Customer funds were stolen in 2026-07 and we can't show they were fully reimbursed, so under our rules Coldcard is capped at 60% and can't be our pick. Regulatory actions in the last 5 years on record: 0.
Data as of · Last updated · By VaultRubric Research · How we score · Not investment advice.
Customer funds were stolen in 2026-07 and we can't show they were fully reimbursed, so under our rules Coldcard is capped at 60% and can't be our pick. Regulatory actions in the last 5 years on record: 0.
This page answers “Is Coldcard safe?” only from VaultRubric's sourced record (security incidents, regulatory actions, licensing and protections), as of 2026-10-11. It is not a guarantee: no platform is risk-free, and safety also depends on how you use it (2FA, phishing, backups).
Security: 6.5/10. base 7, +1.5 secure element, +1 fully open-source firmware, −3 customer funds loss (2026-07)
Overall VaultRubric score across all hardware wallet options we track: 49.2% (data coverage 100%). How incidents are scored · hack cap.
| Date | Type | What happened | Sources |
|---|---|---|---|
| 2026-07 | customer funds loss | Coldcard seed-generation flaw (software PRNG instead of hardware RNG on older firmware) let attackers brute-force seeds; ~$116M in BTC stolen (TRM Labs); fixed firmware since 2026-07-31 but affected seeds must be migrated; Coinkite has not offered reimbursement | coldcard.com, www.trmlabs.com, www.forbes.com |
None in our sourced record.
Customer funds were stolen in 2026-07 and we can't show they were fully reimbursed, so under our rules Coldcard is capped at 60% and can't be our pick. Regulatory actions in the last 5 years on record: 0. No platform is risk-free; see the full record on this page.
Yes. 2026-07: Coldcard seed-generation flaw (software PRNG instead of hardware RNG on older firmware) let attackers brute-force seeds; ~$116M in BTC stolen (TRM Labs); fixed firmware since 2026-07-31 but affected seeds must be migrated; Coinkite has not offered reimbursement
Coldcard scores 49.2% across all hardware wallet options we track, with 100% data coverage. See /methodology.