XColdPro: Air-Gapped Cold Wallet Software
Last updated: October 15, 2026
On this page
Overview
XColdPro is live. Stable V1.0 is available for Windows and macOS. It is our software-first and hardware-agnostic air-gapped cold wallet software: it turns a computer you already own into an isolated cold-storage environment and requires no proprietary hardware. It is not a hardware wallet. The official source for product information is xcoldpro.com; purchases are handled in the official XColdPro Shop. Check the shop for current prices and availability.
Key facts from xcoldpro.com:
- Wallet material is encrypted with AES-256-GCM.
- 22 blockchain networks, plus custom ERC-20 and SPL tokens.
- Windows and macOS are supported today; a Linux build is announced as coming and is not yet available.
- Seeds use the standard BIP39 format and stay portable (see below).
Editions
All editions share the same air-gapped BootVault foundation. They differ in which security protocols and recovery models are unlocked (compare editions).
| Edition | What it adds |
|---|---|
| Frost | Essential air-gapped cold storage with AES-256-GCM across all 22 supported networks |
| HellBound | Everything in Frost plus advanced operational security: XBurnPro, Omega and Lazarus |
| Nyxor | The complete stack: everything in HellBound plus SeedVault (Shamir recovery), Citadel (M-of-N multisig approval) and BlackHole (Blackhole Singularity, duress protection) |
| BTC Edition | Bitcoin-only build with consensus-enforced P2WSH multisig. Announced, not yet on sale |
Nyxor carries six protocols in total: XBurnPro, Omega, Lazarus, SeedVault, Citadel and Blackhole Singularity. Decoy Wallets ship in every edition. ColdGuardian USB units, supplied with BootVault preinstalled, are available for people who prefer ready-to-run hardware; the product itself does not depend on them.
Security protocols
| Protocol | Purpose | Edition |
|---|---|---|
| EMBO | Instant panic hotkey that wipes sensitive data from memory | Product feature (see the FAQ) |
| XBurnPro | Temporary burner wallets with a claim window and automatic refund | HellBound and Nyxor |
| Omega | Emergency evacuation to pre-designated wallets, with wipe of the working device | HellBound and Nyxor |
| Lazarus | Dead man's switch for inheritance and beneficiary access | HellBound and Nyxor |
| SeedVault | Shamir secret sharing of the seed into recovery shares | Nyxor |
| Citadel | Air-gapped M-of-N multisig approval on all 22 networks | Nyxor |
| BlackHole | Duress protection layer (see below) | Nyxor |
Our security rests on encryption, air-gap isolation and the protocols above.
Duress protection: BlackHole
BlackHole (also "Blackhole Singularity", Void Lock Security Engine) is an advanced duress-protection layer and is part of the Nyxor edition. See the BlackHole protocol.
- It transforms the seed you back up, so the backed-up material alone does not open the wallet in any other software.
- Access needs the protected material you keep, credentials that exist only in your head, and licensed XColdPro software to reverse the layer.
- It is opt-in and trades portability for resistance to coercion: a protected seed is not a phrase you can type into another wallet, and recovery runs through XColdPro.
- Operational details are provided to licensed users only and are not published.
Decoy Wallets are a separate feature that ships in every edition: they give you something credible to open under coercion while real holdings stay concealed (FAQ). The duress layer is part of Nyxor only; it is not available in Frost or HellBound.
How signing stays offline
Transactions are built on an online device, taken to the air-gapped environment, signed there and carried back as signed data. Private keys never reach a networked machine (overview). Air-gap isolation means severing WiFi, Bluetooth and Ethernet; only unsigned and signed transaction data crosses the boundary (security architecture).
Seed portability
Wallets use standard BIP39 seeds, so a seed created in XColdPro can be restored in any compatible wallet without this software. The exception is a seed protected with BlackHole, which is deliberately not portable.
Limits
As we explain on xcoldpro.com, software-first cold storage does not defend a device that was already compromised before the wallet was created, and anyone holding the seed can spend outside XColdPro. Cold storage is a set of controls, not an absolute.
Seed generation
As we explain on our blog, XColdPro takes randomness from the operating system's cryptographically secure generator with no hidden fallback, and generation fails if secure entropy is unavailable.
Getting XColdPro
Start at xcoldpro.com and buy through the XColdPro Shop. Holders of an Honor DOT can verify by wallet signature for a discount; see The Forge of Destiny.