[ANN] ERA Wallet — Fully Offline, Air-Gapped Hardware Wallet

[ERA_hwlt]

Hello! We are the ERA Wallet team.

 We noticed many mentions and questions popping up, and we're now here to address everything and tell you about our wallet.

1. Problems we aimed to solve when launching the project:
· Most wallets limit users to one seed or one chain — not secure, not flexible.
· Paper backups are unreliable and not secure.
· Users don't clearly understand what they’re signing, leading to potential losses.
· Hardware wallets are often inconvenient to use or offer limited functionality.
· Most wallets create an illusion of security but fail real-world attacks.

2. What we've achieved:
 A compact and convenient device, bank-card-sized (5.5 mm thick, 54 × 87 mm, 45 g), packed with everything needed for genuine security:
✅ Multi-Seed, Multi-Chain Wallet
Manage up to 10 independent wallets, each with its own seed phrase.
Every wallet supports multiple blockchains, making ERA a truly unified device for multi-chain ecosystems like Ethereum and Bitcoin.
This eliminates the need for multiple devices or confusing app switches — something many competitors still fail to offer.
✅ ERA Lens – Protection from "Blind" Signatures
ERA Wallet verifies smart contract call data before signing, letting users clearly review transaction details and avoid costly mistakes on Ethereum and EVM chains.
With support for 1,500+ contracts, 2,600+ tokens, and 30+ transaction types — including swaps, staking, and governance — ERA Lens ensures you always know what you're approving.
✅ ERA Recovery Card
 The ERA Recovery Card is a secure, durable alternative to paper seed phrase backups.
 All data is encrypted and protected from unauthorized access.
 Robust NTAG424 DNA chip with EAL4+ certification, guaranteeing data storage for 50 years.
 Supports splitting the seed phrase into multiple shares with threshold recovery.
 Recovery access through ERA Wallet.
✅ Fully Air-Gapped
 No networks, Bluetooth, or Wi-Fi—completely protected from remote attacks. Transaction signing occurs solely through offline QR codes.
✅ True Entropy
 Five entropy generation methods, three of which involve user interaction: camera scanning, swipe gestures, and device shaking.
 This guarantees complete user control.
✅ Waterproof (IPX7)
 Device is reliably protected against moisture.
 Perfect for travel, outdoor use, and extreme conditions.
Hardware Security:
 ✅ Certified Secure Element chip ATECC608C
 Securely protects private keys, widely used in banking and industrial solutions. More details: Microchip ATECC608C.
 ✅ STM32H7 Microcontroller
 High-performance chip with encryption support, secure boot, and attack protection.
 ✅ Security audit by Keylabs
 Confirmed external audit of all components and architecture: https://github.com/keylabsio/audits/blob/main/2024-12-ERA-WLT.pdf
✅ Open Source
 Our codebase will soon be available open source, and we will share updates on our plans shortly.

All updates and additional information available here:
 https://era-wallet.com/
 https://x.com/era_wallet

Feel free to ask questions here — we’re happy to answer and discuss.

[SFR10]

We noticed many mentions and questions popping up, and we're now here to address everything and tell you about our wallet.

It's nice to see you're finally here ^{[welcome to this forum]}. I noticed in KeyLab's security report that there was a mention of considering Infineon Optiga Trust M at some point, but you chose to go with ATECC608C. Would you mind mentioning why? The former offers monotonic counters as well, so it must be something else.

[ERA_hwlt]

We noticed many mentions and questions popping up, and we're now here to address everything and tell you about our wallet.

It's nice to see you're finally here ^{[welcome to this forum]}. I noticed in KeyLab's security report that there was a mention of considering Infineon Optiga Trust M at some point, but you chose to go with ATECC608C. Would you mind mentioning why? The former offers monotonic counters as well, so it must be something else.

Hi, thanks for the question — it all boiled down to the ATECC608C being a better fit for a secure, open, and cost-efficient hardware wallet. It’s cheaper, easier to source, already in use in other projects, supports per-slot monotonic counters for PIN lockouts, uses less power, and comes in a smaller package ideal for our slim design. Plus, the open-source tooling and community support made development and security auditing much easier.

[dkbit98]

Welcome Era wallet, nice to see you in bitcointalk finally.
You should really update outdated and mixed confusing information on your website regarding secure elements.
In some pages you are claiming use of ATECC608C and in others you are showing different older version ATECC608B.
For example here is one in checkout page.


https://era-wallet.com/products/era-wallet

There is another page I found earlier (can't remember where exactly), and we can also see older ATECC608B chip:



In main page there is a different version:

[ERA_hwlt]

Welcome Era wallet, nice to see you in bitcointalk finally.
You should really update outdated and mixed confusing information on your website regarding secure elements.
In some pages you are claiming use of ATECC608C and in others you are showing different older version ATECC608B.
For example here is one in checkout page.

https://www.talkimg.com/images/2025/05/22/UarLFP.jpeg
https://era-wallet.com/products/era-wallet

There is another page I found earlier (can't remember where exactly), and we can also see older ATECC608B chip:

https://www.talkimg.com/images/2025/03/11/0I092.jpeg

In main page there is a different version:

https://www.talkimg.com/images/2025/05/22/Uarchq.jpeg

Thank you so much for being so attentive — we really appreciate it! 🙏

You’re absolutely right, and we've already corrected the inconsistencies across the site. Sorry for the confusion — that mix-up was totally on us 😅

Thanks again for pointing it out — this kind of feedback helps us improve every day. 🚀

[ERA_hwlt]

Hey everyone,

We just dropped a full walkthrough video of ERA Wallet — a new air-gapped hardware wallet designed for true self-custody. The review is presented by our CEO and shows how the device works from A to Z.

Watch the video:
https://youtu.be/YiBkAC-uXNo

In the video, you’ll see:

* What makes ERA Wallet different from other cold wallets
* How we designed the device to be fully air-gapped (no USB, no Bluetooth, no Wi-Fi)
* How firmware updates are handled securely
* How users generate their own entropy (swipe, shake, scan) for true private key randomness
* How our ERA Recovery Cards work — encrypted, PIN-protected, and tamper-proof
* How to connect to wallets like MetaMask or BlueWallet, completely offline
* How you can manage up to 10 separate wallets on one device
* How our ERA Lens helps you see what you’re actually signing, even in complex transactions

Plus, there’s a special discount code pinned in the YouTube comments 🎁

ERA Wallet is built for people who take security seriously — and want full control over their crypto.

🔐 Learn more & order: https://era-wallet.com
🧵 Drop your questions below or join our Telegram: https://t.me/erawallet

Looking forward to your feedback — and thanks for supporting user-controlled crypto!

[dkbit98]

Watch the video:
https://youtu.be/YiBkAC-uXNo

I watched the video and I have to say Era wallet is very interesting device.
Generating seed words using combination of three different methods is impressive, but I was wondering about backup recovery cards.
What chip is used inside Era cards, and can this card be purchased separately, or built from blank cards?

Looking forward to your feedback — and thanks for supporting user-controlled crypto!

Are there any plans to add support for monero?

[Alex | ERA wallet CEO]

Hey there! I am Alex, founder of the ERA wallet. Lot of works, but finally, I’ve created my account on this forum:))

Watch the video:
https://youtu.be/YiBkAC-uXNo

I watched the video and I have to say Era wallet is very interesting device.
Generating seed words using combination of three different methods is impressive, but I was wondering about backup recovery cards.
What chip is used inside Era cards, and can this card be purchased separately, or built from blank cards?

We use the NTAG424 chip from NXP, which is certified at EAL4+ and guarantees data retention for over 50 years.
Our recovery cards will soon be available separately for purchase on our website.
It’s not possible to build these cards using blank cards because they rely on a special authentication key preloaded during production. This authentication key is unique to our manufacturing process and ensures that only genuine cards produced by us can work with ERA Wallet devices. This allows us to guarantee that the card is made from original NXP chips and the supply chain verified by us. Our device checks this key during setup, confirming the card is authentic and trusted. This ensures users receive a secure, tamper-proof backup option that cannot be cloned or forged.

Are there any plans to add support for monero?

Yes, of course we plan. We already finished implementation Tron and Solana, and on the way implementing TON. Full our list of implementation available here
https://era-wallet.com/tokeninfo

[Densk]

Hello, ERA Wallet team!

First, thank you for introducing the innovative air gap solution, ERA Wallet, to the hardware wallet market. After carefully studying the security model of your product, I have a few important questions that I hope you can answer publicly for the entire community.

I have organized the questions into the following categories:



1. Firmware update security and private key isolation:

You mention that private keys never leave the device and are stored in a secure ATECC608C element. Does this element support true hardware isolation of keys?

Is it cryptographically and physically impossible for a signed firmware update to extract or transfer the seed/private key?


During the firmware update:

Is the firmware image verified with a digital signature before installation?

Do you use Secure Boot and/or a bootloader that verifies the integrity and authenticity of all execution code?

Can the firmware update mechanism be launched via NFC without user interaction (e.g., in the case of a sealed box)?

Could private keys be leaked when updating the firmware via NFC? For greater security, is it possible to update the firmware via NFC by first downloading the firmware file to a smartphone and then starting the firmware procedure with mobile and Wi-Fi networks disabled?

Is there a longer, truly air-gapped firmware update option planned that uses QR codes instead of NFC?



2. Supply chain and counterfeiting issues prior to shipment

Could you elaborate on the mechanisms for protecting against supply chain attacks?

For example, could an attacker launch an update via NFC that would install compromised firmware before the user turns on the device?

If an attacker installs malicious firmware that is signed, will it still be impossible to extract the keys due to hardware limitations?



Can users verify that the original factory firmware is installed on their devices or confirm its cryptographic hash or signature? In theory, could a fraudster forge the signature of the modified firmware, causing it to pass the authenticity test?



3. Open source status and roadmap:

Currently, only individual firmware components (e.g., SDK elements) are published on GitHub.

Do you plan to publish the complete firmware source code, including the bootloader, OS logic, cryptographic operations, and update mechanism?

If so, is there a roadmap or timeline for when this will happen?

Will firmware builds eventually be reproducible so that experienced users can verify that the firmware binary matches the published source code?


Will future firmware versions continue to support third-party audits? Are there any independent audit reports that you can publicly share?



4. Overall Transparency and Verifiability:

Can users verify that the device is running official firmware through hash comparisons or interface prompts?

Are firmware versions and update signatures published so users can verify installations?



5. Future Additional Features:

Are there plans to unlock more of the device's potential, particularly the use of backup cards for multi-signature transactions?

Are there plans to create a mobile app for the wallet that includes staking and DEX interaction capabilities?



I am a strong advocate of security models with minimal trust. ERA Wallet looks promising, but transparency, especially regarding the firmware and update processes, is critical in the hardware wallet space. I (and probably many others) would greatly appreciate clear, technical answers to these questions.

Thank you in advance for taking the time to provide a detailed response.

[dkbit98]

We use the NTAG424 chip from NXP, which is certified at EAL4+ and guarantees data retention for over 50 years.
Our recovery cards will soon be available separately for purchase on our website.
It’s not possible to build these cards using blank cards because they rely on a special authentication key preloaded during production.

Thanks for replying.
I think that regular credit card format is better option, as they can easily blend in and look like another credit/debit card.

Yes, of course we plan. We already finished implementation Tron and Solana, and on the way implementing TON. Full our list of implementation available here

I don't care about coins you mentioned, but I would appreciate to see optional Bitcoin-only firmware version, or maybe Bitcoin plus Monero (when it gets supported).

[SFR10]

Seeing that ERA's representative & founder haven't been that active lately, I'm going to mention that they're looking for a UI/UX designer to help with their upcoming software wallet: UX/UI Software Designer
^{- BTW, they also released an update last week: e.g., Better QR Code scanning, swipe gestures, and "a few other things".}

[cygan]

the era wallet can now be used as a pure Bitcoin hardware wallet with the new firmware 1.3.202!
unfortunately, i couldn't find a download link for the new or older versions... most likely, the update can only be done via the hardware itself

[dkbit98]

the era wallet can now be used as a pure Bitcoin hardware wallet with the new firmware 1.3.202!
unfortunately, i couldn't find a download link for the new or older versions... most likely, the update can only be done via the hardware itself

Yes, I saw the news.
After updating Era companion app tolatest version you will see new option settings to select between Bitcoin-Only or Multichain mode.
I am not sure if this is removing all the code like in Keystone wallet, or just visually hiding the other option from eyesight.
 

[satscraper]

the era wallet can now be used as a pure Bitcoin hardware wallet with the new firmware 1.3.202!
unfortunately, i couldn't find a download link for the new or older versions... most likely, the update can only be done via the hardware itself

Yes, I saw the news.
After updating Era companion app tolatest version you will see new option settings to select between Bitcoin-Only or Multichain mode.
I am not sure if this is removing all the code like in Keystone wallet, or just visually hiding the other option from eyesight.
 

It seems that firmware pertaining to ERA HW remains unchanged, so it’s more likely that they are simply hiding the other option from view in their companion app, which adds very little to security of HW itself. That said, ERA hardware wallet should still appear attractive to users who hold not only BTC but other cryptocurrencies in their portfolio as well. ^{I’m considering acquiring it myself to test it}.

[n0nce]

It seems that firmware pertaining to ERA HW remains unchanged, so it’s more likely that they are simply hiding the other option from view in their companion app, which adds very little to security of HW itself. That said, ERA hardware wallet should still appear attractive to users who hold not only BTC but other cryptocurrencies in their portfolio as well. ^{I’m considering acquiring it myself to test it}.

I just discovered ERA wallet and both the website and device do look very pretty and sleek. For me, a proper Bitcoin-only mode is always essential, though.

Their website does make claims about enhanced security when using the Bitcoin-only mode, something they should really only do if any other code is fully removed from the device.

Bitcoin-Only
Only BTC. Nothing else on your device.
✓ Zero altcoin code
✓ Minimal attack surface
✓ Pure Bitcoin focus
Perfect for: Bitcoin maximalists

Until the code is available as open-source, it will be impossible to definitively prove that the implementation is sound.


I do like their effort of improving the seed's entropy by using multiple sources, although I doubt that a lack of entropy has been the main cause of any successful attacks in the past.

It's also nice to see multi-seed support, as many (early) hardware wallets lacked this feature, but I believe that it's somewhat ubiquitous by now.

Overall, it's a very pretty, but not ground-breaking device in my eyes, and it's not open-source in terms of software or hardware, yet, as opposed to Foundation Devices' Passport 2 - now "Core", for instance. I also don't see why / what there could be about this device that they're trying to patent and prevents publishing source code for verification of builds and, ideally, also the hardware.

[SFR10]

I am not sure if this is removing all the code like in Keystone wallet, or just visually hiding the other option from eyesight.

In the latter part of one of their recent "X posts", they claim switching to Bitcoin-Only mode on their companion app only installs that specific firmware on the device and that usually means automatically removing the previous one ^{[hence the mention of a change/reduction in attack surface]}, but like what @n0nce mentioned earlier we can't be sure until it becomes fully open-source.

BTW, it's worth mentioning that earlier in the month, they added the ability to "roll back to the previous version" as well ^{[Trezor also offers this feature on some firmwares, and it has saved me a few times in the past]}.

[satscraper]

I do like their effort of improving the seed's entropy by using multiple sources, although I doubt that a lack of entropy has been the main cause of any successful attacks in the past.

This part is the last thing that could concern me, because if I decide to buy ERA, I will use one of the child SEEDs derived from the master SEED of my Passport Corewhich is the primary wallet I use for my stash. The randomness used by Passport Core to generate that master SEED does not raise any my doubts, since it relies on the true random physical process inside Avalanche diode.

[n0nce]

BTW, it's worth mentioning that earlier in the month, they added the ability to "roll back to the previous version" as well ^{[Trezor also offers this feature on some firmwares, and it has saved me a few times in the past]}.

For what it's worth, firmware rollback may or may not be a security threat, too. Some devices explicitly prevent that, e.g. BitBox02 can not be flashed with its multi-coin firmware.

This from their website now reads as if changing firmware is not supported anymore, but I believe it was possible to go from multi-coin to Bitcoin-only (once) in the past. It was locked forever after that.

The BitBox Bitcoin-only will only ever have Bitcoin firmware. Nothing else. Unlike other hardware wallets, the Bitcoin-only edition cannot be reset to support other coins. The Bitcoin-only firmware is locked down at factory setup.

For security, the device's bootloader prevents switching between the Multi-coin and the Bitcoin-only firmware. This applies to all BitBox02 devices, including the original and the new BitBox02 NOVA.

This means you cannot convert a Multi-edition device into a Bitcoin-only one, or the other way around.

The idea is that a potential attacker, when presented with a device running Bitcoin-only firmware, could 'just' (may or may not be trivial to do) flash the more vulnerable firmware and exploit that to get access to your Bitcoin seeds.

I do like their effort of improving the seed's entropy by using multiple sources, although I doubt that a lack of entropy has been the main cause of any successful attacks in the past.

This part is the last thing that could concern me, because if I decide to buy ERA, I will use one of the child SEEDs derived from the master SEED of my Passport Corewhich is the primary wallet I use for my stash. The randomness used by Passport Core to generate that master SEED does not raise any my doubts, since it relies on the true random physical process inside Avalanche diode.

Well, if implemented correctly, ERA's randomness implementation may be just as good, but we just have no way of verifying it right now, as users. Neither the software-implemented randomness generation from a picture or motion data can be verified, nor do we know specific details on the 'TRNG's from their secure element and microcontroller.

As I said initially, it's nice to see, but more of a gimmick rather than a reason to buy the device.


It's nice to hear that you're enjoying your Passport Core, by the way! I'm still looking to get my hands on a Foundation Passport Prime, but there are so many nice toys one can buy.

[satscraper]

by the way! I'm still looking to get my hands on a Foundation Passport Prime

I wouldn’t hurry with this device.

It’s based on KeyOS, operation system which Foundation built from scratch, and Passport Prime is the first device that will run it. It still needs time to mature, and I’m concerned about potential bugs that may surface in the  brand new OS. It must be said that Foundation itself acknowledges this.

[SFR10]

The idea is that a potential attacker, when presented with a device running Bitcoin-only firmware, could 'just' (may or may not be trivial to do) flash the more vulnerable firmware and exploit that to get access to your Bitcoin seeds.

You're right about the multi-coin/universal firmware being more vulnerable due to its larger attack surface, but I was referring to going back to a previous version that doesn't have the bugs present in the latest firmware ^{[as opposed to switching between Bitcoin-only and multi-coin/universal firmware]}.
^{- BTW, it's nice to see you're back after a very long break}