Coldstar encrypts your private keys on any USB drive. When you sign a transaction, keys are decrypted in RAM for a split second, then erased. No special hardware. No vendor trust. Just open-source code you can audit.
Three steps. No special hardware required.
Generate or import a wallet. Private keys are encrypted with AES-256 and stored on any standard USB drive.
When you send a transaction, keys are decrypted in memory for a split second to sign, then immediately wiped.
The signed transaction is sent to the network. Your private key never touched the internet or any disk.
Clone, install, run. That's it.
# Clone and install
git clone https://github.com/devsyrem/coldstar
cd coldstar
pip install -r local_requirements.txt
# Launch
python coldstar.py
Requires Python 3.10+ and a USB drive. For air-gapped mode, see full docs.
COLDSTAR — Air-Gapped Cold Wallet
[+] USB detected: KINGSTON 32GB (/dev/disk4s1)
[+] Wallet loaded: 7xKp...9mFv
[+] Balance: 12.847 SOL ($2,441.08)
1. View Wallet / Balance
2. Send SOL (Create Unsigned Transaction)
3. Sign Transaction (Offline)
4. Broadcast Signed Transaction
5. Swap Tokens (Jupiter)
6. View Transaction History
7. Backup / Restore Wallet
▸ Select an option: █
Any USB drive works. No proprietary chips, no serial numbers. Rotate or destroy drives anytime.
Private keys are decrypted in RAM only during signing, then immediately wiped. Zero persistent exposure.
Audit every line. Rust crypto core + Python CLI. No trust required beyond code you can read.
CLI-first. Scriptable. Works in air-gapped environments. No GUI required.
| Coldstar | Ledger | Unruggable | |
|---|---|---|---|
| Hardware | Any USB drive | Proprietary device | Custom hardware |
| Key storage | Encrypted on USB, decrypted in RAM only | Persists in secure element | Persists on device |
| Supply chain risk | None (your USB) | Vendor dependency | Manufacturing |
| Open source | ✓ Fully | ✗ | ✓ |
| Price | Free + any USB | $79-149 | $40-80 |
Where Coldstar is and where it's going.
Free. Open source. No account required.