Intended operation. Bitcoin only, one chain 15. A mixed portfolio needs a second device, and a related service profile covers a multi-chain alternative.
• Documented cost limit. $319 for the Q as of September 26, 2026, before shipping and sales tax 8.
• Custody boundary. Coinkite never holds your coins, so proof of reserves does not apply and nobody can restore your seed for you. Seed XOR needs all fragments.
• Next step. Read Coinkite's current security status page and confirm the fixed firmware version for the model you buy 4, then verify a receive address on the device screen before any real deposit.

The conditional verdict: reasonable for a Bitcoin-only holder comfortable with coordinator software and air-gapped workflow, poor fit for a first wallet, a multi-chain holder or anyone who wants a vendor-backed safety net after July 2026.

Quick questions

Which Coldcard model does this review cover? The COLDCARD Q, the flagship in our evidence record at $319 8. Other models in the range are not scored here.

What recovery and connection options are documented? BIP-39 seeds with the Seed XOR split, plus multisig. Connections are USB-C, NFC and QR; Bluetooth is not listed 8.

Was a recovery test performed for this review? No. The assessment rests on documents, not on a restored device.

Order from Coinkite's own store or a listed reseller, check the firmware version on arrival, and tell us what you find: see all crypto service reviews, browse the category hub for alternatives, or send an editorial correction if a figure here has moved.

Sources

Evidence base updated September 26, 2026; snapshot imported October 20, 2026. No new checks were run for this article.

• [1] Coinkite, About Coldcard: https://coldcard.com/about
• [2] BleepingComputer, COLDCARD security audit phishing attack installs remote access tool: https://www.bleepingcomputer.com/news/security/coldcard-security-audit-phishing-attack-installs-remote-access-tool
• [4] Coinkite, Current COLDCARD Security Status: https://coldcard.com/security/status
• [8] Coinkite, COLDCARD Q product page: https://coldcard.com/q
• [15] Coinkite, COLDCARD FAQ: https://coldcard.com/faq
• [21] Coinkite, COLDCARD Security Disclosure History: https://coinkite.com/historical-disclosures
• [22] Stoltmann Law, Coldcard Wallet Bitcoin Theft, Legal Options for Victims (third-party law firm material): https://stoltmannlaw.com/coldcard-wallet-bitcoin-theft-claims

General educational information, not personal investment, legal or tax advice. Crypto can lose value, and documentary analysis is no guarantee of safety, access or recovery. CoinReckon publishes no affiliate or purchase links.