Security & transparency
Security resources and reporting.
Current COLDCARD firmware, migration, and verification guidance is maintained on coldcard.com. Coinkite keeps its reporting process, customer-data notices, and dated disclosure record here.
For current COLDCARD guidance, use coldcard.com.
The COLDCARD Security Status page is the source for current firmware, migration guidance, verification resources, and incident updates.
Coinkite records
Company-level disclosures, private reporting instructions, and customer-data notices.
Dated disclosure history
Review the public record of COLDCARD research, findings, remediation, and advisories. For current action, use the COLDCARD Security Status page.
Review disclosure history Report privatelyResponsible-disclosure process
Read the reporting requirements, eligibility rules, coordination process, and instructions for encrypted contact with Coinkite.
Report a security issue Customer-data noticeUpdate on customer data retention
Read Coinkite’s current notice about customer-data handling and retention.
Read the noticeFound a security issue? Do not publish sensitive findings. Follow the responsible-disclosure process and contact security@coinkite.com.