Hardware Wallets

The Ledger Nano X sits in a position no hardware wallet wants to occupy: genuinely excellent hardware undermined by a string of incidents that keep security professionals raising an eyebrow. Let's be precise — the community conflates hardware failures with company failures, and they are different things.

The hardware itself has never been remotely exploited. The CC EAL5+ certified Secure Element stores private keys in a tamper-resistant enclosure that makes physical key extraction extraordinarily difficult without laboratory-grade equipment. Keys never leave the chip. Bluetooth only transmits signed data. The model works — when you verify an address on the device screen before approving.

The problem isn't the chip. The problem is the ecosystem around it. In 2020, Ledger's marketing database was breached — names, emails, phone numbers. The resulting wave of targeted phishing campaigns caused real losses. Users manipulated into revealing seed phrases on fake sites were the attack surface, not the device.

In 2023, a third-party employee injected malicious code into the Ledger Connect Kit — a web library used by many DeFi platforms. For nearly five hours, anyone connecting wallets to affected dApps was at risk. The 2023 Ledger Recover announcement then revealed that the firmware architecture had always been capable of extracting seed fragments — detonating community trust even though the feature was opt-in.

April 2026 brought the fake Ledger Live app campaign — a counterfeit app asking users to "verify" their seed phrase. Hardware never touched. Users who entered their 24 words lost everything. Musician G. Love, with years of crypto experience, lost $420,000 to social engineering, not a hardware exploit.

Tangem makes an argument most hardware wallet companies won't touch: the seed phrase itself is the most dangerous part of self-custody. Not the chip. Not the firmware. The piece of paper in your drawer with 24 words on it. That argument is hard to refute, and Tangem's seedless model is a serious response to a real problem.

The private key is generated inside the SE chip at setup and never leaves the card — not to your phone, not to any app, not to any backup phrase in the default configuration. The card itself is the backup. Buy a set of two or three cards, each cryptographically linked to hold the same keys. The failure mode that kills most seed-phrase setups — house fire, flood, bad storage, someone finding your metal plate — simply doesn't apply here.

The Samsung SAS chip carries an EAL6+ certification — higher than Ledger's EAL5+. EAL6 is the level used in military and medical applications. Independent audits by Kudelski Security (2018), Riscure (2023), and Cure53 (2026 app audit) found no backdoors and no mechanism to expose private keys. The firmware is immutable — it cannot be updated after manufacturing, which means it also cannot be trojaned via a malicious update.

The critical trade-off is the transaction review model. Tangem has no screen. When you approve a transaction, you review the details on your phone, then tap the card to sign. A malicious app or man-in-the-middle attack targeting the phone's display could show you one transaction while the card signs another.

The keys are impeccable; the signing UI lives on an internet-connected device you don't control. Tangem's simulated transaction previews and WalletConnect threat checks help — but they are software defences running on hardware you didn't build. The seedless model also creates an all-or-nothing physical dependency: lose every card with no seed phrase backup, and funds are permanently inaccessible.

The Coldcard Mk4 is what happens when a company decides security is the only specification that matters and builds everything else around that single constraint. Made by Coinkite — a Toronto-based company — it is Bitcoin-only, deliberately complex, and proudly not for everyone. The Bitcoin community didn't call it the gold standard by accident.

The Mk4 uses two Secure Elements from two different manufacturers: a Microchip ATECC608B and a Maxim DS28C36. This is an industry first. The logic is elegant and adversarial: if one chip manufacturer has a secret backdoor or undisclosed vulnerability, the attacker still needs to compromise the second chip from a completely separate manufacturer simultaneously. The probability is effectively zero. Every other wallet in this comparison uses a single SE from a single vendor.

The firmware is fully open-source — every line can be audited by anyone. This is not partial open-source. It's genuinely verifiable from the ground up. The community has been auditing it for years. When Coinkite ships a firmware update, you can inspect the diff.

The air-gap capability separates Coldcard from everything else at a fundamental level. You can generate a wallet, configure it, and sign every transaction in your life without ever plugging it into an internet-connected computer. Transactions move via microSD card or NFC tap as PSBTs. Your private keys exist in a universe where the internet has never been present.

The trick PIN system is genuinely novel: a duress PIN that opens a decoy wallet; a "Brick Me" PIN that permanently destroys the Secure Elements; countdown-to-brick PINs; a Kill Key that wipes on login. This is coercion-resistant security design most wallets never even consider.

The trade-off is real. Coldcard requires a competent technical operator. No Ledger Live, no mobile app, no hand-holding. The workflow involves PSBTs and compatible software wallets (Sparrow, Electrum, Nunchuk). It is also Bitcoin-only — for portfolios including ETH or SOL, you'll need a second device. For Bitcoin maximalists treating BTC as digital gold requiring digital vault security, this is a feature.