In short: We are listing Coldcard Mk5 and Coldcard Q again. The devices ship with the firmware that the manufacturer Coinkite classified as flawed in summer 2026. Before you generate a seed, you must update the firmware. We mark every device with a warning sticker, and both models are a flat 11 % cheaper.
Why we are bringing Coldcard back
After Coinkite's security advisory at the end of July, we removed all Coldcard products from the shop. For us it was not acceptable to sell devices whose seed generation the manufacturer itself had called insecure. We summarised what happened back then in our article on the Coldcard security flaw.
Since then we have received numerous requests asking whether and when Coldcard would be available from us again. Many of you have assessed the situation yourselves and want to keep using the device, because according to Coinkite the flaw is in the firmware, not in the hardware. Coinkite has since released corrected firmware for all models. With current firmware, the device requires additional entropy of your own for every new seed, for example from dice rolls or key presses.
That is why we are relisting the devices we delisted in the summer as supposedly defective. Not quietly, though, but with clear labelling and one condition you should know about.
What you need to know before first use
Our stock comes from deliveries made before the incident. The devices therefore still have the firmware installed that Coinkite says is affected. As long as you do not generate a seed, that is not a problem: The flaw is in the seed generation, not in an existing device. What matters is the order of steps.
- Unbox the device, update the firmware. First to the corrected version, then continue.
- Check the version number on the device. Mk5: 5.6.1 or newer. Q: 1.5.1Q or newer. Coinkite maintains the current version matrix on its Security Status page.
- Only now generate a new seed. Ideally with your own dice, as described in our article Roll your own Bitcoin seed.
Coinkite explains how the update works in its official firmware upgrade guide. You will find the firmware files on Coinkite's download page. After the upgrade, verify the signature and the version number directly on the device display.
Sticker on every device: Every Coldcard that leaves our warehouse carries a clearly visible sticker reading "Update the firmware before your first seed" together with a link to these instructions. The sticker sits on the packaging, not on the device, and does not affect the tamper seal.
If you already own a Coldcard
For a device you already use, the situation is different: A firmware update does not repair a weak seed that has already been generated. Whether your seed is affected and how to migrate safely is explained in Coinkite's migration guide and in our article on the incident.
11 % cheaper: Coldcard Mk5 and Q
The extra step before first use is effort you do not have with other devices. To make up for it, we have lowered the price of Coldcard Mk5 and Coldcard Q by a flat 11 %. The reduced price is shown directly on the product and applies to the entire stock with the warning sticker.