The Lattice1 takes the opposite bet from Coldstar: a big touchscreen, Wi-Fi and Ethernet, and remote pairing so your desktop wallet can reach it over the network. It is built for active DeFi users who want to read every instruction. Coldstar is built for keys that should never be reachable at all.
Lattice1 for the DeFi desk; Coldstar for the reserve treasury and any agent that must operate under a hard policy.
| Coldstar | GridPlus Lattice1 | |
|---|---|---|
| Upfront cost | ~$10 — any USB drive. The software is free and MIT-licensed. | $397. |
| Where the key lives | AES-256-GCM encrypted keyfile on a drive you own. Plaintext exists only in memory-locked RAM for the ~100 µs it takes to sign, then is zeroized. | "Secure Computing Environment" with a PUF-based secure enclave; SafeCards also PUF-based. No EAL certification stated on GridPlus pages. |
| How a transaction reaches the key | Build online → QR (or file) to an offline machine → sign → QR back → broadcast. Fully air-gapped; the drive is storage, not a signer. | Over the network. Wi-Fi or Ethernet; requests arrive at the device's general computing environment. Cannot operate air-gapped. |
| Source code | Open source (MIT) — every line that touches the key is readable on GitHub. | SDK and SafeCard CLI are open. Device firmware is distributed as signed binaries; source not published. |
| What you trust | Code you can read, plus your own offline machine. No vendor silicon, firmware, cloud, or account. | GridPlus firmware and enclave design, the anti-tamper mesh, and the network path into the device. |
| Recovery | Passphrase + encrypted keyfile. The drive is disposable: lose it and the file is useless without the passphrase; re-flash a new one. | BIP39 seed viewable on device; backup and restore to PIN-protected SafeCards. No cloud recovery. |
| Automation & policy | CLI-first, scriptable, headless. Policy-gated agent signing: limits, allowlists, rate caps, escalation to air-gapped approval. | None. Docs state all signing requests must be approved on the device screen; no auto-sign or spending limits. |
| Solana wallets | Coldstar CLI and Seeker app. | Native Solana signing with three derivation paths; companion wallet NuFi; dApps such as Jupiter, Magic Eden, Tensor. |
| Maturity | Beta — independent audit planned before the production release. | Shipping product; firmware actively updated (v0.18.x improved Solana decoding). |
The Lattice1 is a very good device for a specific person: someone signing many complex transactions who wants to read them. It is not cold storage in the air-gap sense, and GridPlus does not claim it is.
The Lattice1 is designed around isolation inside the device: an always-online general computing environment receives requests, and a separate secure environment holds keys and signs only after you approve on screen. You are trusting that internal boundary and GridPlus's unpublished firmware to hold it.
Coldstar's isolation is physical. The offline machine has no radio and no cable to the internet; the only way in is a QR code you scan. The plaintext key exists for microseconds in locked RAM. There is no boundary inside a networked device to defend because there is no networked device.
GridPlus ships a mature product with a strong anti-tamper design. Coldstar is beta software awaiting an independent audit.
It is a design choice with a cost. GridPlus isolates keys inside the device, so a network attacker still needs you to approve on screen. Coldstar removes the network path entirely, which removes the class of attack rather than defending against it.
Coldstar shows the decoded transaction on the offline machine before you sign, in the terminal. The Lattice1's screen is nicer; the information is the same.
Neither is designed for an agent to drive directly, but Coldstar's policy engine lets an agent transact within limits using a session key while the cold root stays offline. The Lattice1 requires human approval on the device for every request.
Open source, MIT. macOS, Linux, Windows — and on the Solana Seeker dApp Store.
pip install coldstar
Third-party facts were checked against the vendor's own pages on the date above. Pricing and feature sets change; if something here is out of date, tell us and we will fix it.