Cold wallets, read like datasheets.

Documented features are marked only where the maker's own pages state them; no mark means no, only in part, or not verified. Prices are snapshots from each maker's shop on the date checked.

1. 1Step 01 of 03

   What is a cold wallet?

   A cold wallet holds the private keys that control your crypto on something that is not connected to the internet, typically a physical device such as a hardware wallet. With a hardware wallet or an offline computer, transactions are prepared on an online phone or computer, then checked and signed on the offline device, so the keys stay off the internet-connected machines that malware targets. A key kept on paper cannot sign; it has to be loaded into software to spend.

   About 1,900 words · rev. 14 Oct 2026

2. 2Step 02 of 03

   Cold wallet vs hot wallet

   A hot wallet keeps your private keys in an app on an internet-connected phone, computer or browser, while cold storage keeps them offline; a hardware wallet, one kind of cold wallet, signs transactions on a separate device. Hot wallets are quicker to use and may be free to install; cold wallet devices typically cost money and add a step, but keep the keys off the devices you use for everything else.

   About 1,400 words · rev. 14 Oct 2026

3. 3Step 03 of 03

   Seed phrases: what they are and how to store one

   A seed phrase, also called a recovery phrase, backs up a wallet's master secret: 12, 15, 18, 21 or 24 words under BIP39, or SLIP-39 shares of 20 or 33 words. Anyone who holds it (plus the passphrase, if one is set; for SLIP-39, enough shares to meet the threshold) can restore the wallet on a compatible device and spend from it. Store it offline on paper or metal, in more than one place you control, and never photograph it, put it in cloud storage or type it into a website.

   About 1,500 words · rev. 15 Oct 2026

The 21 datasheet devices with a listed US dollar price, by the lowest price on the maker's own shop. Prices change often: this is the snapshot from the date shown, not a current offer.

• Block Bitkey: €230 listed in EUR, not converted
• NGRAVE ZERO: €398 listed in EUR, not converted
• BitBox02 Nova Multi: Price not recorded
• Trezor Model One: Price not recorded
• Trezor Model T: Price not recorded

• vs

  COLDCARD vs Trezor

  COLDCARD · listed

  $319

  Trezor · listed

  $129

  Rows that differ

  14 of 16

  Sheets merged

  2

• vs

  Ledger Flex vs Stax

  Flex · listed

  $249

  Stax · listed

  $399

  Rows that differ

  4 of 16

  Sheets merged

  2

• vs

  Ledger Nano Gen5 vs Nano X

  Nano Gen5 · listed

  $179

  Nano X · listed

  $99

  Rows that differ

  7 of 16

  Sheets merged

  2

• vs

  Ledger Nano X vs Nano S Plus

  Nano X · listed

  $99

  Nano S Plus · listed

  $69

  Rows that differ

  6 of 16

  Sheets merged

  2

• vs

  Ledger vs Trezor

  Ledger · listed

  $69 to $249

  Trezor · listed

  $59 to $249

  Rows that differ

  12 of 16

  Sheets merged

  6

• vs

  Tangem vs Ledger

  Tangem · listed

  $54.90 to $69.90

  Ledger · listed

  $69 to $99

  Rows that differ

  11 of 16

  Sheets merged

  3

• vs

  Trezor Safe 3 vs Safe 5

  Safe 3 · listed

  $59

  Safe 5 · listed

  $129

  Rows that differ

  6 of 16

  Sheets merged

  2

• vs

  Trezor Safe 5 vs Safe 7

  Safe 5 · listed

  $129

  Safe 7 · listed

  $249

  Rows that differ

  8 of 16

  Sheets merged

  2

Outlines at one scale across all cards, from published sizes · dashed = size not published · prices: lowest to highest US dollar listing on each side

Newest first, across every device in the database: device flaws, published research and brand-level events such as data leaks and phishing. Each entry links its source; devices with a datasheet link to their full security history. An empty history means we found no documented event, not that none exists.

1. 10 Oct 2026

   Arculus · Brand users targeted in broader QFS/Web3 migration scams; no card exploit demonstrated

   Vendor warned of false claims that Arculus and other wallets are unsafe, directing users to fake migration/validation wallets.

   Device Arculus Cold Storage Wallet security history Source support.arculus.co

2. 3 Oct 2026

   Block · Bitkey Mobile Pay server; spend accounting

   Vendor disclosed a signed-transaction cache race that could fail to count otherwise valid customer transactions against the daily allowance. It reported a server fix and no customer impact.

   Device Block Bitkey security history Source bitkey.world

3. 2 Oct 2026

   Block · Bitkey hardware before onboarding; close-proximity NFC provisioning

   Vendor disclosed a path to pre-provision an unlock PIN under specific proximity/timing conditions. It says this alone cannot access funds, but could permit wiping or starting cancellable recovery. Fixed production firmware disables PIN unlock.

   Device Block Bitkey security history Source bitkey.world

4. 1 Oct 2026

   Coinkite · Current Mk4/Mk5 security status and affected seed generation

   Vendor warns that affected historical firmware can require seed migration, not just an update. Current recommended standard release is 5.6.3; minimum fixed standard version is 5.6.0.

   Devices COLDCARD Mk5 security history, COLDCARD Q security history Source coldcard.com

5. 16 Sept 2026

   DCENT · DCENT App Wallet software mode, not a demonstrated DCENT X hardware compromise

   Users reported unauthorized transfers. DCENT opened incident response, notified users and added an affected-wallet check. Its October 7 guidance says the cause remains under investigation and requires moving exposed software-wallet funds to a new seed.

   Device DCENT X Source support.dcentwallet.com

6. 17 Aug 2026

   BitBox · Uninitialized Nova Multi and silent-payment transactions

   Memory corruption with a malicious host before setup and silent-payment address manipulation were fixed in 9.26.5. Nova was explicitly excluded from the older bootloader exploit.

   Devices BitBox02 Multi, BitBox02 Nova Multi security history Source blog.bitbox.swiss

35 older events are recorded in the database; each datasheet lists its device's full security history.

• SecuX: show its devices in the table

  7 devices

• OneKey: show its devices in the table

  6 devices · 4 in production

  Datasheets Pro

• Ledger: show its devices in the table

  5 devices

  Datasheets Nano S Plus, Nano X, Flex, Stax, Nano Gen5

• Trezor: show its devices in the table

  5 devices · 3 in production

  Datasheets Safe 3, Safe 5, Safe 7, Model One, Model T

• BitBox: show its devices in the table

  4 devices

  Datasheets BitBox02 Nova Multi

• Coinkite: show its devices in the table

  4 devices · 3 in production

  Datasheets COLDCARD Mk5, COLDCARD Q

• Blockstream: show its devices in the table

  3 devices

  Datasheets Jade Plus

• DCENT: show its devices in the table

  3 devices

• ELLIPAL: show its devices in the table

  3 devices

  Datasheets Titan 2.0

• SafePal: show its devices in the table

  3 devices

  Datasheets S1 Pro, X1

• Tangem: show its devices in the table

  3 devices · 2 in production

  Datasheets Wallet, Ring

• Foundation: show its devices in the table

  2 devices · 1 in production

  Datasheets Passport Prime

• Arculus: show its devices in the table

  1 device

  Datasheets Cold Storage Wallet

• Block: show its devices in the table

  1 device

  Datasheets Bitkey

• Cypherock: show its devices in the table

  1 device

• KeepKey: show its devices in the table

  1 device

  Datasheets KeepKey

• Keystone: show its devices in the table

  1 device

  Datasheets 3 Pro

• NGRAVE: show its devices in the table

  1 device

  Datasheets ZERO