Cypherock attacks a different problem than most wallets: the seed phrase itself. The X1 splits your key into five Shamir shares across a vault and four cards, so no single object holds it. Coldstar's answer to the same problem is that the key is never at rest in plaintext at all.
X1 for the generational cold vault; Coldstar for the operational cold root that signs on a schedule or under an agent policy.
| Coldstar | Cypherock X1 | |
|---|---|---|
| Upfront cost | ~$10 — any USB drive. The software is free and MIT-licensed. | X1 Standard and X1 Pro; prices render client-side on Cypherock's store and are not quoted here. |
| Where the key lives | AES-256-GCM encrypted keyfile on a drive you own. Plaintext exists only in memory-locked RAM for the ~100 µs it takes to sign, then is zeroized. | Split into five Shamir shares: the X1 Vault plus four NFC cards (EAL6+ secure elements). Signing needs the vault plus any one card. The vault never stores the complete key. |
| How a transaction reaches the key | Build online → QR (or file) to an offline machine → sign → QR back → broadcast. Fully air-gapped; the drive is storage, not a signer. | USB-C to the cySync desktop app; cards via NFC. Not air-gapped. |
| Source code | Open source (MIT) — every line that touches the key is readable on GitHub. | Firmware public under MIT plus Commons Clause (no commercial resale). |
| What you trust | Code you can read, plus your own offline machine. No vendor silicon, firmware, cloud, or account. | Published firmware, the card secure elements, and the connected desktop. |
| Recovery | Passphrase + encrypted keyfile. The drive is disposable: lose it and the file is useless without the passphrase; re-flash a new one. | Any vault plus one of four cards. No seed phrase to write down by default; inheritance feature. |
| Automation & policy | CLI-first, scriptable, headless. Policy-gated agent signing: limits, allowlists, rate caps, escalation to air-gapped approval. | None. |
| Solana wallets | Coldstar CLI and Seeker app. | cySync app; dApps via WalletConnect. |
| Maturity | Beta — independent audit planned before the production release. | Shipping product; audited by Keylabs per Cypherock. |
Cypherock solves seed-phrase risk with physics; Coldstar solves it with cryptography. Both are legitimate. Only one of them is air-gapped and scriptable.
Cypherock's model is that the key exists only when reassembled inside the vault from shares that are otherwise kept apart. That is a strong defence against a single backup being compromised. The signing itself happens on a device connected over USB to a desktop app, so the transaction path is not air-gapped.
Coldstar's model is that the plaintext key exists only in RAM, on a machine with no network, for the microseconds it takes to sign. The single backup is an encrypted file plus a passphrase you keep in your head or a safe.
Cypherock is a shipping, audited product. Coldstar is beta and pre-audit.
It beats a single paper backup. Against theft of the encrypted file, AES-256-GCM with a strong passphrase (and Argon2 key stretching) is not the weak link. Against loss, the X1's redundancy is genuinely convenient; Coldstar's answer is to keep more than one encrypted copy, which costs nothing.
No. It connects over USB-C to the cySync desktop app for signing.
Coldstar, which supports multisig and unattended, policy-gated signing. The X1 is a personal vault.
Open source, MIT. macOS, Linux, Windows — and on the Solana Seeker dApp Store.
pip install coldstar
Third-party facts were checked against the vendor's own pages on the date above. Pricing and feature sets change; if something here is out of date, tell us and we will fix it.