Independently Audited · Open Source

Hardware Wallet
That Shows You
What You Sign.

Hardware Wallet That Shows You What You Sign.

ERA Wallet decodes every transaction on-device, offline - no raw hex, no blind trust. 10 independent seed phrases. Air-Gapped. No USB. No Bluetooth.

ERA Wallet hardware crypto wallet with ERA Lens transaction decoding
ERA LENS™ ACTIVE
on-device · offline
WALLET 2 / 10
DeFi Trading
Air-GappedQR · EIP-4527
E-Ink DisplayGorilla Glass 6
Keylabs AuditedFull report on GitHub
Bank Card Size54×87mm · 5.5mm
IP67 ProtectedWater & Dust
The Problem

Most hardware wallets
show you raw data.
You sign anyway.

Most hardware wallets show you raw data. You sign anyway.

When you interact with DeFi, your hardware wallet shows a string of hex bytes - not what you're actually approving. Hackers exploit this. Every time.

ERA Wallet's ERA Lens™ decodes transactions directly on-device, without internet connection or registry lookup. You see what you're signing. Before you sign it.

Bybit Exchange Hack
$1,500,000,000
February 2025 · Attackers exploited blind signing. Users approved malicious transactions they couldn't read.
Kelp DAO Exploit
$292,000,000
April 2026 · Protocol-level blind signing attack. On-device decoding would have flagged the transaction.
AI Agent NFT Injection
Unknown losses
May 2026 · Automated agents signed malicious transactions. Air-gapped architecture provides protection.
NO BLIND TRUST

ERA Lens™
On-Device
Transaction
Decoding

While others outsource trust to online registries, ERA Lens decodes directly from contract ABIs - offline, on-device, always.

Human-readable function calls, amounts, addresses
Works 100% offline - no registry, no internet
Unknown contracts? ERA Lens blocks signing automatically
ERA Lens Demo
ERA Lens™ demo
1
Scan QR
2
ERA-LENSType: Swap1598 USDT2.47 BNBAPPROVE
On-device
decoding
3
Verify
details
4
APPROVEDSigned offline
Sign
offline
5
Broadcast
Human-Readable Transactions
See the function name, token amounts, and recipient address - in plain language. Before you press confirm.
Works Fully Offline
Decoding happens on-device from contract ABIs. No registry lookup, no internet required. Works anywhere, always.
Unknown Contract Detected
ERA Lens™ stops the signing flow and flags it for manual review.
MULTI-SEED

10
Independent
Wallets.
One Device.

The industry standard is 1 device = 1 seed phrase. ERA breaks that. Keep your DeFi, cold storage, trading, and personal wallets fully isolated — in one device.

Each wallet connects to its own soft wallet (MetaMask, Rabby, OKX...). No mixing funds. No buying multiple hardware devices.

ERA Wallet showing 10 independent seed phrases on one device
01
Work from Personal
Keep business crypto and personal funds completely isolated on the same device. Zero overlap, zero risk of mixing.
02
DeFi from Cold Storage
Active DeFi wallet and long-term HODL side by side. Never move cold storage to interact with protocols.
03
Minimize Risk
Distribute assets across multiple seeds. If one wallet is compromised, the rest stay untouched.
Fully Air-Gapped

Zero Wired
Attack
Surface.

Every physical connection is a potential attack vector. ERA eliminates all of them. No cables. No wireless. No network. Just QR.

NO USB
No driver exploits. No firmware injection via cable. Zero wired surface.
NO BLUETOOTH
No wireless interception. No pairing vulnerabilities. Completely silent.
NO WI-FI
No network exposure. No remote attacks possible. Ever.
Simple. Secure. Powerful.

How ERA Works

Four steps. Zero compromise on security or usability.

01
Connect
Open your soft wallet (MetaMask, Rabby, etc.) and initiate a transaction.
02
Scan
ERA scans the QR code from your screen. No USB, no Bluetooth required.
03
Verify
ERA Lens decodes the transaction on-device. You see exactly what you're approving.
04
Done
Confirm on ERA. Signed QR is broadcast via your soft wallet. Transaction complete.
ERA Recovery Card encrypted NFC backup ERA Recovery Card Shamir backup
PAPER BACKUP
Burns. Gets wet. Anyone can read it.
VS
ERA RECOVERY
Encrypted. PIN-locked. 50+ year chip.
ERA Recovery Card

Encrypted.
Not Paper.

Forget writing your seed phrase on paper. ERA Recovery Card stores an encrypted NFC backup — unreadable without your ERA device.

PIN-Protected NFC Backup
Encrypted at rest. Only your ERA device can decrypt. Physical card + PIN = two-factor recovery.
Shamir Multishare
Split your seed across multiple Recovery Cards with a custom threshold. Lose one — still recoverable. Lose them all — mathematically impossible to reconstruct.
PIN Lockout Protection
15 wrong PIN attempts → card locks permanently. Brute-force attacks are physically impossible.
Two Modes

Your Rules.

Switch at any time. No limitations imposed on either.

01
Bitcoin Only

Maximum Security.
Zero Compromise.

Clean BTC-only firmware. No altcoin code in the codebase — zero extra attack surface. For Bitcoin maxis who want absolute minimalism.

Bitcoin-only firmware
No altcoin code whatsoever
Minimum attack surface
ERA Lens for BTC transactions
Full Recovery Card support
02
Multichain

Maximum Flexibility.
Full Ecosystem.

Bitcoin, Ethereum, Solana, Tron, Base, and 100+ DeFi protocols. ERA Lens active for all supported networks.

BTC, ETH, SOL, TRX, Base + more
100+ DeFi protocols
ERA Lens on all networks
10 independent seed phrases
All soft wallet integrations
Works With Your Wallet

Any EIP-4527
Compatible
Wallet.

ERA uses open standards. No proprietary bridges. No vendor lock-in. If your wallet supports EIP-4527, it works with ERA.

EIP-4527 compatible wallets
ERA Wallet compatible with MetaMask Rabby OKX and other EIP-4527 wallets
Security & Transparency

Verify. Don't Trust.

Every claim is backed by independent audit, open-source code, or public hardware specs.

Keylabs Security Audit
AUDITOR: KEYLABS.IO · DECEMBER 2024 · REPORT PUBLIC
0
Critical
0
High
3
Medium
100%
Resolved
Hardware & Secure Element (ATECC608C)
Firmware, bootloader & bootstrapper
Entropy generation (5-source TRNG)
PIN protection & glitch-attack resistance
Air-gapped QR communication (EIP-4527)
→ Read full report on GitHub
Companion AppOPEN SOURCE
Wallet FirmwarePARTIAL · DEC 2025
Opening up
Core IPPATENT PENDING
Patent application processing
Core IP is under patent protection — competitors copied key innovations before filing. ERA is committed to expanding open-source access as IP protection allows. Any progress on open-sourcing — new modules, released code, lifted restrictions — we announce on our social channels as it happens.
→ View ERA on GitHub
Verify your ERA hardware and firmware are genuine via QR codes and the companion app. No blind trust in the supply chain.
Comparison

An Honest Look.

Different tools for different needs. Here's the full picture.

Feature ERA Wallet Other Wallets
On-device transaction decoding ✓ ERA Lens™Decodes on-device, offline Raw hex or registry lookup
Multi-seed wallets ✓ Up to 10Fully independent ⚠ Limited1 + passphrase variations
Air-gapped - QR only ✓ EIP-4527No USB, BT or Wi-Fi ⚠ VariesUSB or Bluetooth on most
QR recognition speed ✓ 120msFastest QR Recognition ⚠ SlowNoticeably slower scanning
E-Ink display ✓ With frontlightGorilla Glass 6, readable in sunlight ⚠ VariesNo frontlight on most
Water & dust protection ✓ IP67Fully waterproof No IP rating on most
5-source entropy generation Camera, swipe, accel, 2× TRNG Single TRNG source
Encrypted NFC backup ✓ Recovery CardPIN-protected, Shamir support Paper seed phrase only
Bank card size ✓ 5.5mm thin54×87mm, 45g Larger form factor
Bitcoin-only firmware mode ✓ Mode 01Zero altcoin code ⚠ Varies
Open source ⚠ Partial (patents)Companion app open, firmware partial ⚠ VariesFrom full to partial
Independent security audit ✓ Keylabs (public) ⚠ Varies
ERA Wallet

Don't sign what you can't read.

Get ERA →
FAQ

Common Questions.

How is ERA different from other hardware wallets?
+
ERA solves three problems most wallets ignore: blind signing in DeFi, the 1 device = 1 seed limitation, and insecure paper backups. ERA Lens decodes transactions on-device without internet. Multi-seed support lets you run up to 10 independent wallets on one device. The Recovery Card replaces paper seed phrases with an encrypted NFC backup - PIN-protected and Shamir-ready. Fully air-gapped via QR-only (EIP-4527).
What happens if ERA Lens can't decode a transaction?
+
If a transaction can't be decoded or matches no known contract interface, ERA Lens blocks the signing flow and flags it for manual review. You'll never be forced to sign raw hex blindly. This protects against 0-day phishing and unknown contracts.
Can I really use 10 seed phrases independently?
+
Yes. Each of the 10 seed phrases is fully independent - separate keys, separate wallets, separate soft wallet connections. You can assign each to its own MetaMask, Rabby, OKX or any EIP-4527 compatible wallet. No mixing, no passphrase tricks.
Is the NFC Recovery Card secure?
+
The Recovery Card stores an encrypted NFC backup - it's unreadable without your ERA device and PIN. After 15 incorrect PIN attempts the card permanently locks, making brute-force physically impossible. Optional Shamir Multishare splits the seed across multiple cards with a custom recovery threshold.
What is EIP-4527 and why does it matter?
+
EIP-4527 is an open Ethereum standard for QR-based communication between hardware and software wallets. ERA uses it as the only data channel - no USB, no Bluetooth, no Wi-Fi. Because it's an open standard, any compatible wallet (MetaMask, Rabby, OKX...) works with ERA out of the box, with no proprietary bridges.
Why is ERA Wallet not fully open source?
+
The ERA Companion App is fully open source on GitHub. The firmware is partially open (released December 2025). Core IP is patent-pending - competitors copied key innovations before protection was in place. We're committed to expanding open-source access as IP protection allows and will announce every step publicly.
How does firmware update work if it's air-gapped?
+
Firmware updates are delivered via NFC through the ERA Companion App. You tap your device to apply the update - no cables, no Wi-Fi required. Each update is cryptographically signed and verified on-device before installation.
What about ERC-7730 / Clear Signing?
+
ERC-7730 standardises the UX layer for transaction display. ERA Lens takes a different architectural approach: decoding happens on-device from contract ABIs, without relying on an off-chain registry lookup. We welcome the initiative and are evaluating ERC-7730 as a complementary layer.