Security & transparency
Security resources and reporting.
Current COLDCARD security guidance lives on coldcard.com. This page links there and keeps Coinkite’s disclosure, reporting, and customer-data records together.
Current COLDCARD guidance lives on coldcard.com.
Use the COLDCARD Security Status page for current firmware, migration guidance, verification resources, and incident updates.
Coinkite records
Company-level disclosures, private reporting instructions, and customer-data notices.
Security disclosure history
Review coordinated disclosures, professional reviews, internal findings, remediation details, and published advisories affecting COLDCARD.
Review disclosure history Report privatelyResponsible-disclosure process
Read the reporting requirements, eligibility rules, coordination process, and instructions for encrypted contact with Coinkite.
Report a security issue Customer-data noticeUpdate on customer data retention
Read the current notice concerning Coinkite’s data-handling and retention practices following the July 2026 security incident.
Read the noticeFound a security issue? Do not publish sensitive findings. Follow the responsible-disclosure process and contact security@coinkite.com.