XColdPro Frequently Asked Questions

Answers about air-gapped setup, supported networks, encryption, multisig, recovery, and hardware.

How do I set up XColdPro?

XColdPro offers flexible deployment options. For the highest-isolation setup, download BootVault and deploy it on any air-gapped device. Alternatively, you can run our professional desktop application for secure daily operations with AES-256 encryption.

What hardware do I need?

No proprietary hardware is required. You can use any standard 64-bit computer (Windows, macOS, Linux) and optionally a USB drive or external storage device (8GB+ recommended). We advocate a "Bring Your Own Device" model to eliminate the supply chain attacks and shipping risks associated with specialized hardware wallets.

Why is air-gapped storage superior?

Air-gapping creates an extremely effective physical barrier between your assets and online threats. By physically severing all network connections (WiFi, Bluetooth, Ethernet), remote hackers cannot reach your private keys, effectively reducing your remote attack surface to near-zero.

How does XColdPro implement air-gapping?

Your keys never touch the internet. Transactions are constructed on an online device, transferred via QR code or offline media to your air-gapped XColdPro environment for signing, and the signed data is passed back. This keeps your private keys inside a tightly isolated cold-storage environment.

Which assets can I store?

XColdPro is multi-chain native, supporting 22 major networks including Bitcoin, Ethereum, Solana, Polkadot, and Cardano. Our engine also supports unlimited custom tokens across 8 EVM chains (ERC-20) and Solana (SPL), allowing you to secure your entire diverse portfolio in one vault.

Are new networks added?

Yes. Our development team continuously integrates new major networks. Updates are delivered through verified software patches, ensuring your cold storage capabilities grow with the ecosystem.

What level of encryption is used?

We utilize AES-256-GCM encryption, as specified in NIST FIPS 197 (the U.S. Federal Information Processing Standard). With 2^256 possible key combinations, brute-force attacks are computationally infeasible with current cryptanalytic methods, providing long-term cryptographic protection for your holdings.

How is my data protected in memory?

Decrypted key material exists in memory only while your wallet is unlocked. On lock, on exit, and when EMBO is triggered, XColdPro drops every reference to that material and terminates the process, which returns the memory to the operating system. Key material is never written to disk in readable form and never transmitted.

What password generation options are available?

Four options: Strong Password, BIP39 Password, BIP39 MAX LEVEL, and Custom. We recommend BIP39 because it is battle-tested, easier to back up, and more memorable without sacrificing serious entropy.

What deployment options are available?

Three modes are available: Daily Computer Mode, Air-Gapped Mode, and Hybrid Mode. Each is designed for a different balance of convenience and operational isolation.

How does Hardware Binding work?

XColdPro cryptographically binds encrypted keys to a specific device using unique hardware identifiers. Even if attackers copy your encrypted vault files, they cannot decrypt them without the authorized device.

Is this safer than a hardware wallet?

We believe so. Traditional hardware wallets introduce supply chain risk, blind-signing exposure, and dependence on closed firmware. XColdPro runs on hardware you control and keeps the security model visible and operationally flexible.

What about physical seizure?

Hardware dongles can be confiscated. XColdPro supports separated storage and distributed backups, so the loss of one physical device does not automatically mean the loss of funds.

What is EMBO (Emergency Button)?

EMBO is the instant panic hotkey. It wipes sensitive data from memory and can trigger additional emergency responses for high-pressure scenarios.

What is the Omega Protocol?

Omega is the advanced panic button system with evacuation-and-burn or wipe-only modes, designed for serious duress scenarios.

What is BlackHole?

BlackHole is an advanced duress-protection layer included in Nyxor. Under forced disclosure, what an attacker obtains does not lead to your assets. Operational details are provided to licensed users only.

What are Decoy Wallets?

A Decoy Wallet gives you something credible to open under coercion while your real holdings stay concealed. What you surrender looks complete and reveals nothing about what else exists. Decoy Wallets ship in every edition. Operational details are provided to licensed users only.

Does XColdPro support multisig?

Yes, and there are two routes. The Citadel Protocol gives you air-gapped M-of-N approval on all 22 supported networks, with no online coordination at any point. The Bitcoin-only BTC Edition additionally offers a P2WSH multisig vault where the threshold is held in the Bitcoin script itself.

What enforces the M-of-N threshold in Citadel?

XColdPro does, on your own devices. Each approval is a signature over a digest of the exact transaction, made with a per-device identity key, and finalising verifies every signature rather than counting them — so altering the recipient, the amount or the threshold invalidates the approvals already collected. The chain itself sees an ordinary transaction, which is exactly what allows the same workflow to run on networks that have no native multisig. Anyone holding the seed can still spend outside XColdPro, so treat Citadel as governance over how funds move, not as a custody-level lock.

Is the BTC Edition multisig enforced by Bitcoin itself?

Yes. The BTC Edition builds a wsh(sortedmulti(...)) P2WSH vault with BIP48 cosigner key export, BIP67 key ordering and the full BIP174 PSBT cycle, so Bitcoin consensus rejects an under-signed spend. The vault imports into Sparrow or Bitcoin Core from its output descriptor and derives the same addresses with XColdPro absent. The BTC Edition is not yet on sale.

Who is Citadel for?

Citadel is designed for treasuries, DAOs, family offices, and partnerships that need professional-grade governance without hot-wallet tradeoffs.

What are XBurn Burner Wallets?

XBurn creates temporary burner wallets for privacy-sensitive transfers. You define a 6-72 hour claim window; if the recipient claims, the burner is destroyed, and if not, funds automatically refund to your main wallet before the mnemonic is permanently erased.

Does XBurn support automatic refunds?

Yes. XBurn is designed as a time-bound burner-wallet flow. If the transfer is never claimed within the configured window, funds return automatically to the originating wallet and the burner mnemonic is deleted as part of the burn/refund lifecycle.

Do I need separate tax software?

No. XColdPro includes a built-in tax and accounting suite for cost-basis tracking, gain-loss analysis, and accountant-ready exports, all processed locally.

What hardware is inside the ColdGuardian devices?

Each ColdGuardian ships with a 128 GB SATA III SSD delivering sequential read speeds up to 550 MB/s and write speeds up to 480 MB/s, powered by a Silicon Motion SM2259XT controller with dedicated DRAM cache for consistent performance. The drive uses 3D TLC NAND flash, is rated for 60 TB total bytes written and 1,500,000 hours MTBF, and supports TRIM, S.M.A.R.T. monitoring, and hardware ECC error correction. The 2.5-inch 7 mm form factor with SATA III 6 Gb/s interface (backward-compatible with SATA II) fits any standard laptop or desktop.

Are ColdGuardians pre-configured?

Yes. Every ColdGuardian arrives pre-loaded with a security-hardened operating environment and XColdPro BootVault, sealed with tamper-evident packaging and authenticated via Certificate of Authenticity. You plug it in, boot, and you are immediately in a fully air-gapped cold-storage deployment — no setup, no downloads, no exposure.

Why use a ColdGuardian instead of my own device?

A ColdGuardian eliminates setup risk. The operating system is stripped to essentials, hardened against common attack surfaces, and validated before shipping. You get a purpose-built air-gapped environment without needing to source compatible hardware, configure a clean OS, or verify your supply chain yourself.

What is the Lazarus Protocol?

Lazarus is an automated dead-man-switch mechanism intended to support inheritance and beneficiary access workflows if you fail to check in over time.

What is SeedVault (Shamir)?

SeedVault uses Shamir Secret Sharing to split the master seed into multiple recovery shards so no single paper backup becomes a critical single point of failure.

Can I manage multiple blockchains?

Yes. XColdPro manages wallets across 22 supported networks from a single installation while keeping keys cryptographically isolated by chain.

Can I customize the interface?

Yes. XColdPro supports multiple professional themes, a custom builder, and a broad language set for different operator preferences.

Is the Klingon language support real?

Yes. XColdPro includes a real Klingon localization effort with authentic pIqaD rendering and review aligned with Klingon Language Institute standards.

What are the system requirements?

XColdPro works on Windows 10 or later, macOS Big Sur or later, and most mainstream Linux distributions with a 64-bit processor and at least 4GB of RAM.

Which platforms does XColdPro Stable V1.0 support?

XColdPro Stable V1.0 is available for Windows and macOS. Linux support is in active development and will be delivered as a free update. All purchases include lifetime platform updates, so you will receive Linux support automatically when it becomes available.