⚠️ This week, our team was targeted again.

The attack looked completely legitimate:
📲 A Telegram message from someone we already knew.
🎞 A Google Meet invitation.
🤩 Then a request to switch to Microsoft Teams and "update" the application.

One of our internal security principles is never to trust something just because it looks legitimate. We analyze these kinds of attacks, understand how they work, and continuously improve our internal security policies. Thanks to that approach, we quickly discovered that the "update" could have downloaded a malicious script.

This wasn't an isolated case.
Over the past few weeks, we've seen several high-profile incidents:
⏺ The compromise of the official Injective SDK.
⏺ Malware distributed through fake software updates.
⏺ Blind signing, where users unknowingly approve malicious transactions.

All of these attacks have one thing in common: they rely on people trusting what they cannot verify.
A few simple security habits can significantly reduce your risk:
✅ Download software only from official sources.
✅ Always verify what you're signing before pressing Confirm.
✅ Never grant permissions you don't fully understand.

Don't Trust. Verify.

🔴 This article may ruin your trust in your hardware wallet.

People spend thousands of dollars securing their crypto...
⏺ then blindly approve transactions they can't read.
⏺ Or trust that their wallet wasn't modified before it reached them.
⏺ Or simply hope their private keys were generated correctly.

Should security really work like that? We don't think so.

Our latest deep dive explains why "Don't Trust. Verify" should apply to every hardware wallet.

📖 Read the full article

🚨 Scam Breakdown #02
OR macOS malware is stealing Telegram accounts and crypto wallets.

Researchers at SlowMist have uncovered a macOS infostealer that follows a five-step attack chain, ultimately giving attackers full access to a victim's Telegram account and crypto assets.

Here's how it works:
⏺Password harvesting
A fake "Google API Update" prompt tricks users into entering their macOS password. The malware then extracts the Chrome Safe Storage key, browser cookies, and even Apple Notes.
⏺Telegram takeover
It copies the Telegram Desktop tdata folder, letting attackers access the victim's account on another device without a password, SMS, or 2FA.
⏺Wallet database theft
The malware targets data from 16 crypto wallet applications, including Electrum, Exodus, Atomic Wallet, Ledger Live, Trezor Suite, and others.
⏺Offline decryption
Using the credentials stolen in step one, attackers attempt to decrypt encrypted wallet databases offline on their own machines - without needing continued access to the victim's computer.
⏺Application replacement
The malware can replace legitimate applications with malicious versions to maintain persistence and continue stealing sensitive data.

⚠️ Stay protected:
- Never enter your macOS password into unexpected pop-up windows.
- Enable a Telegram Desktop Passcode.
- Regularly review your active Telegram sessions.
- Don't store passwords or seed phrases in Apple Notes.
- Never download wallet software or updates from links shared in chats.

👍Don't Trust. Verify.

Yesterday: what happens if someone steals your seed phrase.
Today: how to make sure they don't get anything useful.

🎥 Our CTO, Dan, explains how ERA Recovery protects your backup.

Today only: 30% off the [ERA Wallet + 3x ERA Recovery]
❤️ $158 instead of $226.

Use code: TODAY30

🧡 One of our ERA Wallet users told us he now carries his wallet in a genuine leather sleeve handcrafted by his wife.

Moments like these remind us that we're building more than just a device - we're creating something that becomes part of people's everyday lives.

☺️ Thank you for sharing these moments with us. Honestly, every time we receive your photos, stories, or even a simple message about how you use your ERA Wallet, we get just as excited as kids

Keep them coming! We absolutely love seeing how ERA becomes part of your story 🫰🏽

⚡ERA Wallet is now supported by Sparrow Wallet
This is a special milestone for us.

Over the years, Sparrow Wallet has earned its place as one of the most trusted Bitcoin wallets in the community, built for people who value self-custody, transparency, and security.

Starting today, Sparrow users can use ERA Wallet as an air-gapped signing device for Bitcoin transactions.

Why it matters:
⏺ Fully offline transaction signing via QR codes - no USB, Bluetooth, or Wi-Fi.
⏺ Your private keys never leave the device.
⏺ More choice for Bitcoiners who prefer secure self-custody.

A huge thank you to the @SparrowWallet team for making this possible! 🤝

This is just the beginning - more integrations and exciting updates are on the way. 🚀

🎙 A few words from our founder, Alex, on the recent Coldcard incident.
For those who prefer reading, here's the transcript 👇

Hey everyone 🙂
By now you've probably all seen the news about the Coldcard incident. Honestly, it's a tough reminder that even in self-custody, security can never be taken for granted.

As for ERA Wallet, most of you already know how key generation works here. We use 5 independent entropy sources:
• 2 hardware TRNGs (Secure Element + MCU)
• 3 entropy sources influenced directly by you (camera, screen swipes, and device motion)

On top of that, ERA performs a mathematical entropy quality check (Shannon entropy estimation) before allowing wallet generation. If the randomness isn't good enough, the wallet simply won't be created.

🐱 I also hope we're getting close to the end of all the patent and documentation work. Once that's behind us, we'll finally move toward becoming an open-source project, and everyone will be able to verify exactly how everything works.

❗️One more thing.
Please take every hack and every security incident seriously. Not because you should panic - but because every incident is a chance to improve your own security.

A few simple recommendations:
• Don't keep your entire portfolio behind a single seed phrase.
• Diversify your risk whenever possible.
• Protect your backups and never rely on memory alone.
• Be careful about what you install on your computer and phone.
• Always verify what you're signing.

🤦🏽 More and more attacks today exploit the human factor rather than cryptography itself.
Stay safe. We'll keep doing everything we can to make self-custody safer and easier for everyone.

Love you all 👍 The ERA Team

Following the recent Coldcard incident, we decided not to stop at words.

🔴 Today we're publishing a detailed breakdown of how ERA generates your seed using up to five independent entropy sources.

And this is just the beginning.

⬇️ A quick message from our CTO, Dan, about today's article and our next step.

⏺ Later today, we publish a detailed article explaining how randomness is generated in ERA Wallet.
⏺ Tomorrow, we put that claim to the test - an open experiment on our hardware randomness, with the raw data, the NIST test results, and a public Google Colab notebook, so anyone can verify the results.

As promised, here's the first part.
We've published a detailed deep dive into how ERA Wallet generates your seed using up to five independent entropy sources.

📰 Read the full article here: [link]

Tomorrow we go further: raw data, NIST tests, and a notebook you can run yourself.

What do you think about this level of transparency? 👇

📊 62% of crypto users now manage two or more wallets, using different apps for different blockchains, ecosystems, and use cases.
The truth is, there isn't one perfect software wallet.

Different people value different things:
• supported blockchains
• interface
• staking
• swaps
• ecosystem

And that's exactly how it should be.
But one thing shouldn't change:
🔴 Your private keys should stay offline.

That's why we believe a hardware wallet should work with the software wallet you choose.
👀 Stay tuned

❓ How random are the numbers your hardware wallet builds your seed from?
Most manufacturers point to chip certifications. We decided to test the wallet itself.

Over the past week, we built an automated test bench and evaluated an ERA Wallet through a proper scientific evaluation:
⏺ NIST SP 800-90B
⏺ NIST SP 800-22
⏺ BSI AIS-31
⏺ PractRand
⏺ 1,000 cold boot cycles

🔴But we didn't stop there.
We also created five intentionally broken random number generators and ran them through the exact same pipeline to verify that our methodology could actually detect failures - not just produce green checkmarks. Four were caught immediately. One wasn't.

That last result turned out to be one of the most interesting findings of the entire research.

The full report includes raw data, methodology, source code, and reproducible results, so anyone can verify every graph and every conclusion themselves.
Security shouldn't rely on trust.

📖 Full research

❗️ Self-custody shouldn't lock you into a single app.

We believe your hardware wallet should work with the software wallet that fits your needs.

🎆 Today we're excited to announce support for Guarda Wallet.

Why Guarda?
⏺ 70+ blockchains
⏺ Built-in swaps
⏺ Staking
⏺ Desktop, mobile, web & extension
Everything you need to manage your assets in one place.

Guarda users can now connect ERA Wallet and keep their private keys securely offline while continuing to manage assets through the interface they already know.

👉 Connect it to ERA Wallet in just a few minutes.
🔍 Not using Guarda yet? It might be the perfect time to explore it.

🚀 Today: #LetsTalkCrypto Hardware Wallet AMA

Today, ERA Wallet joins LetsExchange and Ryder Wallet to discuss the future of hardware wallets.

We’ll talk about:
⏺ What friction hardware wallets should remove
⏺ How Quick Sign simplifies wallet selection
⏺ How clearly DeFi actions should be explained on-device
⏺ What should always remain visible to the user
⏺ Whether AI-powered warnings belong on hardware wallets

⏱ 2 PM UTC
🤩 X Spaces
👉 Join us: https://x.com/i/spaces/1NGarorjWYEJj?s=20