Cold storage & custody · Shamir-split hardware wallet

Coldstar vs Cypherock X1

Cypherock attacks a different problem than most wallets: the seed phrase itself. The X1 splits your key into five Shamir shares across a vault and four cards, so no single object holds it. Coldstar's answer to the same problem is that the key is never at rest in plaintext at all.

Last reviewed 2026-09-04 · Facts link to first-party sources below · Corrections welcome

Pick Cypherock X1 if

  • Your biggest fear is a seed phrase being found, photographed, or lost.
  • You want inheritance and physical 2-of-5 redundancy built into the product.
  • You want an EAL6+ card-based design with published firmware.

Pick Coldstar if

  • You want a true air gap. The X1 signs over USB-C to a desktop app.
  • You need scripting and policy-gated signing.
  • You want a fully MIT-licensed stack you can reuse commercially.

Use both when

X1 for the generational cold vault; Coldstar for the operational cold root that signs on a schedule or under an agent policy.

Side by side

ColdstarCypherock X1
Upfront cost~$10 — any USB drive. The software is free and MIT-licensed.X1 Standard and X1 Pro; prices render client-side on Cypherock's store and are not quoted here.
Where the key livesAES-256-GCM encrypted keyfile on a drive you own. Plaintext exists only in memory-locked RAM for the ~100 µs it takes to sign, then is zeroized.Split into five Shamir shares: the X1 Vault plus four NFC cards (EAL6+ secure elements). Signing needs the vault plus any one card. The vault never stores the complete key.
How a transaction reaches the keyBuild online → QR (or file) to an offline machine → sign → QR back → broadcast. Fully air-gapped; the drive is storage, not a signer.USB-C to the cySync desktop app; cards via NFC. Not air-gapped.
Source codeOpen source (MIT) — every line that touches the key is readable on GitHub.Firmware public under MIT plus Commons Clause (no commercial resale).
What you trustCode you can read, plus your own offline machine. No vendor silicon, firmware, cloud, or account.Published firmware, the card secure elements, and the connected desktop.
RecoveryPassphrase + encrypted keyfile. The drive is disposable: lose it and the file is useless without the passphrase; re-flash a new one.Any vault plus one of four cards. No seed phrase to write down by default; inheritance feature.
Automation & policyCLI-first, scriptable, headless. Policy-gated agent signing: limits, allowlists, rate caps, escalation to air-gapped approval.None.
Solana walletsColdstar CLI and Seeker app.cySync app; dApps via WalletConnect.
MaturityBeta — independent audit planned before the production release.Shipping product; audited by Keylabs per Cypherock.

Cypherock solves seed-phrase risk with physics; Coldstar solves it with cryptography. Both are legitimate. Only one of them is air-gapped and scriptable.

Where each one wins

Where Cypherock X1 wins

  • No seed phrase to protect. The 2-of-5 physical split is easy to reason about for a long-term holder.
  • Inheritance and redundancy designed in.
  • Certified card silicon guarding each share.

Where Coldstar wins

  • Air gap. Coldstar never connects the signing machine to a network; the X1 signs over USB to an online desktop.
  • Policy-gated automation for treasuries and agents.
  • Plain MIT licence with no commercial restriction.

What you are actually trusting

Cypherock's model is that the key exists only when reassembled inside the vault from shares that are otherwise kept apart. That is a strong defence against a single backup being compromised. The signing itself happens on a device connected over USB to a desktop app, so the transaction path is not air-gapped.

Coldstar's model is that the plaintext key exists only in RAM, on a machine with no network, for the microseconds it takes to sign. The single backup is an encrypted file plus a passphrase you keep in your head or a safe.

Cypherock is a shipping, audited product. Coldstar is beta and pre-audit.

Frequently asked questions

Doesn't splitting the key across cards beat a passphrase-protected file?

It beats a single paper backup. Against theft of the encrypted file, AES-256-GCM with a strong passphrase (and Argon2 key stretching) is not the weak link. Against loss, the X1's redundancy is genuinely convenient; Coldstar's answer is to keep more than one encrypted copy, which costs nothing.

Is the X1 air-gapped?

No. It connects over USB-C to the cySync desktop app for signing.

Which fits a treasury?

Coldstar, which supports multisig and unattended, policy-gated signing. The X1 is a personal vault.

Try Coldstar in two minutes

Open source, MIT. macOS, Linux, Windows — and on the Solana Seeker dApp Store.

pip install coldstar

Related comparisons

Sources

  1. Cypherock homepage (Shamir 5-way split, EAL6+ cards, Keylabs audit)
  2. Cypherock: Solana wallet page
  3. Cypherock X1 firmware licence (MIT + Commons Clause)

Third-party facts were checked against the vendor's own pages on the date above. Pricing and feature sets change; if something here is out of date, tell us and we will fix it.