Skip to content

October 4, 2026

SearchAbout
CRYPTO·COINBEAT

Journalism for the digital-asset economy

Best Hardware Wallets · Rank 08 of 8

Coldcard Mk4 review

Air-gapped Bitcoin signing — on a seed not generated under the 2021 firmware

Last verified August 15, 20264 scored axes

Score6.6

Adverse event on record

The short answer

Coldcard Mk4 scores 6.6 out of 10 and ranks #8 of 8 in the best hardware wallets table, strongest on openness (9.0) and weakest on security architecture (4.5).

The design is still the most security-focused in the category — air-gapped operation, duress PINs, dual secure elements, a threat model documented in unusual detail — and a 2021 firmware bug nonetheless produced the largest hardware-wallet loss ever recorded, roughly $116m brute-forced out of weakened seeds from July 2026. Design intent and shipped record are different facts, and this table scores the record.

Key facts on record

Vendor
Coinkite, Canada
Assets
Bitcoin only
Air-gap
microSD and NFC

What the record shows

4 axes, weighted as published in the table’s methodology. Each score below is read from the fact printed under it.

Coldcard Mk4 on security architecture

4.5/ 35% of the score

Two secure elements from different manufacturers with the PIN verified in hardware, duress PINs and a threat model published in detail — and, from 30 July 2026, the largest hardware-wallet loss on record: roughly 1,816 BTC, about $116m, drained from more than 5,200 addresses in four waves. The cause was a March 2021 firmware bug that cut seed entropy from 128 bits to as little as 40, making those keys brute-forceable with no physical access to the device.

Coldcard Mk4 on openness

9.0/ 25% of the score

Firmware source is published under a licence restricting commercial reuse, and builds are reproducible.

Coldcard Mk4 on recovery model

6.5/ 20% of the score

BIP-39 with optional passphrase and encrypted microSD backup, and fully air-gapped PSBT recovery; seeds generated under the affected 2021 firmware have to be regenerated and the funds moved, which is the vendor's own guidance.

Coldcard Mk4 on usability

7.4/ 20% of the score

Bitcoin only; monochrome display and PSBT workflows that assume familiarity with coin control.

Quick answers

What is Coldcard Mk4 best for?
Air-gapped Bitcoin signing — on a seed not generated under the 2021 firmware. The design is still the most security-focused in the category — air-gapped operation, duress PINs, dual secure elements, a threat model documented in unusual detail — and a 2021 firmware bug nonetheless produced the largest hardware-wallet loss ever recorded, roughly $116m brute-forced out of weakened seeds from July 2026.
Where does Coldcard Mk4 rank among best hardware wallets?
#8 of 8, scoring 6.6 out of 10 — adverse event on record on our band scale.
What is the weakest part of Coldcard Mk4?
Security architecture at 4.5. Two secure elements from different manufacturers with the PIN verified in hardware, duress PINs and a threat model published in detail — and, from 30 July 2026, the largest hardware-wallet loss on record: roughly 1,816 BTC, about $116m, drained from more than 5,200 addresses in four waves. The cause was a March 2021 firmware bug that cut seed entropy from 128 bits to as little as 40, making those keys brute-forceable with no physical access to the device.

Strengths and weaknesses

In its favour

  • True air-gapped signing without ever connecting to a computer
  • Duress PINs, decoy wallets and anti-tamper features
  • Open firmware source and a published threat model

Against it

  • A 2021 firmware entropy bug caused ~$116m of brute-force losses from July 2026
  • Bitcoin only, with a steep learning curve

30 July 2026

Roughly 1,816 BTC — about $116m — was drained from more than 5,200 addresses in four waves. The cause was not a new attack on the device but a firmware bug shipped in March 2021 that cut seed entropy from 128 bits to as little as 40, making those keys brute-forceable with no physical access at all. It is the largest hardware-wallet loss ever recorded.

What that does and does not say

It does not say the design was wrong. Coldcard still has the most rigorous threat model in this table: two secure elements from different manufacturers, PIN verified in hardware, duress PINs, decoy wallets, brick-me options and documentation that explains its assumptions in unusual detail. It says that five years of correct design can be undone by one release, and that this table scores the shipped record rather than the intent.

If you own one

Seeds generated under the affected 2021 firmware have to be regenerated and the funds moved — that is the vendor's own guidance, and it is not optional. A device set up outside that window is unaffected.

Who it was for

Bitcoin holders who want fully air-gapped signing through microSD or NFC and are comfortable with an uncompromising interface. That case still stands; the 2026 record now stands next to it.

Frequently asked questions

Is Coldcard still safe?+

Its design remains the most security-focused in the category, but a March 2021 firmware bug weakened seed randomness on affected devices and led to roughly $116m being brute-forced from July 2026. Seeds generated under that firmware must be regenerated.

How did the Coldcard hack work?+

No physical access was needed. A firmware bug reduced seed entropy from 128 bits to as little as 40 on affected devices, which made the resulting private keys brute-forceable remotely.

Should I still use a Coldcard?+

If your seed was generated outside the affected 2021 firmware window, the device's protections — dual secure elements, duress PINs, air-gapped signing — are as strong as anything available. Regenerate and move funds if it was not.

How Coldcard Mk4 compares

8 services in best hardware wallets

  1. 01Trezor Safe 5Open firmware with a secure element, without a compromise on either9.2
  2. 02BitBox02A minimal, auditable device that does exactly one thing well9.1
  3. 03Foundation PassportBitcoin users who want air-gapped signing with a usable interface8.8
  4. 04Keystone 3 ProAir-gapped signing with a large screen and multi-chain support8.8
  5. 05Blockstream JadeBudget-conscious Bitcoin holders who still want open source8.5
  6. 06Ledger Nano XBroadest asset and application support8.3
  7. 07TangemPeople who will never write down a seed phrase8.0
  8. 08Coldcard Mk4you are hereAir-gapped Bitcoin signing — on a seed not generated under the 2021 firmware6.6