Coldcard takes control of private keys to the furthest extreme the consumer market offers: an air-gapped device that can sign Bitcoin transactions without ever connecting to a computer or network. On-chain Bitcoin competition requires real Bitcoin transactions from addresses you control. The combination — air-gapped signing for on-chain competition — represents Bitcoin participation at the maximum security end of the spectrum. Bitok Arena reviewed Coldcard's PSBT workflow specifically in the context of on-chain transaction signing to determine whether the air-gap creates any friction that prevents participation or simply adds a step to the standard process.
Air-gapped signing means the private key never touches a device that has ever touched the internet. The transaction is built elsewhere, transferred by MicroSD card, signed in isolation, and returned to broadcast. The key stays completely offline throughout the process. For on-chain competition, this workflow applies to every entry — which adds minutes, not impossibility.
For Coldcard users who want to participate in daily on-chain competition, the signing process has one additional step compared to USB-connected wallets. That additional step does not prevent participation — it simply reflects how Coldcard manages the key. The on-chain result is identical: a transaction from an address you control, confirmed on the Bitcoin network.
What Makes Coldcard Different
Coldcard, made by Coinkite in Canada, is designed for the security-first segment of the Bitcoin self-custody market. It includes a secure element chip for key storage, a dedicated Bitcoin-only firmware with no altcoin support, a physical numeric keypad for PIN entry, and a MicroSD card slot for file transfer without USB connection. The air-gap workflow uses Partially Signed Bitcoin Transactions — PSBTs — which allow a transaction to be created on a watch-only wallet, transferred to Coldcard for signing, and then broadcast from a connected device without the signing key ever being exposed to an internet-connected environment.
Bitok Arena reviewed Coldcard's PSBT air-gap workflow to establish what the model means for users sending Bitcoin on-chain.
PSBT workflow — create unsigned transaction in Sparrow or Electrum (watch-only mode), export PSBT to MicroSD, sign on Coldcard, return signed PSBT via MicroSD, broadcast from the computer. No physical connection between device and network at any point.
Key isolation — the private key never leaves the Coldcard. The signed transaction is the only output. No key material touches the connected computer's memory.
Additional features — duress PIN opens a decoy wallet; brick-me PIN destroys the seed; tamper-evident packaging reveals pre-shipment access.
Workflow overhead: approximately 5 minutes per transaction. Closes the USB attack vector in exchange.
Coldcard also includes features specifically designed for high-security scenarios. For holders whose Bitcoin position justifies the additional security surface, Coldcard is the device that closes the remaining attack vector that USB-connected wallets leave open: the moment of physical connection between the signing device and a networked computer. That moment is eliminated entirely in the air-gap workflow.
Competition Entries From a Coldcard Address
For on-chain competition entries, the Coldcard PSBT workflow applies once per send: create a transaction in Sparrow or Electrum, export the PSBT to MicroSD, sign on Coldcard, return the signed file, and broadcast. The transaction confirms on the Bitcoin network. The address appears in the competition's on-chain record. Subsequent entries in the same round follow the same process.
Bitok Arena compared the transaction signing workflows of Coldcard (air-gapped) and standard USB-connected hardware wallets to establish what the practical difference is for on-chain competition use.
USB-connected hardware wallet — connect device, open wallet software, construct transaction, confirm on device screen, broadcast. Total time: 2–5 minutes.
Coldcard air-gapped signing — construct unsigned transaction in watch-only wallet, export PSBT to MicroSD, insert card in Coldcard, sign on device, remove card, import signed PSBT to wallet software, broadcast. Total time: 7–12 minutes.
Security difference — in the USB workflow, the signing device is physically connected to a networked computer during the signing operation. In the Coldcard workflow, the signing device is never connected to any networked device at any point.
The 5-7 minute additional time is the cost of eliminating the USB attack surface entirely. Coldcard users have already made this trade-off deliberately.
When a Coldcard-controlled address receives an incoming Bitcoin transaction — whether a competition prize, a remittance, or any other on-chain credit — the BTC arrives at the address and is visible in any watch-only wallet monitoring that address. To spend it, the same PSBT process applies: build the transaction, sign offline, broadcast. The air-gap is maintained from entry through receipt through future use.
Who This Workflow Fits
The Coldcard workflow is not faster than a USB-connected hardware wallet. It is not designed for users who want maximum convenience. It is designed for users who want maximum assurance that the private key controlling their Bitcoin has never been exposed to a networked device — and who are willing to trade additional minutes per transaction for that assurance.
The Coldcard workflow enforces a security principle physically: the key that can spend your Bitcoin is never in the same room as the internet, even for the duration of a single transaction signing. On-chain Bitcoin competition adds one more instance of that workflow per entry. For participants who already operate this way, the competition does not change the security model — it adds a daily use case for it.
Coldcard users already understand that security has a workflow cost and have decided that cost is worth paying. Competing in on-chain Bitcoin competition adds one more instance of that workflow per entry — and nothing more. The key remains offline. The transaction confirms on-chain. The address on the blockchain is controlled by the Coldcard's key, which has never touched a networked device. That provenance is verifiable by anyone reading the blockchain, which is the entire point of the Coldcard approach applied to on-chain activity.
Bitok Arena's review of the Coldcard PSBT workflow found that air-gapped signing adds approximately 5–7 minutes per transaction versus USB-connected hardware and eliminates the USB attack surface entirely. For on-chain competition, this trade-off is a deliberate choice: maximum key isolation in exchange for a longer signing workflow per entry.