The seed is sharded into 5 parts. One of the shards are also on the device. You need any two but atleast two components (device + card or 2 cards) to construct the seed back. We use Shamir's Secret Sharing (SSS). The one seed is NEVER same on all cards. You can read about SSS here - https://en.wikipedia.org/wiki/Shamir%27s_secret_sharing


EAL 6+ is similar in security as that of your debit cards or credit cards. Not clonable honestly, atleast not so far. For comparision, Ledger has EAL 5+ .


Not really. Your seed card can be only be constructed from atleast 2 cards or device + card. You need to keep one card along with your device to make transactions, however we recommend to keep the rest of the 3 cards away from the home to protect against the case in which the house burns down.


Not really. This is more like a hand holding support we offer in the first 6 months. You still get the support after 6 months, the only difference being that it would be a normal customer support.

Cypherock is a company founded in 2019 to build the World's 1st Hardware Vault to protect your Crypto. Cypherock X1 is the 1st product released by the company. It uses Shamir's Secret Sharing coupled with tamper-resistant hardware to avoid single point of failure in private key storage.

Cypherock comes with 5 hardware components - 1 X1 Vault and 4 X1 Cards. The X1 Vault is the main computational device used to perform transaction signing and verification. It comes with a screen, 5-way joystick and connects through USB-C. The X1 Cards are Smartcards and communicate with the X1 Vault through encrypted NFC. Each of the 5 components store the 5 Shamir Shares individually. In order to construct back the master private key, you need the X1 Vault and any one of the X1 Card along with the PIN if set (2-of-5 Shamir's Secret Sharing).

Features
1. Unlike other hardware wallets, Cypherock X1 allows you to secure upto 4 seed phrases in the same product. You can protect each with a different PIN. Hence a Hardware Vault and not a Hardware Wallet.
2. There is inherent protection against loss. As along as you have access to 2 out of the 5 components (either 2 X1 Cards, or 1 X1 Card and the X1 Vault), your assets are accessible. You can lose upto 3 components at the same time and still be sure that your assets are recoverable.
3. There is inherent protection against theft. For a hacker to compromise the assets, he will have to find the locations of atleast 2 out of the 5 components physically and then buypass the PIN protection on top of them individually, which is extremely difficult.
4. There are no seed phrase vulnerabilities. You are not required to backup your seed phrases on a piece of paper or a metal backup.
5. It supports more than 3000 digital assets.
6. It is the World's first sufficiently trustless wallet. Today, you have to trust your wallet provider that they will not push a malicious software update to your wallet that extracts out the private keys. In Cypherock X1, even if a developer pushes a malicious software update to the X1 Vault, they will not be able to compromise your private keys since your private keys are never stored as a whole on X1 Vault permanently. X1 cards are not upgradable once shipped to the users.
7. it is going to support a non-KYC inheritance service that will allow your assets to be recoverable by your loved ones without Cypherock ever in a position to compromise user's assets. More on this soon!
8. It is BIP39 compliant.

Use Cases
1. Use it as a hardware wallet without needing to backup the seed phrase. You can read more here - https://cypherock.com
2. Use it as a seed phrase backup manager to secure the seed phrases of your other hardware and software wallets. You can always view the seed phrase of a particular wallet by tapping an X1 card on an X1 Vault and entering the PIN. You can read more here - https://cypherock.com/wallet-backup
3. You can view and manage all your other wallets' portfolio through a single app. You can read more here - https://cypherock.com/portfolio-management

Security
1. It is open-source - https://github.com/cypherock.
2. It is audited by Keylabs that have found vulnerabilities in Ledger and Trezor hardware wallets before - https://cypherock.com/keylabs.
3. X1 Cards have EAL 6+ certified secure elements. You can set a PIN protection on top of them.
4. X1 Vault have a dual chip architecture and uses ATECC608A secure element, the same secure chip used by Coldcard.
5. It is one of the few hardware wallets with a reproducible builds as verified by WalletScrutiny - https://walletscrutiny.com/hardware/cypherockx1.

I would love to get the community's feedback on the same. Here is a coupon code for 10% off if someone wants to try it out - bitcointalk10

I will take care about this. Although, I might have posted in 1-2 threads only which were relevant and solving the problems that were being discussed in the post.

I hear your concerns.

Here is the thread we have already opened in the past - https://bitcointalk.org/index.php?topic=5429275.msg61451074#msg61451074

Here is the thread for the 2nd use case of the product - https://bitcointalk.org/index.php?topic=5457147.0

Here is the link to the technical docs which you might fancy more - https://cypherock.com/docs

Here is the link to the github - https://github.com/cypherock

Happy to answer any questions you might have

There is no way to reset it. Instead of deleting the wallet which could be more catastrophic if the user forgets the PIN, we decided to implement a time exponential function instead. After 3 wrong attempts, the timer to enter a new PIN attempt increases exponentially upto 100 years. You can as you mentioned can order new cards.

For people who think they can forget the PIN, we advise the user to backup the PIN somewhere which is still exponentially more secure than backing up a seed phrase. We will as mentioned also launch a no-KYC inheritance service soon that will allow users to recover the forgotten PIN also apart from passing on the assets to their loved ones.

Dm'ed

It is actually the same. There are still only 4 cards. The thing you are getting confused is that one of the shards is also stored on the device. Hence you need 1 device + 1 card or 2 cards (along with PIN if set) to view the seed phrase or make a transaction.


Apologies on this. The older set of cards were EAL 5+. We have shifted to EAL 6+ certified Javacards for the current batch. We will update the website soon to reflect the same.

On a high level, the card stores one of the Shamir shares of the ENT. The card have 4-8 alphanumeric PIN based brute force protection to protect the share. As long as you have device + 1 card or 2 cards working, your assets are fine. If you think, you still require to backup the seed phrase separately, you can always do that as well.

There are 4 X1 cards having the 4 Shamir shares. The 5th share is in the device. So you need the device + any 1 card to operate. It is currently static to make it easy for most users. We will offer customizations in the future.

Sure. But your DMs are closed on Twitter.

I would love to get your thoughts on Cypherock X1 wallet. We are building a new kind of hardware wallet where we never store the private keys in a single place permanently. We use Shamir's Secret Sharing to split the seed into 5 parts stored on 5 tamper-resistent hardware such that the keys do not have a single point of failure like you described.

Can you please add Cypherock wallet?

We ship to PO boxes and we accept BTC through Coinbase Commerce.

You can use SSS alongside multisig if you want. It is on the roadmap to support Multisig scripts soon. I am not sure how does the user know the seed after first signature. The seed is not even exposed during the wallet creation nor during transaction signing. Although there is an option on the device to generate the seed phrase back from X1 Vault and the X1 card + PIN again if you want to view it and still back it up somewhere.


It does actually. The cards are EAL 6+ certified secure elements. Hence, they have brute force protection through a time exponential function enforced through a 4-8 character alphanumeric PIN. Hence, even if a hacker gets hold of 2 of the 4 cards, they still have to find a way to hack the card individually and bypass the PIN protection to be able to compromise your assets which is extremely improbable.


Not really. There is no emergency wallet transactions service. The same seed phrase backup product also doubles up as a hardware wallet. So, you can use the cySync desktop app along with X1 Vault + 1 X1 card to make transactions incase your Coldcard/Trezor/Ledger or any other BIP39 wallet is not available. You can read more here - https://www.cypherock.com/how-it-works

I agree. Multisig transactions are generally expensive and the user experience is still a big stretch for most users. I just feel multisig is more suited for an enterprise rather than for most individuals. We wrote a blog comparing SSS to Multisig - https://www.cypherock.com/blogs/post-multi-sig-shamir

Moreover, you will still be able to create a multisig setup using Cypherock X1 also. That multisig setup will be more secure than any other wallet combination out there. Our aim with the Cypherock X1 is to create the best possible infra for securing a single seed.

Cypherock X1 uses Shamir Secret Sharing along with distributed tamper-proof hardware storage used in the banking industry to prevent single point of failure with private key security. X1 has five components- 1 X1 Vault and 4 X1 Cards. Your Crypto seed phrases are distributed in these 5 components, such that you need any 2 out of those 5 to recover or even transact your Crypto assets. You can read more about using Cypherock X1 as seed phrase backup here - https://cypherock.com/wallet-backup

This is the product's 2nd use-case for people who already have a wallet setup for themselves and need a better way to manage their seed phrases, inheritance of their assets (soon) and aggregate their portfolio across the different wallets in one single place. You can learn how it works more here - https://www.cypherock.com/wallet-backup/how-it-works

The 1st use case of the product is a hardware wallet without seed phrase vulnerability. You can read about it more here - https://bitcointalk.org/index.php?topic=5459720.0

Product Features:

• Allows you to secure 4 seed phrases with different PIN for each in a single product. Hence 1 Cypherock X1 is enough instead of buying 4 metal backups.
• Open Source with secure elements both on the X1 Vault and the X1 cards. Source code - https://github.com/cypherock
• Security Audit Completed by Keylabs.io without any major vulnerabilities found. Keylabs have found vulnerabilities in Ledger and Trezor before. Read more - https://cypherock.com/keylabs
• Extra security over your seed phrases with a PIN protection on top of shamir shares stored on the hardware to protect against collusion
• Use the same Cypherock X1 also to make emergency wallet transactions if needed. Read more - https://cypherock.com
• It is BIP39 compliant. Hence compatible with the seed phrases of your favorite wallets like Ledger, Trezor, Coldcard, Foundation wallet etc.

I would love to get the community's feedback on the same. Here is a coupon code for 10% off if someone wants to try it out - bitcointalk10

Hey,
I am the cofounder of Cypherock Wallet. Can you please also look to list us for both as a hardware wallet and as a seed phrase backup? Thanks.

I think the main issue is the fact that this API exists now is what concerns most people.