# CoolWallet Pro custody score: 72% | TradingAgentStack

> CoolWallet Pro by CoolBitX: custody score 72% from sourced facts on supply chain, key protection, signing, customer data and incidents. Checked 2026-11-05.

Canonical: https://tradingagentstack.com/custody/coolwallet/

1. [Home](https://tradingagentstack.com/)

2. [Custody](https://tradingagentstack.com/custody/)

3. CoolWallet Pro

# CoolWallet Pro: custody score 72%

CoolBitX · Multi-asset · checked 2026-11-05. 61 of 85 points from sourced facts.

[Visit CoolBitX →](https://tradingagentstack.com/go/coolwallet/?from=/custody/coolwallet/&cta=custody) Affiliate link · [disclosure](https://tradingagentstack.com/disclosure/)

## Score, input by input

| Input | What we found | Points | Source |
| --- | --- | --- | --- |
| Supply chain and authenticity Genuine-device check | None found: No genuine-device check found in CoolWallet's documentation. | 0/10 | none found |
| Supply chain and authenticity Official reseller list | Published, still names a reseller others cut off: Retailer list on coolwallet.io. As of Nov 5, 2026 it still lists CryptoBilis in Indonesia, Malaysia and the Philippines with no warning, after Ledger, Trezor and OneKey cut CryptoBilis off over implanted devices. | 2/5 | [source](https://www.coolwallet.io/pages/coolwallet-retailer) |
| Supply chain and authenticity Tamper evidence | Seal or resistance: CoolWallet describes the card as tamper-resistant: taking it apart doesn't expose the secure element. | 3/5 | [source](https://coolwallet.io/coolwallet_pro/) |
| Supply chain and authenticity Response to reseller incidents | No incident: None on record. | 5/5 | — |
| Key protection Secure element | Certified (EAL): CC EAL6+ secure element. | 6/6 | [source](https://coolwallet.io/coolwallet_pro/) |
| Key protection Open firmware | Closed: CoolWallet said in 2023 it would open-source its secure-element code; WalletScrutiny found no public firmware source. | 0/9 | [source](https://old.walletscrutiny.com/hardware/oresystem.coolwalletpro) |
| Signing safety Own screen to check what you sign | Yes: E-paper display: outbound transactions need you to check the amount and press the button. | 15/15 | [source](https://www.coolwallet.io/?p=5445) |
| Customer data exposure (36 months) Customer data | None found: No customer-data breach found for the last 36 months. | 15/15 | none found |
| Incident record (24 months) Security incidents | None found: No device or vendor security incident found in the last 24 months (earlier CoolWallet S Bluetooth and app issues were fixed years ago). | 15/15 | [source](https://www.coolwallet.io/blogs/blog/bluetooth-security-vulnerability-seed-replay-attack) |

## Incidents

- **2026-11-05** CoolWallet's retailer page still lists CryptoBilis (Indonesia, Malaysia, Philippines) with no warning. [source](https://www.coolwallet.io/pages/coolwallet-retailer)

## Where to buy safely

- Buy from the maker: [coolwallet.io](https://www.coolwallet.io/).

- Resellers: Retailer list on coolwallet.io. As of Nov 5, 2026 it still lists CryptoBilis in Indonesia, Malaysia and the Philippines with no warning, after Ledger, Trezor and OneKey cut CryptoBilis off over implanted devices. [source](https://www.coolwallet.io/pages/coolwallet-retailer) Its list names 72 shops in 35 countries (copied 2026-11-05); paste any shop into the [reseller check](https://tradingagentstack.com/custody/#reseller-check).

- On arrival: check the packaging, run the genuine-device check, and reject any device that already has a PIN or recovery phrase set.

## Keep it away from your bots

A hardware wallet is the vault. Don't connect it to a trading bot, an API key or an agent wallet: give the bot a separate trading float and sweep profits back to the vault's address. [How to split vault, float and sweeps](https://tradingagentstack.com/custody/#tiers). [Set up CoolWallet Pro as cold storage, step by step](https://tradingagentstack.com/cold-storage/).

## Questions

### Is CoolWallet Pro safe?

CoolWallet Pro scores 72% on our custody score (61 of 85 points from sourced facts, checked 2026-11-05). Weakest point: No genuine-device check found in CoolWallet's documentation.

### Has CoolBitX had a security incident?

No device or vendor security incident found in the last 24 months (earlier CoolWallet S Bluetooth and app issues were fixed years ago).

### Where should I buy CoolWallet Pro?

From the maker's store (coolwallet.io). Resellers: Retailer list on coolwallet.io. As of Nov 5, 2026 it still lists CryptoBilis in Indonesia, Malaysia and the Philippines with no warning, after Ledger, Trezor and OneKey cut CryptoBilis off over implanted devices. On arrival, run the genuine-device check and reject any device that already has a PIN or recovery phrase set.

## Other hardware wallets, scored
[OneKey Pro: 94%](https://tradingagentstack.com/custody/onekey/)[BitBox02 Nova: 89%](https://tradingagentstack.com/custody/bitbox/)[Blockstream Jade Plus: 79%](https://tradingagentstack.com/custody/blockstream-jade/)[Trezor Safe 5: 78%](https://tradingagentstack.com/custody/trezor/)[Foundation Passport Prime: 66%](https://tradingagentstack.com/custody/foundation-passport/)[Tangem Wallet: 66%](https://tradingagentstack.com/custody/tangem/)[Keystone 3 Pro: 54%](https://tradingagentstack.com/custody/keystone/)[Coldcard Q: 49%](https://tradingagentstack.com/custody/coldcard/)[Ledger Flex: 49%](https://tradingagentstack.com/custody/ledger/)

[All hardware wallets, scored](https://tradingagentstack.com/custody/) · [Is this seller authorized?](https://tradingagentstack.com/custody/#reseller-check) · [How we score](https://tradingagentstack.com/custody/#method)

Disclosure: some links on this page are affiliate links; we may earn a commission at no cost to you. It never affects rankings or facts. [Read our disclosure](https://tradingagentstack.com/disclosure/)

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)