Coinkite Coldcard Mk5 vs Trezor Model One
Coinkite Coldcard Mk5 stands out with open-source code, Shamir Backup. Trezor Model One is a solid alternative — Trezor Model One costs $170 less.
Security notice ·
October 2026: suspected implant in a Trezor bought from CryptoBilis
On 28 October 2026 Trezor received a report from a buyer in Indonesia of an extra circuit board inside a Trezor Safe 5 bought in August 2026 from CryptoBilis, the same Southeast Asian reseller whose Ledger devices carried hardware implants. According to the report, the board sits between the main board and the screen, reads what the screen shows, including the recovery phrase, and sends it out over a mobile network. Trezor has not yet examined the device, calls the report credible and is having the unit sent to its lab.
Trezor says it has no reports involving any other reseller and no evidence that any customer has lost funds; the person who reported the implant had already moved their funds. Trezor removed CryptoBilis from its authorized resellers on 9 October 2026.
Trezor’s advice applies to every Trezor model bought from CryptoBilis from March 2026 onwards:
- If the device is not set up yet, do not set it up and never enter an existing recovery phrase on it.
- If you already use it, move your funds as soon as possible to a new wallet with a newly generated recovery phrase. Restoring the old phrase on another device does not help.
- Keep the device and contact Trezor Support: affected buyers can get a new device or a voucher. Do not open it; Trezor says weighing it is not a reliable test.
The report concerns how one device reached a buyer, not the device design, so it does not change our ratings. We will update this notice when Trezor publishes the result of its examination.
Sources
Security notice ·
July 2026: COLDCARD firmware generated weak seeds
A firmware build setting introduced in 2021 made COLDCARD devices generate seeds with a software random number generator instead of the hardware one. According to Coinkite, seeds created on the Mk4, Mk5 and Q carry about 72 bits of entropy rather than 128, and older Mk2/Mk3 firmware fared worse. Attackers began guessing and sweeping affected wallets on 30 July 2026; Galaxy Research confirmed more than 1,778 BTC stolen. Coinkite states the devices themselves were not hacked or remotely accessed.
Affected: seeds generated on Mk4/Mk5 firmware before 5.6.0, Q firmware before 1.5.0Q, Edge firmware before 6.6.0X / 6.6.0QX, and Mk2/Mk3 firmware 4.0.1–4.1.9. Seeds built from 50 or more private dice rolls are not at risk from this bug.
What Coinkite advises:
- Install the fixed firmware before generating a new seed.
- Move funds to a newly generated seed, even if you use a strong passphrase — updating firmware does not repair an existing seed.
- Verify the new backup and a receive address on the device, send a small test transaction, then move the rest.
Current firmware is fixed; the risk remains for funds still held on seeds made with the affected versions.
Sources
Key Takeaways
- Coinkite Coldcard Mk5 wins in security (89/100)
- Coinkite Coldcard Mk5 wins in ease of use (52/100)
- Trezor Model One is more affordable ($49)
- Best for beginners: Trezor Model One (easier setup)
Coinkite Coldcard Mk5 vs Trezor Model One: Key Differences
Both Coinkite Coldcard Mk5 and Trezor Model One can keep your crypto safe — the real question is which one fits the way you actually use it. We've put both through our open-formula scoring on 40+ criteria: Coinkite Coldcard Mk5 (Coinkite) lands at 67/100, Trezor Model One (Trezor) at 44/100. The $170 gap between $219 and $49 isn't arbitrary — these are two different bets on what matters in a hardware wallet, and the right pick depends on which bet you'd take.
Winner by Category
Which wallet leads in each area
Comparison Table
Key specifications for your decision
| Criteria | ![]() Coinkite Coldcard Mk5 Coinkite $219 | ![]() Trezor Model One Trezor $49 |
|---|---|---|
Overall Rating | 67 | 44 |
Security | 89 | 29 |
Usability | 52 | 44 |
Price | $219 | $49 |
A secure element is a tamper-resistant chip built to store secrets and resist physical attacks such as side-channel analysis and fault injection. Learn more — Secure Element | Yes | No |
Open Source Firmware refers to firmware in hardware devices, like wallets, where the source code is publicly available, allowing transparency, auditability, and customization. Learn more — Open Source | Firmware | Firmware |
Bluetooth Connectivity enables wireless communication between devices, like hardware wallets and smartphones, using Bluetooth or Bluetooth Low Energy (BLE) for secure data transfer. Learn more — Bluetooth | No | No |
USB | Yes | Yes |
Networks | 1+ | 47+ |
Wallet apps | Sparrow, Electrum, Nunchuk, Specter, BlueWallet | — |
A passphrase is an additional security layer for cryptocurrency wallets, acting as a 25th word in the BIP39 seed phrase, protecting access to hidden wallets. Learn more — Passphrase | Yes | Yes |
A touchscreen display is a screen that allows users to interact with a device by touching the surface, commonly used in hardware wallets for easy navigation and transaction confirmation. Learn more — Display | Monochrome OLED, 128x64 (Gorilla Glass Cover) | OLED (Monochrome, 128x64) |
Recovery is the process of restoring access to a cryptocurrency wallet using its seed phrase or mnemonic backup if the original wallet is lost or inaccessible. Learn more — Backup Method | 24-word + Shamir | 24-word seed |
Setup Time | ~15 min | ~5 min |
IP Rating refers to the level of protection a device has against dust and water, often used for hardware wallets to indicate their durability in various environments. Learn more — Water Resist | None | None |
Which other apps each device works with, and how it connects: software compatibility matrix
Our Verdict: Coinkite Coldcard Mk5 or Trezor Model One?
Choose Coinkite Coldcard Mk5 if...
- You want advanced backup with Shamir Secret Sharing
- You need iPhone (iOS) compatibility
- You want wireless NFC connectivity — no cables needed
Skip Coinkite Coldcard Mk5 if...
- ×Budget is tight — you'd be better served by a cheaper option in this comparison
- ×You actively use DeFi and need WalletConnect / dApp support
Trezor Model One is discontinued
Trezor no longer sells this model. If you already own one, the full review covers how to keep using it; for a new purchase, pick one of the models on this page that are still on sale.
Our pick for most users
Based on the overall rating, Coinkite Coldcard Mk5 scores 67/100 and offers the best balance of security, usability, and value in this comparison.
Bottom line: Coinkite Coldcard Mk5 is our pick — it leads on both security and ease of use, and the overall score reflects that. If budget is real, Trezor Model One comes in $170 cheaper without giving up the basics.
Price: Coinkite Coldcard Mk5 vs Trezor Model One
Coinkite Coldcard Mk5 costs $219, while Trezor Model One is priced at $49 — a $170 difference. The extra cost of Coinkite Coldcard Mk5 gets you a 23-point higher overall rating. For budget buyers, Trezor Model One offers solid security at a lower price point.
Who Should Pick Which Wallet
Recommendations based on real-world use cases
Coinkite Coldcard Mk5
$219- +Two secure elements from different vendors (Microchip ATECC608C, Maxim DS28C36B); the seed key is split across three chips
- +Air-gapped signing over microSD or NFC; no account or companion app required
- +Reproducible firmware builds, factory-signed updates checked on every boot, and downgrade protection
- +On-device multisig coordinator with descriptor import and up to 15 co-signers
- −Every Mk5 shipped March–July 2026 ran firmware that generated weaker seeds; affected seeds must be replaced, not just updated
- −No internal battery: the device needs USB-C power whenever it is on
- −No Bluetooth and no camera, so QR-code signing is not possible
- −English-only interface and English-only BIP39 wordlist
Trezor Model One
$49- +Open-source firmware and hardware, with reproducible firmware builds
- +Trezor promises critical security updates until at least 2036; latest firmware released October 2026
- +Standard 24-word BIP39 backup, restorable in other BIP39 wallets
- +Passphrase support, which protects funds even against the known physical attack
- −No secure element: the seed can be extracted with physical access unless a passphrase is used
- −Discontinued: Trezor no longer sells it, and new coin support is not promised
- −No clear signing for most transactions: the device shows raw data
- −Passphrase and recovery words are typed on the computer, not on the device
Pre-Purchase Checklist
Important points to verify regardless of your choice
Every wallet linked here ships from its manufacturer's official store with full warranty.
Coinkite Coldcard Mk5 vs Trezor Model One: Frequently Asked Questions
Answers about Coinkite Coldcard Mk5 vs Trezor Model One
Is Coinkite Coldcard Mk5 better than Trezor Model One?
How much do Coinkite Coldcard Mk5 and Trezor Model One cost?
Can Trezor Model One be used on iPhone (iOS)?
Which wallet is better for DeFi and Web3: Coinkite Coldcard Mk5 or Trezor Model One?
Coinkite Coldcard Mk5 vs Trezor Model One: which has better backup options?
Where to buy Coinkite Coldcard Mk5 at the best price?
Do Coinkite Coldcard Mk5 and Trezor Model One come with a warranty?
Made your decision?
Check out full reviews or find the best price from official vendors.
Affiliate link — we may earn a commission at no extra cost to you. Learn more about affiliate links
Not convinced? Consider these alternatives
−10%via this link
More Comparisons
Compare Coinkite Coldcard Mk5 with other wallets
Brand-level comparison: Coinkite vs Trezor
Affiliate link — we may earn a commission at no extra cost to you. Learn more about affiliate links






