Wallets / Learning profile

Hardware walletsProtecting a key is only part of the story.

A hardware wallet keeps signing operations on a dedicated device. Investigating a loss still requires separating key generation, device custody, the displayed request and the transaction that reached the chain.

Reviewed 14 October 2026 · Original Forensia guide

Reading history stays in this browser. Manage it in My Explore.

01
A request reaches the device
02
The device signs with its key
03
The signed request is submitted

The investigation question

What can the transaction prove about the signing process?

Use the Coldcard film to distinguish an observed Bitcoin spend from a reported explanation of how a key became vulnerable. Preserve device evidence separately when available.

What this guide does not establish

Blockchain records alone cannot identify a compromised device or prove how a private key was obtained.

Check native product coverage ↗

Learn the investigation method ↗

What can the transaction prove about the signing process?

Put the idea in context

Contact us