Before You Buy a Hardware Wallet: 5 Security Decisions That Actually Matter
From seed generation to transaction signing, discover five security questions worth asking before choosing a hardware wallet.
Latest
Keplr Wallet Incident: Who Really Controls Your Private Keys?
The Keplr and Web3Auth incident exposed risks in social-login wallets. Learn who controls your private keys and what it means for self-custody.
3 Hardware Wallet Security Features That Actually Matter in 2026
Three real-world security incidents reveal why seed backup design, strong entropy, and readable transaction signing matter in 2026.
Your Hardware Wallet Can Do More Than Protect Crypto
Your hardware wallet can do more than protect crypto. Discover how ERA Wallet also works as an offline 2FA authenticator for everyday accounts.
Your Own Server Doesn't Guarantee Crypto Security: The BTCPay Server Lesson
Owning your crypto payment server doesn't necessarily protect your keys. Here's what the BTCPay Server incident teaches us about self-custody.
Binance Hack 2026: What Happened to $6.3 Billion, and Are User Funds Safe?
What happened in the $6.3 billion Binance security incident? Explore the suspected attack mechanism, frozen assets, and implications for crypto holders.
A Fake Phantom Wallet Had 546 Reviews. Would You Have Trusted It?
A fake Phantom extension had 546 reviews. Here's how wallet impersonation works and why verifying both your app and hardware matters.
Are Telegram Trading Bots Safe? What the Bloom Trading Hack Reveals
Can a trading bot put your crypto at risk without exposing your private key? The Bloom Trading hack reveals why signing control matters.
Custodial vs. Non-Custodial Wallets: Who Really Controls Your Crypto?
Your exchange balance shows how much crypto you have. But who actually controls it? Discover how crypto custody works and why it matters.
What Is a Crypto Private Key? And Who Really Has Access to Yours?
One click creates a crypto wallet, but what happens behind the scenes? Learn how private keys, seed phrases, and public keys work, where your keys live, and why that matters for security.
AdFection: Targeted Ads Became a Zero-Click Infection Path
On October 15, Citizen Lab published a report on AdFection, a scheme in which a single targeted ad impression may have been enough to infect a device without any user click. The researchers link the infrastructure to Discover-Tech and to the delivery of Candiru spyware on Al Jazeera devices.
What Actually Happens When You Click "Swap"?
The invisible steps behind every crypto exchange - from DEX aggregators and cross-chain bridges to blind signing and transaction security. You press a single button. Within seconds, several different systems agree on exactly how your crypto assets should move. In most cases, you don't even notice this. And
How ERA Lens Works: Verify Crypto Transactions Before You Sign
A hardware wallet protects your private keys by keeping them separate from your phone or computer. But there's another challenge: How can you be sure the transaction you're about to sign actually does what you expect? Interacting with smart contracts, DeFi protocols, and tokens can involve
Crypto Security
Fake Crypto Wallet Extensions: How Seed Phrases Get Stolen
Researchers uncovered 16 malicious Firefox wallet extensions designed to capture recovery phrases and private keys. Here's how the scam worked and how to protect your wallet.
Product Update
ERA Just Got a Lot More Powerful
ERA hardware wallet owners can now pair their device with the new ERA Software Wallet app - built-in ERA Lens protection, Bitcoin multisig, 2FA, and a full independent audit by Cure53. Here's everything that's new.
Bitcoin
Liquid Network Hack: How $320M in Bitcoin Left the Reserve Without Compromised Keys
How did ~4,000 BTC leave Liquid Network? A clear breakdown of the Elements vulnerability, L-BTC peg-out and what happened to the 11-of-15 multisig.
ERA Wallet Recap: November 2025 - August 2026
10 months of ERA Wallet development The last ERA Wallet recap we published was in October 2025. Since then, ERA Wallet has gained new features, integrations, networks, and security tools. But most importantly, the wallet has continued to evolve as users' needs become more complex. From simpler use cases
Testing ERA's Randomness: What a Certificate Can't Tell You
TL;DR: Nearly every hardware wallet answers "is your randomness good?" by naming a certified chip. A certificate describes silicon in a lab, not the wallet on your desk, and the Coldcard failure happened entirely in the gap between the two. So we put our own shipping device
ERA TRNG Evaluation - Technical Report
Evaluating Two Hardware True-Random Sources in an Air-Gapped Wallet A NIST SP 800-90B / SP 800-22 / AIS-31 / PractRand assessment of the STM32H753 RNG and ATECC608C secure element, with cold-boot restart forensics Motivated by the July 2026 Coldcard incident. The ERA hardware wallet has two independent
Randomness You Don't Have to Trust: How ERA Generates Your Seed Phrase
TL;DR: Weak randomness just cost Coldcard users $89M, silently. ERA builds your seed from up to five independent sources: two verified hardware generators (an STM32 TRNG and a NIST-certified secure element) always, plus your camera, your hand motion, and your touch if you choose the expert flow. Every
Ill Bloom: How Bad Randomness Drained $5 Million From Crypto Wallets
Coinspect published something unusual in July: a public tool that lets anyone check whether their own wallet is already compromised. The firm calls the underlying flaw Ill Bloom. As of June 30, its dataset held 2,114 exposed addresses across Bitcoin, Ethereum, Tron, Rootstock, and Polygon, and that figure only
Hardware Wallet Security Explained: From Blind Signing to Supply Chain Verification
Every hardware wallet requires you to trust something. * Trust that no one modified the firmware during manufacturing. * Trust that your private keys were generated correctly. * Trust that the "clear signing" screen is actually showing what you are about to approve. * Trust that the connection to your phone is
Hardware Wallet Security
EAL6+ on a Hardware Wallet Box: What It Actually Means - and What It Doesn't
What does EAL6+ really mean for hardware wallet security? Explore what certification covers, its limitations, and what's changing in 2026.