Every recorded Coinkite security incident, newest first, with severity, fix status and sources.
Funds on seeds generated with the affected firmware can be found and swept remotely. Current firmware is fixed, but the risk remains for funds still held on old seeds.
Users who registered a multisig wallet on a Coldcard on firmware 3.1.9 or earlier through a compromised computer could end up with a wallet the attacker controls or can hold to ransom. Coinkite disputes that this is a remote attack, since it requires a compromised computer at wallet creation.
A Coldcard owner on firmware 3.1.9 or earlier persuaded to switch the device to testnet and sign an attacker-supplied transaction could lose real bitcoin. Coinkite considers the attack unrealistic because switching to testnet requires explicit action on the device.
More entries do not mean a less secure brand: widely sold devices draw more published research and more targeted attacks, and some vendors disclose more than others.
WalletInsights. Hardware wallet security incident tracker. Last checked November 3, 2026. https://walletinsights.io/en/security-incidents/coinkite/
Vendors, researchers and readers can send corrections or statements to security@walletinsights.io. We check them against the sources, update the entry and record the change in its log.