Summary
- Air-gapped wallets remain completely offline, minimizing the risk of online attacks on private keys.
- The hardware wallet manufacturer Coldcard recently experienced a significant security breach, resulting in losses exceeding $114 million.
- While air-gapped wallets provide robust self-custody options, they are still vulnerable to certain risks. Here’s an overview.
In the cryptocurrency world, the adage "Not your keys, not your coins" emphasizes that control over a wallet's private keys equates to control over the cryptocurrency it holds.
An air-gapped wallet enhances this principle by ensuring that private keys are kept entirely separate from the internet. These wallets are marketed as the pinnacle of security for individual crypto holders, making the recent Coldcard exploit—resulting in losses of approximately $114 million in Bitcoin—particularly alarming for users.
Defining a Crypto Wallet
Despite their name, cryptocurrency wallets do not actually store Bitcoin, Ethereum, or other digital currencies. Instead, they maintain the public and private keys necessary for accessing and managing funds on a blockchain.
A public key functions similarly to an account number, allowing others to send cryptocurrency, while a private key acts like a password, authorizing transactions. Anyone who obtains the private key can control the associated assets.
Crypto wallets come in various forms, including paper wallets (printed or handwritten keys), software applications, mobile wallets, and hardware devices. They can be categorized into custodial and non-custodial wallets.
In custodial wallets, a third party manages your private keys, as seen with centralized exchanges like Coinbase. Non-custodial wallets, or self-custody wallets, grant users complete control and responsibility for their keys.
What Is an Air-Gapped Wallet?
An air-gapped wallet is a non-custodial wallet that remains fully disconnected from the internet and any wireless communication methods, such as Wi-Fi, Bluetooth, or NFC.
The term "air gap" signifies the physical separation from online networks. Since these devices do not connect to the internet, they are less susceptible to hackers, malware, and phishing attacks.
Manufacturers of Air-Gapped Wallets
Several companies have developed hardware wallets that operate without direct internet or wireless access.
Among the notable brands are ELLIPAL, which utilizes QR codes instead of USB or Bluetooth; Keystone, also QR code-based; Foundation Devices with its Bitcoin-centric Passport wallet; Blockstream, known for its Jade wallet that facilitates fully air-gapped Bitcoin transactions via QR codes; and Coldcard itself.
Coldcard is a wallet exclusively for Bitcoin that allows offline signing with microSD cards and optional QR codes. However, it has recently been the target of a firmware exploit, leading to significant thefts totaling over $100 million.
While Ledger and Trezor also manufacture hardware wallets, their products usually connect via USB or Bluetooth. In contrast, air-gapped wallets are specifically designed to keep private keys isolated. Nonetheless, they are not completely free from potential vulnerabilities. Security experts have emphasized that no option is ever 100% safe.
Are Air-Gapped Wallets More Secure?
By remaining offline, air-gapped wallets significantly lower the risk of remote attacks. Malware cannot access a wallet that is never online, and hackers have no network connections to exploit.
However, this does not render air-gapped wallets immune to all threats.
Users must still safeguard their recovery phrases, confirm transaction details prior to signing, and ensure the physical security of the device. Losing or having the recovery phrase stolen can permanently block access to the wallet. Furthermore, if someone gains physical access to the device, they might still be able to compromise it, depending on its security features.
There is also a tradeoff in terms of convenience. Transferring funds typically requires scanning QR codes or moving files between devices, which can be slower compared to standard software wallets or exchange accounts.
A Recent Reminder of Imperfections in Wallets
Recent incidents have illustrated that even air-gapped wallets can possess serious vulnerabilities.
In late July 2026, Coinkite, a maker of Bitcoin hardware wallets, revealed that a firmware error from March 2021 caused some Coldcard wallets to generate seed phrases from a significantly reduced pool of values than intended. This compromised the randomness of users' private keys, increasing their susceptibility to being guessed by attackers or AI.
This situation is as concerning as it sounds. If someone possesses your private key—whether due to inadequate security, a successful hack, a scam, or simply guessing correctly using AI or other software—they gain control over all funds tied to that address.
The hard lesson for security-aware crypto holders is that even though air-gapped wallets may not connect to the internet, users still depend on the hardware wallet manufacturer for their security. Human error remains a factor.
Galaxy Research reported that the Coldcard exploit unfolded in several phases, with losses escalating from approximately $88 million to nearly $114 million in Bitcoin within just days. This incident prompted many Coldcard users to transfer their Bitcoin after warnings about potentially vulnerable addresses.
This breach is particularly noteworthy because Coldcard, launched in 2017, has been regarded as one of the most secure Bitcoin hardware wallets available.
The event underscores that while keeping a wallet offline mitigates numerous online risks, it does not eliminate all threats. The security of a wallet also hinges on the quality of its hardware, firmware, random number generation, and software development practices. An air gap provides a crucial layer of defense, but it does not guarantee immunity from vulnerabilities.
Experts recommend diversifying holdings to avoid single points of failure, suggesting that users should not keep all their crypto assets in one location.