Use gentoo and harden the shit out of it using grsecurity and selinux.

But for simplicity I'd recommend an external (usb connected) hard disk with some linux os installed on it. Only use it to manage your wallet. Especially no webbrowsing. And NEVER let a running system access the disk, always boot directly from it.