{"license":"CC-BY-4.0","licenseUrl":"https://creativecommons.org/licenses/by/4.0/","attribution":"ChainChoice (https://chainchoice.io)","category":"hardware_wallet","evidenceReadAt":"2026-10-01","generatedAt":"2026-11-12","criteria":[{"id":"secure_element","label":"Secure element you can look up","weight":27},{"id":"reproducible_firmware","label":"Firmware anyone can rebuild and match","weight":27},{"id":"genuine_check","label":"Proof the device is genuine and unmodified","weight":12},{"id":"key_integrity","label":"Key creation and signing you can check","weight":12},{"id":"vendor_independence","label":"Sign and recover without the maker","weight":11},{"id":"fund_loss_record","label":"Years in buyers' hands without a device-level fund loss","weight":11}],"providers":{"trezor":{"secure_element":{"s":10,"q":"The CC certificate can be found at www.bsi.bund.de by searching for BSI-DSZ-CC-0961 (Hardware Identifier IFX_CCI_00000Bh) and referring to the latest CC certificate.","u":"https://www.infineon.com/assets/row/public/documents/30/49/infineon-optiga-trust-m-datasheet-en.pdf","d":"2026-10-01"},"reproducible_firmware":{"s":10,"q":"Trezor Safe 3 firmware v2.12.5, universal edition, builds reproducibly from its tagged repository","u":"https://njump.me/9d0713de894981defe1bb24ed34cc689e81bc4f4e9c97f742e17b0a0331758c4","d":"2026-10-01"},"genuine_check":{"s":7,"q":"The Secure Element signs the challenge and returns it with a unique device certificate.","u":"https://web.archive.org/web/20260603172247/https://blog.trezor.io/trezors-multi-layer-defense-against-supply-chain-attacks-54541f410389?gi=51ed378507e0","d":"2026-10-01"},"key_integrity":{"s":7,"q":"Entropy check runs automatically during wallet setup in Trezor Suite. It requires firmware 2.8.7 or later on Trezor Safe 3, Safe 5 and Model T, or 1.13.1 or later on Model One.","u":"https://trezor.io/learn/security-privacy/how-trezor-keeps-you-safe/entropy-check-how-trezor-suite-verifies-wallet-generation","d":"2026-10-01"},"vendor_independence":{"s":10,"q":"this command downloads and installs the selected firmware on the Trezor device, the device has to be in bootloader mode. Options: --help Show command description. -f or --filename This option lets the user set the file from which the firmware should be installed.","u":"https://trezor.io/guides/trezorctl/using-trezorctl-commands","d":"2026-10-01"},"fund_loss_record":{"s":7,"q":"\"availability\": \"InStock\",","u":"https://web.archive.org/web/20231127152703/https://trezor.io/trezor-safe-3","d":"2026-10-01"}},"bitbox":{"secure_element":{"s":5,"q":"A separate secure chip, the ATECC608B for the BitBox02 and Optiga Trust M V3 for the BitBox02 Nova, hardens access to your wallet in multiple ways.","u":"https://bitbox.swiss/bitbox02/security-features/","d":"2026-10-01"},"reproducible_firmware":{"s":10,"q":"BitBox02 firmware v9.27.1 (Multi edition) builds reproducibly from source.","u":"https://njump.me/c400db503397626a5e122a7a3eef16a4271df2208c44b8d4a3ea13de9beec42d","d":"2026-10-01"},"genuine_check":{"s":7,"q":"This challenge-response mechanism prevents supply chain and 'evil maid' attacks by validating a device-specific certificate signed at the factory.","u":"https://support.bitbox.swiss/en_US/blog-content/mitigate-supply-chain-attacks","d":"2026-10-01"},"key_integrity":{"s":10,"q":"Verifiable seed generation: when restoring from 24 recovery words, for the 24th word, show all 8 candidate words which result in a valid checksum.","u":"https://github.com/BitBoxSwiss/bitbox02-firmware/blob/master/CHANGELOG.md","d":"2026-10-01"},"vendor_independence":{"s":10,"q":"by running ./py/load_firmware.py after installing the bitbox02 Python package, e.g. ./py/load_firmware.py firmware-btc.v9.12.0.signed.bin.","u":"https://github.com/BitBoxSwiss/bitbox02-firmware","d":"2026-10-01"},"fund_loss_record":{"s":10,"q":"This is the first public release, which concludes the BitBox02 Beta program.","u":"https://github.com/BitBoxSwiss/bitbox02-firmware/releases/tag/firmware%2Fv4.1.0","d":"2026-10-01"}},"onekey":{"secure_element":{"s":10,"q":"content2:{name:\"OneKey Classic 1S Pure\",variantGid:i.skuList[0]?.shopifyGid,left:[{title:e(\"title__size_and_weight\"),content:[{title2:e(\"title__size\"),description:\"86 × 52 × 5.2 (mm)\"},{title2:e(\"title__weight\"),description:\"18.3…","u":"https://asset.onekey.so/portal/629b2cb0a738ae00e62d1d7449d33bba5470da5b/_next/static/chunks/3jw5q55q8hojx.js","d":"2026-10-01"},"reproducible_firmware":{"s":7,"q":"[\"status\",\"reproducible\"],[\"d\",\"onekey.classic.1s:3.19.0 - Stable:hardware:7fc72fa0271016bc3abdfe9bedb1ede1d61bc14a399a6e3bf7076bb50d83102b\"]","u":"https://njump.me/5ac2f62a2e2d94de1693f0bf5fcadd10a67888a219721bccb141fac90b98b26d","d":"2026-10-01"},"genuine_check":{"s":7,"q":"The OneKey software creates a random number and sends it to the hardware, which then sends the result to OneKey's Server, which confirms the authenticity of the certificate using the signature on the random number and the device's built-in digital certificate.","u":"https://help.onekey.so/en/articles/11461341-how-onekey-prevents-supply-chain-attacks","d":"2026-10-01"},"key_integrity":{"s":0,"q":"The devices combine multiple entropy sources, including hardware-based true random number generators (TRNGs) and environmental noise.","u":"https://help.onekey.so/en/articles/11461232-how-onekey-hardware-wallets-generate-seed-phrases-and-guarantee-randomness","d":"2026-10-01"},"vendor_independence":{"s":10,"q":"- OneKey (Classic 1S and Pro)","u":"https://raw.githubusercontent.com/sparrowwallet/lark/master/README.md","d":"2026-10-01"},"fund_loss_record":{"s":5,"q":"Introducing the all-new OneKey Classic 1S Pure – redefining the weight of security.","u":"https://cdn.syndication.twimg.com/tweet-result?id=1917563503629721681&token=4&lang=en","d":"2026-10-01"}},"keystone":{"secure_element":{"s":5,"q":"A part of this key is produced from the Microchip ATECC608B leveraging the KDF function. The second part is a random number stored on the Maxim DS28S60.","u":"https://blog.keyst.one/secure-elements-the-bedrock-of-hardware-wallet-security-1dd8cbdef461","d":"2026-10-01"},"reproducible_firmware":{"s":10,"q":"**Keystone 3 Pro firmware v3.0.4, Multi-coin/Web3 variant, is `reproducible`.**","u":"https://njump.me/f02d075fd1d10d33f1975b5671b595f97ed116ec9c95f8d407a314f9a5e191f8","d":"2026-10-01"},"genuine_check":{"s":5,"q":"A failed verification may indicate that the device firmware has been tampered with, the device is counterfeit, or there is a supply chain attack risk.","u":"https://keyst.one/authentication","d":"2026-10-01"},"key_integrity":{"s":7,"q":"For non-technical users with no coding background, can verify the result using the famous Ian Coleman web tool","u":"https://blog.keyst.one/how-to-verify-the-recovery-phrase-created-by-dice-rolling-af01c16b765e","d":"2026-10-01"},"vendor_independence":{"s":10,"q":"Click [Show QR] on Sparrow Wallet and show the unsigned transaction data in QR code format.","u":"https://guide.keyst.one/docs/sparrow","d":"2026-10-01"},"fund_loss_record":{"s":7,"q":"Keystone 3 Pro Regular price $129.00 Free shipping","u":"https://web.archive.org/web/20231201162943/https://shop.keyst.one/products/keystone-3-pro","d":"2026-10-01"}},"ledger":{"secure_element":{"s":10,"q":"\"STMicroelectronics ST33K1M5A and ST33K1M5M B04\",\"STMicroelectronics\",\"NL\",\"EAL6+,ALC_FLR.2\",\"SECURITY_IC_AUGP_V1.0\",\"08/06/2025\",\"08/06/2030\"","u":"https://www.commoncriteriaportal.org/products/certified_products.csv","d":"2026-10-01"},"reproducible_firmware":{"s":4,"q":"if (cx_ecdsa_sign_no_throw(&private_key,","u":"https://raw.githubusercontent.com/LedgerHQ/app-bitcoin/develop/src/crypto.c","d":"2026-10-01"},"genuine_check":{"s":7,"q":"The Ledger device’s secure element signs the challenge it receives using its private key. This signature is sent back to Ledger’s HSM along with the attestation (signed public key).","u":"https://donjon.ledger.com/threat-model/device-genuineness/","d":"2026-10-01"},"key_integrity":{"s":0,"q":"On Ledger signers, a True Random Number Generator is used for seed generation, ephemeral key generation and countermeasures.","u":"https://donjon.ledger.com/threat-model/os-random-number-generation/","d":"2026-10-01"},"vendor_independence":{"s":6,"q":"The secure connection is established between the connected device and Ledger HSM backend service via WebSocket. The following device actions will be executed with the secure connection. Genuine Check Device Action : Verifies the genuineness of the connected device.","u":"https://developers.ledger.com/docs/device-interaction/references/device-management-kit/secure-channel","d":"2026-10-01"},"fund_loss_record":{"s":8,"q":"In 2022, Ledger launched the Ledger Nano S Plus, the first device to support NFTs, which also featured a larger screen and larger memory—adapting to the ever growing industry so users could secure even more assets.","u":"https://www.ledger.com/academy/topics/ledgersolutions/ledger-hardware-devices-explained-the-10-year-evolution","d":"2026-10-01"}},"coldcard":{"secure_element":{"s":5,"q":"COLDCARD uses two Secure Elements, from different vendors, to protect your Bitcoin. Specifically, the COLDCARD uses Microchip's ATECC608 and Maxim's DS28C36B to store the critical master secret: the 24-word seed phrase for your BIP-39 wallet.","u":"https://coldcard.com/mk5","d":"2026-10-01"},"reproducible_firmware":{"s":10,"q":"Coldcard Mk5 firmware v5.6.2 builds reproducibly from source. After stripping the Coinkite signing signature from both the downloaded and independently built binaries, the unsigned firmware payloads produce identical SHA-256 hashes.","u":"https://njump.me/ed1a8aa6462b07c6d72e82d5039ba2edfbb4f93386522f6d882f33b5ef023d75","d":"2026-10-01"},"genuine_check":{"s":5,"q":"To resist Evil Maids, we sign our firmware with a factory key. During boot-up, the firmware's signature will be verified and the appropriate Green/Red light set.","u":"https://coldcard.com/mk5","d":"2026-10-01"},"key_integrity":{"s":7,"q":"Every new seed combines fresh device entropy with one required method: 65 key presses with unpredictable timing, 50 physical dice rolls, or 128 physical coin flips. Mk4/Mk5 5.6.2 adds View TRNG Words and offline verification of dice-roll or coin-flip mixing with verify_seed_mix.py","u":"https://coldcard.com/mk5","d":"2026-10-01"},"vendor_independence":{"s":10,"q":"The following hardware wallets (for all models, unless specified) are supported: - Coldcard - Trezor - Ledger - BitBox02 - Jade - Keepkey - OneKey (Classic 1S and Pro)","u":"https://raw.githubusercontent.com/sparrowwallet/lark/master/README.md","d":"2026-10-01"},"fund_loss_record":{"s":1,"q":"Seeds generated on Mk4, Q and Mk5 before the fixed firmware releases are also affected, with about 72 bits of entropy rather than the expected 128 bits.","u":"https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/","d":"2026-10-01"}},"tangem":{"secure_element":{"s":3,"q":"The vulnerability affects all Tangem cards currently in circulation and cannot be patched, as the cards have no firmware update mechanism.","u":"https://donjon.ledger.com/blog/bypassing-tangem-card-security-with-laser-attack/","d":"2026-10-01"},"reproducible_firmware":{"s":0,"q":"Tangem employs a \"security through obscurity\" approach. Revealing the source code would expose its hardware wallets to vulnerabilities.","u":"https://tangem.com/en/help-center/security/firmware-authenticity/","d":"2026-10-01"},"genuine_check":{"s":7,"q":"As previously mentioned, each Tangem card is provisioned with a unique key pair to verify its authenticity.","u":"https://www.ledger.com/tangem-genuine-check-bypass-on-android-application","d":"2026-10-01"},"key_integrity":{"s":0,"q":"When you create a wallet without a seed phrase, the private key is generated using a hardware random number generator on the wallet's chip. The entropy for the random number is taken from the chip's physical sensors.","u":"https://tangem.com/en/help-center/security/private-key-security/","d":"2026-10-01"},"vendor_independence":{"s":4,"q":"Seed phrases are generated during the wallet setup process. The app selects 12 (or 24) random words from a list of 2048 words based on the BIP39 seed-phrase standard.","u":"https://tangem.com/en/help-center/security/all-about-seed-phrases/","d":"2026-10-01"},"fund_loss_record":{"s":7,"q":"In September 2023, the new Tangem Wallet started shipping out to customers who preordered some.","u":"https://tangem.com/en/blog/post/digest-october-2023/","d":"2026-10-01"}},"gridplus":{"secure_element":{"s":3,"q":"The SE is actually a chip which has a PUF (you could say it's a physically encrypted flash memory) almost identical to the one used in the SafeCards (and in standard credit/debit cards as well).","u":"https://docs.gridplus.io/lattice1/security-features","d":"2026-10-01"},"reproducible_firmware":{"s":4,"q":"This repo contains the Javacard applet that runs on the GridPlus SafeCard. It is a fork of the Status KeyCard, with only a few notable changes.","u":"https://github.com/GridPlus/safe-card","d":"2026-10-01"},"genuine_check":{"s":7,"q":"Every Lattice1 has a unique ID key pair saved in the applet when it is initialized. The public key gets signed by the issuer (us - GridPlus) and that signature is saved in the applet - we call this signature the certificate.","u":"https://docs.gridplus.io/lattice1/lattice1-guides/how-to-verify-that-your-lattice1-is-authentic","d":"2026-10-01"},"key_integrity":{"s":0,"q":"The Lattices uses a TRNG (true random number generator) to ensure wallets generated on the device or SafeCards using the device offer the highest level of safety possible.","u":"https://docs.gridplus.io/lattice1/security-features","d":"2026-10-01"},"vendor_independence":{"s":6,"q":"This will open a new browser tab with the secure GridPlus Lattice Connector module (the domain needs to be https://lattice.gridplus.io).","u":"https://docs.gridplus.io/apps-and-integrations/metamask/connecting-to-metamask","d":"2026-10-01"},"fund_loss_record":{"s":10,"q":"AUSTIN, Texas, Dec. 7, 2020 /PRNewswire/ -- GridPlus, a manufacturer of secure hardware for cryptocurrency and blockchain applications, today launched retail sales for the Lattice1, a wireless hardware wallet that sets the new standard for security, utility, and ease of use.","u":"https://www.prnewswire.com/news-releases/gridplus-sets-a-new-standard-for-blockchain-security-with-the-release-of-the-enterprise-grade-lattice1-wireless-hardware-wallet-301186849.html","d":"2026-10-01"}},"safepal":{"secure_element":{"s":3,"q":"An independent security element is built in each S1 hardware device, and the purpose of the secure element is to solely protect the safety of private keys.","u":"https://safepalsupport.zendesk.com/hc/en-us/articles/360047261512","d":"2026-10-01"},"reproducible_firmware":{"s":3,"q":"#include \"coin/Bitcoin/bitcoin_sign.c\"","u":"https://raw.githubusercontent.com/SafePalWallet/safepal-s1/09ee73c626ba0f18b0e08d3cc6a596b5f8424bec/firmware/app/src/coin/Bitcoin/bitcoin_sign_view.c","d":"2026-10-01"},"genuine_check":{"s":5,"q":"Whenever an S1 hardware wallet is started, the multi-verification mechanism embedded in SafePal S1 will authenticate the complete program.","u":"https://safepalsupport.zendesk.com/hc/en-us/articles/360047261592-Firmware-Security","d":"2026-10-01"},"key_integrity":{"s":0,"q":"In our daily life, most cellphones or computers are using PRNG, while SafePal S1 is embedded with a TRNG. This is to ensure a new private key is generated on a secure basis when a user creates a new wallet on the device.","u":"https://safepalsupport.zendesk.com/hc/en-us/articles/360047261392-True-Random-Number-Generator","d":"2026-10-01"},"vendor_independence":{"s":4,"q":"your asset can still be recovered with the correct mnemonic phrase on any other BIP39/44 compatible wallet.(SafePal is using BIP39/44 standard)","u":"https://safepalsupport.zendesk.com/hc/en-us/articles/360053909672","d":"2026-10-01"},"fund_loss_record":{"s":10,"q":"SafePal S1 V1.0.9-10006 📆 Released Date: 2019/06/22","u":"https://safepalsupport.zendesk.com/hc/en-us/articles/360047263792-S1-Firmware-Upgrade-History","d":"2026-10-01"}},"coolwallet":{"secure_element":{"s":3,"q":"Equipped with a CC EAL 6+ secure element—your private key is generated and stored entirely offline.","u":"https://www.coolwallet.io/products/coolwallet-go","d":"2026-10-01"},"reproducible_firmware":{"s":4,"q":"`CardInfo` constructor updated to differentiate between Go Card and Pro Card.","u":"https://raw.githubusercontent.com/CoolBitX-Technology/coolwallet-pro-se/main/CHANGELOG.md","d":"2026-10-01"},"genuine_check":{"s":2,"q":"Please refer to the packaging contents as shown on the official website and ensure that the product you received has an authenticity label and is fully sealed.","u":"https://www.coolwallet.io/blogs/help-center/check-box-tampering","d":"2026-10-01"},"key_integrity":{"s":0,"q":"When you generate your recovery phrases using the CoolWallet Go card, the process takes place entirely within the card.","u":"https://www.coolwallet.io/blogs/help-center/should-i-generate-my-recovery-phrases-using-the-card-or-the-app","d":"2026-10-01"},"vendor_independence":{"s":4,"q":"Q7. Can I restore my CoolWallet Go wallet to another wallet app like MetaMask? Only if you manually recorded the recovery phrase during the initial setup.","u":"https://www.coolwallet.io/blogs/blog/coolwallet-go-backup","d":"2026-10-01"},"fund_loss_record":{"s":5,"q":"CoolWallet Go is now available on the official website","u":"https://www.coolwallet.io/blogs/blog/introducing-coolwallet-go","d":"2026-10-01"}},"jade":{"secure_element":{"s":4,"q":"The blind oracle model that Jade uses is fully open source, and is truly blind. It knows nothing about Jade wallet data, and doesn't even know the user's actual PIN. Users may use Blockstream's blind oracle to protect their wallet, or they may run their own.","u":"https://help.blockstream.com/blockstream-jade/faqs/why-doesnt-jade-have-a-secure-element","d":"2026-10-01"},"reproducible_firmware":{"s":10,"q":"Verdict: REPRODUCIBLE ✓ (jade1.0 ble/noradio, jade1.1 ble/noradio)","u":"https://njump.me/717234208bb7533864de733993316e86cfc8a2685221efcc88b3f235944fd404","d":"2026-10-01"},"genuine_check":{"s":0,"q":"The following feature is not available with Jade Classic.","u":"https://help.blockstream.com/blockstream-jade/set-up-transact-recover-your-wallet/perform-a-genuine-check-with-jade","d":"2026-10-01"},"key_integrity":{"s":10,"q":"supportsAntiExfilProtocol = DeviceSupportsAntiExfilProtocol.Optional","u":"https://raw.githubusercontent.com/Blockstream/green_android/8062ee10a546fe408987366616cd5c4823b7e03c/compose/src/commonMain/kotlin/com/blockstream/compose/managers/DeviceConnectionManager.kt","d":"2026-10-01"},"vendor_independence":{"s":10,"q":"By default, Jade will communicate with Blockstream's blind PIN oracle, however you also have the choice to run your own.","u":"https://help.blockstream.com/blockstream-jade/add-more-security-functionality/set-up-a-personal-blind-oracle","d":"2026-10-01"},"fund_loss_record":{"s":9,"q":"Blockstream Jade is now available for sale at store.blockstream.com.","u":"https://blockstream.com/press-releases/2021-01-03-secure-your-bitcoin-and-liquid-assets-with-the-new-blockstream-jade-hardware-wallet/","d":"2026-10-01"}},"cypherock":{"secure_element":{"s":3,"q":"For Cypherock, we simulated a supply‑chain attack, tampering with the firmware, bypassing secure boot and device authenticity verification, and ultimately gaining control over newly generated mnemonic phrases.","u":"https://www.darknavy.org/blog/how_and_why_we_hacked_cypherock_hardware_wallet_the_full_story/","d":"2026-10-01"},"reproducible_firmware":{"s":10,"q":"The firmware built from source is a byte-for-byte match against the official GitHub release binary.","u":"https://njump.me/2e32a3a133c66a5dbb0ec5124fbb3e7d2ee1bba2fc7c815841088193eb4438cd","d":"2026-10-01"},"genuine_check":{"s":7,"q":"The server verifies the signature with the public key of the corresponding serial number. If the signature is verified, the server sends a 32-byte Random challenge.","u":"https://github.com/Cypherock/x1_wallet_firmware/blob/main/docs/device_provision_auth.md","d":"2026-10-01"},"key_integrity":{"s":0,"q":"The secure element, alongside the MCU each generate 32 bytes (256 bits) of entropy which are then combined using the XOR method.","u":"https://docs.cypherock.com/getting-started/how-cypherock-generates-your-24-word-seed-phrase","d":"2026-10-01"},"vendor_independence":{"s":4,"q":"Cypherock X1 allows users to be able to view the seed phrase of any of the wallets that are currently being secured. Therefore, having the X1 Vault and any one of the X1 Cards in possession, a user can view the seed phrase and transfer assets to another Crypto wallet of their choosing, which is…","u":"https://www.cypherock.com/store/cypherock-x1-basic","d":"2026-10-01"},"fund_loss_record":{"s":8,"q":"Buy Cypherock today and get 6 months free concierge support","u":"https://web.archive.org/web/20221220033303id_/https://shop.cypherock.com/","d":"2026-10-01"}},"passport":{"secure_element":{"s":5,"q":"Seed protection requires three components: encrypted seed in ATECC608C, One-Time Pad in SECURAM, and PIN hash","u":"https://foundation.xyz/security/passport-prime-audit-response-2025.pdf","d":"2026-10-01"},"reproducible_firmware":{"s":10,"q":"MATCH COMPILED keyos/apps/gui-app-bitcoin/app.elf 87d8b405c6cc3c7793765b0cc4b2b24a5e91c9c847aeac59a94d0dbf74d6e19e [downloaded]","u":"https://njump.me/c8cd1ac80f028f25fecd6ce58a1e6da31f3263ef494f67feb3b2635dba00bf0e","d":"2026-10-01"},"genuine_check":{"s":7,"q":"During provisioning, a unique private key is stored inside Passport Prime's secure element, with the corresponding public key being stored on a Foundation database.","u":"https://docs.foundation.xyz/prime/manual-setup/","d":"2026-10-01"},"key_integrity":{"s":7,"q":"Enter the first 11 or 23 words of a BIP39 seed on Passport Prime and KeyOS will generate a valid final word to satisfy the checksum, making it much easier to import seed words you have chosen yourself","u":"https://github.com/Foundation-Devices/KeyOS/releases/tag/v1.3.1","d":"2026-10-01"},"vendor_independence":{"s":6,"q":"During this step, Passport Prime will automatically carry out a security check with the Foundation validation server, via Envoy, using QuantumLink.","u":"https://docs.foundation.xyz/prime/manual-setup/","d":"2026-10-01"},"fund_loss_record":{"s":5,"q":"Passport Prime began shipping to pre-order customers in March.","u":"https://foundation.xyz/blog/foundation-raises-6-4m-human-authority-hardware-launch","d":"2026-10-01"}},"keepkey":{"secure_element":{"s":0,"q":"KeepKey’s production design uses an STM32F205 general-purpose microcontroller rather than a dedicated secure element. The tradeoff includes physical-access risks.","u":"https://docs.keepkey.com/docs/security","d":"2026-10-01"},"reproducible_firmware":{"s":10,"q":"KeepKey v7.14.1 builds reproducibly from source.","u":"https://njump.me/d64e7063e729697d917eaec06e9c28e6e9a98fa684a215ca27f1a12f5ff58686","d":"2026-10-01"},"genuine_check":{"s":5,"q":"Official firmware is signed; a genuine KeepKey checks the signature and warns when firmware is not official — never continue past a warning you didn’t expect.","u":"https://docs.keepkey.com/docs/learn/staying-safe","d":"2026-10-01"},"key_integrity":{"s":4,"q":"At setup the device generates 32 bytes of internal entropy, receives entropy from the host, and mixes them: SHA-256(internal ‖ external) becomes the seed (lib/firmware/reset.c).","u":"https://docs.keepkey.com/docs/learn/seed-length","d":"2026-10-01"},"vendor_independence":{"s":10,"q":"The following hardware wallets (for all models, unless specified) are supported: - Coldcard - Trezor - Ledger - BitBox02 - Jade - Keepkey - OneKey (Classic 1S and Pro)","u":"https://raw.githubusercontent.com/sparrowwallet/lark/master/README.md","d":"2026-10-01"},"fund_loss_record":{"s":10,"q":"2015 was a memorable year for us at KeepKey. In July, we announced the KeepKey bitcoin hardware wallet. Two short months later we began shipping internationally.","u":"https://web.archive.org/web/20160410212348/https://www.keepkey.com/2015/12/31/thank-you-for-a-great-2015/","d":"2026-10-01"}},"bitbox02-nova":{"secure_element":{"s":10,"q":"Secure chip: OPTIGA™ Trust M V3","u":"https://bitbox.swiss/bitbox02/nova/","d":"2026-10-01"},"reproducible_firmware":{"s":10,"q":"BitBox02 Nova firmware v9.27.1 (Multi edition) builds reproducibly from source.","u":"https://njump.me/07cc00c5db2d12d50046e715930ee3d020156206c3d8896331c9447dea4cbd7d","d":"2026-10-01"},"genuine_check":{"s":7,"q":"Each BitBox is loaded with a secret attestation key during factory setup. This means the BitBoxApp or any wallet it connects to can check if the BitBox is a genuine device every time you use it.","u":"https://bitbox.swiss/bitbox02/security-features/","d":"2026-10-01"},"key_integrity":{"s":10,"q":"Verifiable seed generation: when restoring from 24 recovery words, for the 24th word, show all 8 candidate words which result in a valid checksum.","u":"https://raw.githubusercontent.com/BitBoxSwiss/bitbox02-firmware/firmware/v9.27.1/CHANGELOG.md","d":"2026-10-01"},"vendor_independence":{"s":10,"q":"BitBox02Edition.MULTI: \"bitbox02_nova_multi\",","u":"https://raw.githubusercontent.com/bitcoin-core/HWI/3.2.0/hwilib/devices/bitbox02.py","d":"2026-10-01"},"fund_loss_record":{"s":5,"q":"We have no reports of lost funds and have found no evidence that the vulnerability was exploited.","u":"https://blog.bitbox.swiss/en/bitbox-01-2026-marmorera-update/","d":"2026-10-01"}},"secux":{"secure_element":{"s":3,"q":"Infineon SLE Solid Flash CC EAL 5+","u":"https://secuxtech.com/products/secux-w10-series?country=US","d":"2026-10-01"},"reproducible_firmware":{"s":3,"q":"FIX: W10 dc pin determine for first battery check.","u":"https://github.com/secuxtech/SecuXMCU/commit/5dd2bd30a2b125104ffc70a643d3b409c17d9867","d":"2026-10-01"},"genuine_check":{"s":2,"q":"Make sure the Tamper-Resistant-Labels are intact, have not been broken, torn, or tampered with, both on the box and device’s USB port.","u":"https://secuxtech.com/community/how-it-works/w10/beginner-safety-guide-safety-and-security-information","d":"2026-10-01"},"key_integrity":{"s":0,"q":"When creating a new wallet, SecuX generates recovery phrases using a hardware True Random Number Generator (TRNG) that provides the full entropy required by the BIP-39 standard.","u":"https://secuxtech.com/blogs/blog/security-statement-regarding-the-recent-coldcard-vulnerability","d":"2026-10-01"},"vendor_independence":{"s":4,"q":"you can recover your wallet and restore access to your crypto assets with your 24 Recovery Words on any compatible BIP 32, BIP 39, and BIP44 standard software or hardware wallets.","u":"https://secuxtech.com/community/how-it-works/faqs/security-questions","d":"2026-10-01"},"fund_loss_record":{"s":10,"q":"We’re delighted to release a new firmware 2.0 upgrading for the SecuX V20, W20 and W10 crypto hardware wallets that get a fresh new look, new SecuX wallet interface (UI).","u":"https://web.archive.org/web/20191214192048/https://www.secuxtech.com/latest-news/secux-releases-new-firmware-upgrading-v20-w20-and-w10-crypto-haedware-wallets-for-new-ui/","d":"2026-10-01"}},"satochip":{"secure_element":{"s":3,"q":"While some vendors offer you basic flash memory to secure your privates keys, Satochip offers you an EAL6 certified secure element: the chip.","u":"https://satochip.io/product/satochip/","d":"2026-10-01"},"reproducible_firmware":{"s":5,"q":"Open source javacard applet implementing a crypto-currency hardware wallet with full BIP32/BIP39 support.","u":"https://raw.githubusercontent.com/Toporin/SatochipApplet/master/README.md","d":"2026-10-01"},"genuine_check":{"s":7,"q":"The authentication mechanism is based on a unique digital certificate issued for each card and verified with a trusted PKI.","u":"https://satochip.io/faq/","d":"2026-10-01"},"key_integrity":{"s":0,"q":"Using Satochip, an initial BIP32 seed is imported in the javacard and private keys are derived as requested by an external application.","u":"https://raw.githubusercontent.com/Toporin/SatochipApplet/master/README.md","d":"2026-10-01"},"vendor_independence":{"s":10,"q":"Download the latest Sparrow Wallet client. Satochip hardware wallet is natively supported by Sparrow since v1.8.0.","u":"https://satochip.io/setup-use-satochip-with-sparrow-bitcoin/","d":"2026-10-01"},"fund_loss_record":{"s":10,"q":"Hurry up! And grab a Satochip card on our shop!","u":"https://web.archive.org/web/20200331163131/https://satochip.io/","d":"2026-10-01"}},"keycard":{"secure_element":{"s":10,"q":"\"NXP Secure Smart Card Controller N7121 with IC Dedicated Software and Crypto Library (R1/R2/R3/R4)\",\"NXP Semiconductors Germany GmbH\",\"DE\",\"EAL6+,ALC_FLR.1,ASE_TSS.2\",\"SECURITY_IC_AUGP_V1.0\",\"01/30/2026\",\"01/30/2031\"","u":"https://www.commoncriteriaportal.org/products/certified_products.csv","d":"2026-10-01"},"reproducible_firmware":{"s":5,"q":"Keycard is an implementation of a BIP-32 HD wallet running on Javacard 3.0.5 (see implementation notes)","u":"https://raw.githubusercontent.com/keycard-tech/status-keycard/master/README.md","d":"2026-10-01"},"genuine_check":{"s":7,"q":"every card is programmed with a persistent secp256k1 key pair, the authentikey, together with a 98-byte certificate signed by a certification authority","u":"https://docs.keycard.tech/en/developers/core","d":"2026-10-01"},"key_integrity":{"s":0,"q":"Generates and stores keys completely on card.","u":"https://docs.keycard.tech/en/developers/apdu/generatekey","d":"2026-10-01"},"vendor_independence":{"s":8,"q":"Keycard Pal is an air-gapped companion app for [Status Keycard](https://keycard.tech), on Android and iOS. It lets you sign Ethereum and Bitcoin transactions over NFC, so your private keys never touch an internet-connected device.","u":"https://raw.githubusercontent.com/mmlado/keycard-pal/main/README.md","d":"2026-10-01"},"fund_loss_record":{"s":10,"q":"Keycard is now integrated with Status v1.4 for Android ONLY","u":"https://web.archive.org/web/20200625174251/https://get.keycard.tech/","d":"2026-10-01"}},"keycard-shell":{"secure_element":{"s":10,"q":"\"NXP Secure Smart Card Controller N7121 with IC Dedicated Software and Crypto Library (R1/R2/R3/R4)\",\"NXP Semiconductors Germany GmbH\",\"DE\",\"EAL6+,ALC_FLR.1,ASE_TSS.2\",\"SECURITY_IC_AUGP_V1.0\",\"01/30/2026\",\"01/30/2031\"","u":"https://www.commoncriteriaportal.org/products/certified_products.csv","d":"2026-10-01"},"reproducible_firmware":{"s":7,"q":"Our locally built binary — signed with a throwaway key — produces an identical hash to the official release under this methodology.","u":"https://njump.me/nevent1qqs9elru2aeu7n3c3d960x06eegc2u5sa39dkpzhfej09heav2d0d5qpz4mhxue69uhhyetvv9ujuerfw36x7tnsw43qz9nhwden5te0wfjkccte9ehx7um5wghxjmnxduk4td2n","d":"2026-10-01"},"genuine_check":{"s":7,"q":"During verification, the Shell signs a one-time QR challenge and includes its device certificate.","u":"https://docs.keycard.tech/en/help/verify-keycard-shell-authenticity","d":"2026-10-01"},"key_integrity":{"s":0,"q":"No, and by design. A certified on-chip TRNG is more reliable than hand-made entropy, which is easy to get wrong in ways you cannot see.","u":"https://docs.keycard.tech/en/blog/random-number-generation-in-hardware-wallets-how-your-seed-is-really-made","d":"2026-10-01"},"vendor_independence":{"s":10,"q":"Import QR created on your Keycard Shell by selecting Connect software wallet > Bitcoin","u":"https://raw.githubusercontent.com/sparrowwallet/sparrow/2.5.5/src/main/java/com/sparrowwallet/sparrow/io/KeycardShellSinglesig.java","d":"2026-10-01"},"fund_loss_record":{"s":5,"q":"First stable release.","u":"https://github.com/keycard-tech/keycard-shell/releases/tag/v1.0.0","d":"2026-10-01"}},"ledger-nano-x":{"secure_element":{"s":9,"q":"\"ST33J2M0 (C04) (ANSSI-CC-2020/29-R02)\",\"STMicroelectronics\",\"FR\",\"EAL5+,ADV_IMP.2,ADV_INT.3,ADV_TDS.5,ALC_CMC.5,ALC_DVS.2,ALC_FLR.2,ALC_TAT.3,ASE_TSS.2,ATE_COV.3,ATE_FUN.2,AVA_VAN.5\",\"SECURITY_IC_AUGP_V1.0\",\"01/08/2025\",\"01/08/2030\"","u":"https://www.commoncriteriaportal.org/products/certified_products.csv","d":"2026-10-02"},"reproducible_firmware":{"s":4,"q":"devices = [\"nanox\", \"nanos+\", \"stax\", \"flex\", \"apex_p\"]","u":"https://raw.githubusercontent.com/LedgerHQ/app-bitcoin/develop/ledger_app.toml","d":"2026-10-02"},"genuine_check":{"s":7,"q":"The Ledger device’s secure element signs the challenge it receives using its private key. This signature is sent back to Ledger’s HSM along with the attestation (signed public key).","u":"https://donjon.ledger.com/threat-model/device-genuineness/","d":"2026-10-02"},"key_integrity":{"s":0,"q":"On Ledger signers, a True Random Number Generator is used for seed generation, ephemeral key generation and countermeasures.","u":"https://donjon.ledger.com/threat-model/os-random-number-generation/","d":"2026-10-02"},"vendor_independence":{"s":6,"q":"0x40: \"Ledger Nano X\",","u":"https://raw.githubusercontent.com/spesmilo/electrum/4.8.2/electrum/plugins/ledger/ledger.py","d":"2026-10-02"},"fund_loss_record":{"s":10,"q":"The launch of the Ledger Nano X 2019 introduced Bluetooth capabilities and iOS compatibility, making it the most accessible hardware wallet of its time.","u":"https://www.ledger.com/academy/topics/ledgersolutions/ledger-hardware-devices-explained-the-10-year-evolution","d":"2026-10-02"}},"jade-core":{"secure_element":{"s":4,"q":"Jade Core employs open-source blind oracle technology, functioning as a virtual secure element to shield your bitcoin from a wide array of threats.","u":"https://store.blockstream.com/products/blockstream-jade-core","d":"2026-10-02"},"reproducible_firmware":{"s":10,"q":"Both published Blockstream Jade Core 1.0.41 artifacts are reproducible: 2 of 2 matched.","u":"https://njump.me/3fb710917d940c3b418695fb4804507cc62fc2397b61428994603058d82c6df5","d":"2026-10-02"},"genuine_check":{"s":7,"q":"Each individual Jade manufactured by Blockstream contains a unique private key specific to that device, with its corresponding public key signed by Blockstream.","u":"https://help.blockstream.com/blockstream-jade/set-up-transact-recover-your-wallet/perform-a-genuine-check-with-jade","d":"2026-10-02"},"key_integrity":{"s":10,"q":"Your Jade allows users to enter the first 11 or 23 words of a BIP39 recovery phrase, and will automatically calculate possible options for their final word.","u":"https://help.blockstream.com/blockstream-jade/add-more-security-functionality/create-a-recovery-phrase-using-dice.md","d":"2026-10-02"},"vendor_independence":{"s":10,"q":"(0x1a86, 0x7523), (0x303a, 0x4001), (0x303a, 0x1001)]","u":"https://raw.githubusercontent.com/spesmilo/electrum/master/electrum/plugins/jade/jadepy/jade_serial.py","d":"2026-10-02"},"fund_loss_record":{"s":5,"q":"Less Complexity, Same Security: Blockstream Introduces Jade Core","u":"https://blockstream.com/press-releases/2026-04-28-blockstream-introduces-jade-core/","d":"2026-10-02"}},"coolwallet-pro":{"secure_element":{"s":3,"q":"CC EAL 6+ secure element with encrypted Bluetooth","u":"https://www.coolwallet.io/products/coolwallet-pro","d":"2026-10-02"},"reproducible_firmware":{"s":4,"q":"KeyStore.derive(KeyGenerate.CARD_PRO);","u":"https://raw.githubusercontent.com/CoolBitX-Technology/coolwallet-pro-se/main/src/coolbitx/Main.java","d":"2026-10-02"},"genuine_check":{"s":2,"q":"Please refer to the packaging contents as shown on the official website and ensure that the product you received has an authenticity label and is fully sealed.","u":"https://www.coolwallet.io/blogs/help-center/check-box-tampering","d":"2026-10-02"},"key_integrity":{"s":0,"q":"The CoolWallet App provides two methods for generating the recovery phrase:","u":"https://www.coolwallet.io/blogs/help-center/create-wallet","d":"2026-10-02"},"vendor_independence":{"s":6,"q":"if (device.name.includes('CWP')) {","u":"https://raw.githubusercontent.com/MyEtherWallet/MyEtherWallet/v6.9.27/src/modules/access-wallet/hardware/handlers/hardwares/coolwallet/index.js","d":"2026-10-02"},"fund_loss_record":{"s":9,"q":"45 in stock CoolWallet Pro quantity Add to cart","u":"https://web.archive.org/web/20210616173713/https://www.coolwallet.io/product/coolwallet-pro/","d":"2026-10-02"}},"safepal-x1":{"secure_element":{"s":3,"q":"EAL6+ independent secure element","u":"https://www.safepal.com/en/store/x1","d":"2026-10-02"},"reproducible_firmware":{"s":3,"q":"#include \"coin/Bitcoin/bitcoin_sign.c\"","u":"https://raw.githubusercontent.com/SafePalWallet/safepal-x1/0af1a14c1d181d12c2d2208118e540547b8e75a3/firmware/App/PlatSrc/src/coin/Bitcoin/bitcoin_sign_view.c","d":"2026-10-02"},"genuine_check":{"s":2,"q":"By generating a 6-digit code, the hardware wallet device can be verified through a carefully designed algorithm. | To authenticate the X1 device, please follow the tutorial at this link","u":"https://safepalsupport.zendesk.com/hc/en-us/articles/360047261272-Device-Authentication-Mechanism","d":"2026-10-02"},"key_integrity":{"s":0,"q":"Choose the length of the mnemonic phrase, and click 'OK'. | Write down your mnemonic phrase in order.","u":"https://safepalsupport.zendesk.com/hc/en-us/articles/18553611052827-How-to-Create-Wallet-in-SafePal-X1-Hardware-Wallet","d":"2026-10-02"},"vendor_independence":{"s":4,"q":"Both the SafePal S1 hardware wallet and X1 hardware wallet support the BIP39/44 mnemonic phrase","u":"https://safepalsupport.zendesk.com/hc/en-us/articles/18969780702235-Is-it-possible-to-import-the-wallet-on-S1-to-X1-for-use","d":"2026-10-02"},"fund_loss_record":{"s":7,"q":"SafePal X1 V1.0.3 📆 Released Date: 2023/09/13","u":"https://safepalsupport.zendesk.com/hc/en-us/articles/18732453314715-X1-Firmware-Upgrade-History","d":"2026-10-02"}}}}