[ANN] ERA Wallet — Fully Offline, Air-Gapped Hardware Wallet

[ERA_hwlt]

Hello! We are the ERA Wallet team.

 We noticed many mentions and questions popping up, and we're now here to address everything and tell you about our wallet.

1. Problems we aimed to solve when launching the project:
· Most wallets limit users to one seed or one chain — not secure, not flexible.
· Paper backups are unreliable and not secure.
· Users don't clearly understand what they’re signing, leading to potential losses.
· Hardware wallets are often inconvenient to use or offer limited functionality.
· Most wallets create an illusion of security but fail real-world attacks.

2. What we've achieved:
 A compact and convenient device, bank-card-sized (5.5 mm thick, 54 × 87 mm, 45 g), packed with everything needed for genuine security:
✅ Multi-Seed, Multi-Chain Wallet
Manage up to 10 independent wallets, each with its own seed phrase.
Every wallet supports multiple blockchains, making ERA a truly unified device for multi-chain ecosystems like Ethereum and Bitcoin.
This eliminates the need for multiple devices or confusing app switches — something many competitors still fail to offer.
✅ ERA Lens – Protection from "Blind" Signatures
ERA Wallet verifies smart contract call data before signing, letting users clearly review transaction details and avoid costly mistakes on Ethereum and EVM chains.
With support for 1,500+ contracts, 2,600+ tokens, and 30+ transaction types — including swaps, staking, and governance — ERA Lens ensures you always know what you're approving.
✅ ERA Recovery Card
 The ERA Recovery Card is a secure, durable alternative to paper seed phrase backups.
 All data is encrypted and protected from unauthorized access.
 Robust NTAG424 DNA chip with EAL4+ certification, guaranteeing data storage for 50 years.
 Supports splitting the seed phrase into multiple shares with threshold recovery.
 Recovery access through ERA Wallet.
✅ Fully Air-Gapped
 No networks, Bluetooth, or Wi-Fi—completely protected from remote attacks. Transaction signing occurs solely through offline QR codes.
✅ True Entropy
 Five entropy generation methods, three of which involve user interaction: camera scanning, swipe gestures, and device shaking.
 This guarantees complete user control.
✅ Waterproof (IPX7)
 Device is reliably protected against moisture.
 Perfect for travel, outdoor use, and extreme conditions.
Hardware Security:
 ✅ Certified Secure Element chip ATECC608C
 Securely protects private keys, widely used in banking and industrial solutions. More details: Microchip ATECC608C.
 ✅ STM32H7 Microcontroller
 High-performance chip with encryption support, secure boot, and attack protection.
 ✅ Security audit by Keylabs
 Confirmed external audit of all components and architecture: https://github.com/keylabsio/audits/blob/main/2024-12-ERA-WLT.pdf
✅ Open Source
 Our codebase will soon be available open source, and we will share updates on our plans shortly.

All updates and additional information available here:
 https://era-wallet.com/
 https://x.com/era_wallet

Feel free to ask questions here — we’re happy to answer and discuss.

[SFR10]

We noticed many mentions and questions popping up, and we're now here to address everything and tell you about our wallet.

It's nice to see you're finally here ^{[welcome to this forum]}. I noticed in KeyLab's security report that there was a mention of considering Infineon Optiga Trust M at some point, but you chose to go with ATECC608C. Would you mind mentioning why? The former offers monotonic counters as well, so it must be something else.

[ERA_hwlt]

We noticed many mentions and questions popping up, and we're now here to address everything and tell you about our wallet.

It's nice to see you're finally here ^{[welcome to this forum]}. I noticed in KeyLab's security report that there was a mention of considering Infineon Optiga Trust M at some point, but you chose to go with ATECC608C. Would you mind mentioning why? The former offers monotonic counters as well, so it must be something else.

Hi, thanks for the question — it all boiled down to the ATECC608C being a better fit for a secure, open, and cost-efficient hardware wallet. It’s cheaper, easier to source, already in use in other projects, supports per-slot monotonic counters for PIN lockouts, uses less power, and comes in a smaller package ideal for our slim design. Plus, the open-source tooling and community support made development and security auditing much easier.

[dkbit98]

Welcome Era wallet, nice to see you in bitcointalk finally.
You should really update outdated and mixed confusing information on your website regarding secure elements.
In some pages you are claiming use of ATECC608C and in others you are showing different older version ATECC608B.
For example here is one in checkout page.


https://era-wallet.com/products/era-wallet

There is another page I found earlier (can't remember where exactly), and we can also see older ATECC608B chip:



In main page there is a different version:

[ERA_hwlt]

Welcome Era wallet, nice to see you in bitcointalk finally.
You should really update outdated and mixed confusing information on your website regarding secure elements.
In some pages you are claiming use of ATECC608C and in others you are showing different older version ATECC608B.
For example here is one in checkout page.

https://www.talkimg.com/images/2025/05/22/UarLFP.jpeg
https://era-wallet.com/products/era-wallet

There is another page I found earlier (can't remember where exactly), and we can also see older ATECC608B chip:

https://www.talkimg.com/images/2025/03/11/0I092.jpeg

In main page there is a different version:

https://www.talkimg.com/images/2025/05/22/Uarchq.jpeg

Thank you so much for being so attentive — we really appreciate it! 🙏

You’re absolutely right, and we've already corrected the inconsistencies across the site. Sorry for the confusion — that mix-up was totally on us 😅

Thanks again for pointing it out — this kind of feedback helps us improve every day. 🚀

[ERA_hwlt]

Hey everyone,

We just dropped a full walkthrough video of ERA Wallet — a new air-gapped hardware wallet designed for true self-custody. The review is presented by our CEO and shows how the device works from A to Z.

Watch the video:
https://youtu.be/YiBkAC-uXNo

In the video, you’ll see:

* What makes ERA Wallet different from other cold wallets
* How we designed the device to be fully air-gapped (no USB, no Bluetooth, no Wi-Fi)
* How firmware updates are handled securely
* How users generate their own entropy (swipe, shake, scan) for true private key randomness
* How our ERA Recovery Cards work — encrypted, PIN-protected, and tamper-proof
* How to connect to wallets like MetaMask or BlueWallet, completely offline
* How you can manage up to 10 separate wallets on one device
* How our ERA Lens helps you see what you’re actually signing, even in complex transactions

Plus, there’s a special discount code pinned in the YouTube comments 🎁

ERA Wallet is built for people who take security seriously — and want full control over their crypto.

🔐 Learn more & order: https://era-wallet.com
🧵 Drop your questions below or join our Telegram: https://t.me/erawallet

Looking forward to your feedback — and thanks for supporting user-controlled crypto!

[dkbit98]

Watch the video:
https://youtu.be/YiBkAC-uXNo

I watched the video and I have to say Era wallet is very interesting device.
Generating seed words using combination of three different methods is impressive, but I was wondering about backup recovery cards.
What chip is used inside Era cards, and can this card be purchased separately, or built from blank cards?

Looking forward to your feedback — and thanks for supporting user-controlled crypto!

Are there any plans to add support for monero?

[Alex | ERA wallet CEO]

Hey there! I am Alex, founder of the ERA wallet. Lot of works, but finally, I’ve created my account on this forum:))

Watch the video:
https://youtu.be/YiBkAC-uXNo

I watched the video and I have to say Era wallet is very interesting device.
Generating seed words using combination of three different methods is impressive, but I was wondering about backup recovery cards.
What chip is used inside Era cards, and can this card be purchased separately, or built from blank cards?

We use the NTAG424 chip from NXP, which is certified at EAL4+ and guarantees data retention for over 50 years.
Our recovery cards will soon be available separately for purchase on our website.
It’s not possible to build these cards using blank cards because they rely on a special authentication key preloaded during production. This authentication key is unique to our manufacturing process and ensures that only genuine cards produced by us can work with ERA Wallet devices. This allows us to guarantee that the card is made from original NXP chips and the supply chain verified by us. Our device checks this key during setup, confirming the card is authentic and trusted. This ensures users receive a secure, tamper-proof backup option that cannot be cloned or forged.

Are there any plans to add support for monero?

Yes, of course we plan. We already finished implementation Tron and Solana, and on the way implementing TON. Full our list of implementation available here
https://era-wallet.com/tokeninfo

[Densk]

Hello, ERA Wallet team!

First, thank you for introducing the innovative air gap solution, ERA Wallet, to the hardware wallet market. After carefully studying the security model of your product, I have a few important questions that I hope you can answer publicly for the entire community.

I have organized the questions into the following categories:



1. Firmware update security and private key isolation:

You mention that private keys never leave the device and are stored in a secure ATECC608C element. Does this element support true hardware isolation of keys?

Is it cryptographically and physically impossible for a signed firmware update to extract or transfer the seed/private key?


During the firmware update:

Is the firmware image verified with a digital signature before installation?

Do you use Secure Boot and/or a bootloader that verifies the integrity and authenticity of all execution code?

Can the firmware update mechanism be launched via NFC without user interaction (e.g., in the case of a sealed box)?

Could private keys be leaked when updating the firmware via NFC? For greater security, is it possible to update the firmware via NFC by first downloading the firmware file to a smartphone and then starting the firmware procedure with mobile and Wi-Fi networks disabled?

Is there a longer, truly air-gapped firmware update option planned that uses QR codes instead of NFC?



2. Supply chain and counterfeiting issues prior to shipment

Could you elaborate on the mechanisms for protecting against supply chain attacks?

For example, could an attacker launch an update via NFC that would install compromised firmware before the user turns on the device?

If an attacker installs malicious firmware that is signed, will it still be impossible to extract the keys due to hardware limitations?



Can users verify that the original factory firmware is installed on their devices or confirm its cryptographic hash or signature? In theory, could a fraudster forge the signature of the modified firmware, causing it to pass the authenticity test?



3. Open source status and roadmap:

Currently, only individual firmware components (e.g., SDK elements) are published on GitHub.

Do you plan to publish the complete firmware source code, including the bootloader, OS logic, cryptographic operations, and update mechanism?

If so, is there a roadmap or timeline for when this will happen?

Will firmware builds eventually be reproducible so that experienced users can verify that the firmware binary matches the published source code?


Will future firmware versions continue to support third-party audits? Are there any independent audit reports that you can publicly share?



4. Overall Transparency and Verifiability:

Can users verify that the device is running official firmware through hash comparisons or interface prompts?

Are firmware versions and update signatures published so users can verify installations?



5. Future Additional Features:

Are there plans to unlock more of the device's potential, particularly the use of backup cards for multi-signature transactions?

Are there plans to create a mobile app for the wallet that includes staking and DEX interaction capabilities?



I am a strong advocate of security models with minimal trust. ERA Wallet looks promising, but transparency, especially regarding the firmware and update processes, is critical in the hardware wallet space. I (and probably many others) would greatly appreciate clear, technical answers to these questions.

Thank you in advance for taking the time to provide a detailed response.

[dkbit98]

We use the NTAG424 chip from NXP, which is certified at EAL4+ and guarantees data retention for over 50 years.
Our recovery cards will soon be available separately for purchase on our website.
It’s not possible to build these cards using blank cards because they rely on a special authentication key preloaded during production.

Thanks for replying.
I think that regular credit card format is better option, as they can easily blend in and look like another credit/debit card.

Yes, of course we plan. We already finished implementation Tron and Solana, and on the way implementing TON. Full our list of implementation available here

I don't care about coins you mentioned, but I would appreciate to see optional Bitcoin-only firmware version, or maybe Bitcoin plus Monero (when it gets supported).

[SFR10]

Seeing that ERA's representative & founder haven't been that active lately, I'm going to mention that they're looking for a UI/UX designer to help with their upcoming software wallet: UX/UI Software Designer
^{- BTW, they also released an update last week: e.g., Better QR Code scanning, swipe gestures, and "a few other things".}