# Coldcard Q custody score: 49% | TradingAgentStack

> Coldcard Q by Coinkite: custody score 49% from sourced facts on supply chain, key protection, signing, customer data and incidents. Checked 2026-11-05.

Canonical: https://tradingagentstack.com/custody/coldcard/

1. [Home](https://tradingagentstack.com/)

2. [Custody](https://tradingagentstack.com/custody/)

3. Coldcard Q

# Coldcard Q: custody score 49%

Coinkite · Bitcoin-only · checked 2026-11-05. 68 of 85 points from sourced facts. User losses in the last 12 months: capped at 49%

**Capped at 49%:** users lost funds in the last 12 months.

[Official store (store.coinkite.com) →](https://store.coinkite.com/)

## Score, input by input

| Input | What we found | Points | Source |
| --- | --- | --- | --- |
| Supply chain and authenticity Genuine-device check | On the device: Shows GENUINE at boot and the bag number to match against your sealed bag. | 10/10 | [source](https://coldcard.com/resources/security/coldcard-security-and-verification) |
| Supply chain and authenticity Official reseller list | Sold direct only: No official resellers by design: buy from store.coinkite.com. | 5/5 | [source](https://blog.coinkite.com/supply-chain-trust-minimized/) |
| Supply chain and authenticity Tamper evidence | Strong: Numbered tamper-evident bag recorded in the secure element. | 5/5 | [source](https://coldcard.com/resources/security/coldcard-security-and-verification) |
| Supply chain and authenticity Response to reseller incidents | No incident: Sold direct, no resellers. | 5/5 | — |
| Key protection Secure element | Uncertified chip: Two secure elements from different vendors (Microchip ATECC608, Maxim DS28C36B); certification not stated. | 4/6 | [source](https://www.spark.money/tools/foundation-passport-vs-coldcard-comparison) |
| Key protection Open firmware | Open, reproducible: Published firmware source with a reproducible-build procedure. | 9/9 | [source](https://coldcard.com/resources/security/coldcard-security-and-verification) |
| Signing safety Own screen to check what you sign | Yes: Shows the destination address on its own screen before signing. | 15/15 | [source](https://coldcard.com/compare/coldcard-vs-trezor/) |
| Customer data exposure (36 months) Customer data | None found: No customer-data breach found for the last 36 months. | 15/15 | none found |
| Incident record (24 months) Security incidents | User losses: July 30, 2026: seeds made on firmware 4.0.1–4.1.9 had weak randomness; about 1,816 BTC (over $112M) was drained from 5,200+ addresses. Patched in 4.2.0; affected seeds stay weak. | 0/15 | [source](https://www.bit.com/insights/knowledge-hub/coldcard-the-security-first-wallet-that-got-hacked) |

## Incidents

- **2026-07-30** Weak-randomness seeds (firmware 4.0.1–4.1.9) brute-forced; ~1,816 BTC drained; fixed in 4.2.0 on July 31. [source](https://www.bit.com/insights/knowledge-hub/coldcard-the-security-first-wallet-that-got-hacked)

## Where to buy safely

- Buy from the maker: [store.coinkite.com](https://store.coinkite.com/).

- Resellers: No official resellers by design: buy from store.coinkite.com. [source](https://blog.coinkite.com/supply-chain-trust-minimized/)

- On arrival: check the packaging, run the genuine-device check, and reject any device that already has a PIN or recovery phrase set.

## Keep it away from your bots

A hardware wallet is the vault. Don't connect it to a trading bot, an API key or an agent wallet: give the bot a separate trading float and sweep profits back to the vault's address. [How to split vault, float and sweeps](https://tradingagentstack.com/custody/#tiers). [Set up Coldcard Q as cold storage, step by step](https://tradingagentstack.com/cold-storage/).

## Questions

### Is Coldcard Q safe?

Coldcard Q scores 49% on our custody score (68 of 85 points from sourced facts, checked 2026-11-05). It is capped at 49% because users lost funds in the last 12 months. Weakest point: July 30, 2026: seeds made on firmware 4.0.1–4.1.9 had weak randomness; about 1,816 BTC (over $112M) was drained from 5,200+ addresses. Patched in 4.2.0; affected seeds stay weak.

### Has Coinkite had a security incident?

July 30, 2026: seeds made on firmware 4.0.1–4.1.9 had weak randomness; about 1,816 BTC (over $112M) was drained from 5,200+ addresses. Patched in 4.2.0; affected seeds stay weak.

### Where should I buy Coldcard Q?

From the maker's store (store.coinkite.com). Resellers: No official resellers by design: buy from store.coinkite.com. On arrival, run the genuine-device check and reject any device that already has a PIN or recovery phrase set.

## Other hardware wallets, scored
[OneKey Pro: 94%](https://tradingagentstack.com/custody/onekey/)[BitBox02 Nova: 89%](https://tradingagentstack.com/custody/bitbox/)[Blockstream Jade Plus: 79%](https://tradingagentstack.com/custody/blockstream-jade/)[Trezor Safe 5: 78%](https://tradingagentstack.com/custody/trezor/)[CoolWallet Pro: 72%](https://tradingagentstack.com/custody/coolwallet/)[Foundation Passport Prime: 66%](https://tradingagentstack.com/custody/foundation-passport/)[Tangem Wallet: 66%](https://tradingagentstack.com/custody/tangem/)[Keystone 3 Pro: 54%](https://tradingagentstack.com/custody/keystone/)[Ledger Flex: 49%](https://tradingagentstack.com/custody/ledger/)

[All hardware wallets, scored](https://tradingagentstack.com/custody/) · [Is this seller authorized?](https://tradingagentstack.com/custody/#reseller-check) · [How we score](https://tradingagentstack.com/custody/#method)

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)