Transform any USB drive into disposable cold storage.
Keys exist in RAM only during signing.
Open Source • CLI-First • No Proprietary Hardware
Follow our journey
A fundamentally different approach to cold storage that minimizes trust assumptions
Private keys are decrypted only in volatile memory for the brief moment required to sign. Once complete, keys are immediately erased. No persistent exposure.
Use any standard USB drive. No serial numbers, no proprietary chips, no manufacturing fingerprints. Rotate, destroy, or replace drives at minimal cost.
Built for developers and operators. Scriptable, automation-friendly, and CI/CD ready. Sign transactions headlessly in air-gapped environments.
Fully inspectable and verifiable codebase. Deterministic builds. Audit the code, reproduce builds, and adapt to your requirements.
Industry-standard encryption for all stored key material. Keys never exist in plaintext on any storage medium.
No proprietary secure elements, no firmware approval processes, no components that must be trusted indefinitely.
A different trust model from traditional hardware wallets
| Attribute | Coldstar | Unruggable | Ledger |
|---|---|---|---|
| Cold Storage Model | Disposable USB + RAM-only signing | Dedicated hardware with persistent keys | Proprietary hardware with secure element |
| Key Lifetime | Decrypted briefly in RAM only | Persists on device for lifetime | Persists in secure element for lifetime |
| Hardware Dependency | Any USB drive (disposable) | Custom hardware required | Proprietary hardware required |
| Supply Chain Risk | Minimal (user-supplied USB) | Manufacturing dependency | Vendor supply-chain risk |
| Automation Support | ✓ CLI-first, scriptable | Limited automation | Limited automation |
| Open Source | ✓ Fully verifiable | ✓ Open firmware | ✗ Proprietary |
| Target Users | Developers, traders, operators | Security-focused DIY users | Retail consumers |
Initialize, sign, and manage your cold wallet from the terminal
# Initialize a new cold wallet on USB
coldstar init /media/usb
# Sign a transaction (keys decrypted in RAM only)
coldstar sign --tx transaction.json
# Stake SOL with cold signing
coldstar stake --amount 100 --validator <pubkey>
# Export public key (safe, no secrets exposed)
coldstar pubkey
Secure signing for all Solana assets under one unified security model
Transfers and staking operations
USDC, USDT, and other stables
PAXG and commodity-backed tokens
xStocks and equity instruments
Delegate and manage stake positions
Any Solana program instruction
Works with leading Solana protocols and infrastructure
First batch shipping March 2025
Limited to 1,000 units • Superteam members get priority
From software to hardware ecosystem
Coldstar CLI available on GitHub. Use any USB drive.
First batch of ready-to-use Coldstar USB drives ship to waitlist.
Build-your-own kits for users who trust products they assemble themselves.
Optional mobile/desktop app for transaction building and broadcasting.
Coldstar is open source and free to use. Audit the code, run it yourself, and own your security.
Get Started on GitHub