A hardware wallet protects your private keys by keeping them separate from your phone or computer. But there's another challenge: How can you be sure the transaction you're about to sign actually does what you expect? Interacting with smart contracts, DeFi protocols, and tokens can involve
Crypto Security
Researchers uncovered 16 malicious Firefox wallet extensions designed to capture recovery phrases and private keys. Here's how the scam worked and how to protect your wallet.
Product Update
ERA hardware wallet owners can now pair their device with the new ERA Software Wallet app - built-in ERA Lens protection, Bitcoin multisig, 2FA, and a full independent audit by Cure53. Here's everything that's new.
Bitcoin
How did ~4,000 BTC leave Liquid Network? A clear breakdown of the Elements vulnerability, L-BTC peg-out and what happened to the 11-of-15 multisig.
10 months of ERA Wallet development The last ERA Wallet recap we published was in October 2025. Since then, ERA Wallet has gained new features, integrations, networks, and security tools. But most importantly, the wallet has continued to evolve as users' needs become more complex. From simpler use cases
TL;DR: Nearly every hardware wallet answers "is your randomness good?" by naming a certified chip. A certificate describes silicon in a lab, not the wallet on your desk, and the Coldcard failure happened entirely in the gap between the two. So we put our own shipping device
Evaluating Two Hardware True-Random Sources in an Air-Gapped Wallet A NIST SP 800-90B / SP 800-22 / AIS-31 / PractRand assessment of the STM32H753 RNG and ATECC608C secure element, with cold-boot restart forensics Motivated by the July 2026 Coldcard incident. The ERA hardware wallet has two independent
TL;DR: Weak randomness just cost Coldcard users $89M, silently. ERA builds your seed from up to five independent sources: two verified hardware generators (an STM32 TRNG and a NIST-certified secure element) always, plus your camera, your hand motion, and your touch if you choose the expert flow. Every
Coinspect published something unusual in July: a public tool that lets anyone check whether their own wallet is already compromised. The firm calls the underlying flaw Ill Bloom. As of June 30, its dataset held 2,114 exposed addresses across Bitcoin, Ethereum, Tron, Rootstock, and Polygon, and that figure only
Every hardware wallet requires you to trust something. * Trust that no one modified the firmware during manufacturing. * Trust that your private keys were generated correctly. * Trust that the "clear signing" screen is actually showing what you are about to approve. * Trust that the connection to your phone is
Hardware Wallet Security
What does EAL6+ really mean for hardware wallet security? Explore what certification covers, its limitations, and what's changing in 2026.
