ERA is redefining what a hardware wallet can be—uncompromising security meets premium design. Our open-source firmware, secure element architecture, and intuitive interface come together in a sleek, credit-card form factor that doesn't ask you to choose between safety and elegance. Manage up to 10 wallets on a single device, sign transactions air-gapped via QR codes, and verify every line of code yourself. No compromises. No blind trust. Just complete control over your digital assets.

ERA Wallet introduces a new generation of crypto asset management. By utilizing a secure microcontroller with robust bootloaders and secure elements, ERA Wallet ensures that private keys remain isolated from network-connected environments while maintaining a user-friendly interface. Equipped with a large, high-contrast e-ink display with a bright backlight, simple touch controls, and advanced security mechanisms, ERA Wallet provides peace of mind for both novice users and seasoned crypto enthusiasts.

⚠️ Open Source Status Notice
While ERA is committed to full open-source transparency, some repositories are currently only partially open. Certain proprietary components remain private due to ongoing refactoring, audits and pending patent applications. For partially open repositories, the published source code is provided for reference and review purposes but cannot be independently built without the private components. We are actively working toward making all code fully open source once these processes are complete.

Status Legend: 🟢 Fully Open | 🟡 Partially Open

• 📦 Main Firmware: ERA-Firmware 🟡 Partially Open
  Contains the primary application logic, user interface, wallet generation, transaction signing, and secure key handling code.

• ⚙️ Bootloader (MCUBoot-based): ERA-Bootloader 🟡 Partially Open
  Responsible for securely verifying the main firmware image signature and updating the main firmware. Ensures that only authenticated and cryptographically signed code can be executed.

• 🏁 Bootstrapper: ERA-Bootstrapper 🟡 Partially Open
  A minimal, immutable ROM image that runs at startup. It verifies the bootloader image signature and applies any cryptographically validated bootloader updates before transferring execution to the bootloader. In addition, it performs bootloader recovery from the reserve slot in case of bootloader image corruption.

• 📱 Companion App: ERA-Companion-App 🟢 Fully Open
  A mobile application for updating the ERA Wallet device firmware via NFC and performing device authenticity checks.

ERA Wallet implements a multi-stage secure boot sequence that establishes an unbroken chain of trust from power-on to application execution. Built around the STM32H753 MCU—a high-performance Arm® Cortex®-M7 microcontroller with hardware-backed security features—the device ensures that only cryptographically authenticated code can ever run. Each stage verifies the next before transferring control, making it computationally infeasible for malicious or tampered firmware to execute.

The firmware comprises three distinct components, each residing in protected regions of flash memory:

• 🏁 Bootstrapper (0x08000000) — Root of Trust
  The immutable foundation of ERA Wallet's security model. Burned into flash at manufacturing and protected against modification, the Bootstrapper executes first on every power-on. It cryptographically verifies the Bootloader's digital signature using the ATECC608 secure element before transferring execution. Because the Bootstrapper itself cannot be altered, it serves as the device's hardware root of trust—an attacker cannot bypass this verification layer without physical access to the secure element's private keys.

• 🚀 Bootloader (Primary: 0x08020000 | Reserve: 0x08040000) — Verified by Bootstrapper
  Once authenticated by the Bootstrapper, the Bootloader assumes control and performs the same rigorous verification on the Main Firmware. It validates the firmware image signature against trusted public keys stored in the secure element, ensuring that only ERA-signed code proceeds to execution. The dual-slot architecture provides resilience: if the primary Bootloader becomes corrupted or a failed update occurs, the Bootstrapper can fall back to the reserve copy, preventing the device from being bricked. All cryptographic operations leverage the secure element, keeping signing keys isolated from software-accessible memory.

• 🧭 Main Firmware (0x08060000) — Verified by Bootloader
  The application layer executes only after passing the Bootloader's signature verification. This is where wallet generation, transaction signing, user interface, and secure key management reside. By the time the Main Firmware runs, two independent verification stages have confirmed its authenticity. Combined with RDP Level 2 flash protection (which prevents external read-out of firmware and secrets), this layered architecture ensures that private keys and sensitive operations remain protected against both software exploits and physical attack vectors.

🔐 Why This Matters: Each verification stage is cryptographically independent—compromising one layer does not grant access to the next. This defense-in-depth approach mirrors security architectures used in banking HSMs and military-grade systems, adapted for a consumer hardware wallet.

• 💳 NFC Card Recovery:
  Recover your wallet with single or multiple NFC-based recovery cards. More secure and robust than paper backups, the cards are password-protected, tamper-resistant, and easy to store discreetly.

• 🔐 Multi-Seed Wallet:
  Securely manage up to 10 wallets, each with its own unique seed phrase, all in one device!

• 📱 Air-gapped, seamless Transaction Signing via QR Codes:
  Quickly and securely sign transactions without exposing private keys to connected devices. Simply scan a QR code presented on your mobile phone and on ERA Wallet’s e-ink display, verify transaction details, and confirm the signing action.

• 🔍 Deep Call-Data Parsing to Prevent Blind Signing:
  Our advanced library meticulously parses all transaction call-data. Transaction details are clearly displayed on a large, high-contrast 2.7-inch E Ink® screen. This ensures you have full transparency and control, so you'll never sign a transaction blindly.

• 🔒 Robust Key Protection:
  Sensitive data is always stored securely encrypted, leveraging the on-board ATECC608 secure-element chip. By leveraging a built-in monotonic counter, the secure element effectively resists brute force attacks, ensuring that private keys and critical information never leave the device or fall into unauthorized hands. This fortified, defense-in-depth approach significantly elevates the difficulty of extracting sensitive data, providing robust protection against unauthorized access.

• 🛡️ Secure Boot and Firmware Verification:
  All firmware images, including updates, are cryptographically signed and verified using the secure element chip. The secure boot sequence ensures only authenticated firmware (verified by its image signature) is loaded. With flash memory protected by RDP-2, the device is resilient against attempts to read or tamper with firmware and sensitive data. This continuous chain of trust safeguards the device at every stage.

• 🎲 True Randomness for Key Generation:
  Private keys are generated using multiple entropy sources, including a robust hardware RNG, user-interactive touchpad inputs, accelerometer data, and data from the camera. This layered entropy approach, which the user has full control over, ensures maximally unpredictable seed generation.

• 💳 Sleek, Slim Form Factor at 5.5mm thick:
  ERA Wallet’s design is inspired by a bank card profile. Compact and lightweight, it’s easy to carry and store securely.

• 💦 Water Resistance - IP67 waterproof rating for ultimate durability:
  ERA Wallet is designed to be water-resistant, providing protection against accidental spills, splashes, or even light rain. You can confidently carry your wallet in various environments without worrying about damage from water exposure, ensuring your funds remain secure in unpredictable situations.

• 🔋 Long Battery Life:
  Efficient power management and low-consumption components enable extended battery life of up to 180 days. This ensures that your hardware wallet is ready whenever you need it, even after months in storage.

• 📡 Wireless Charging:
  ERA Wallet supports wireless charging for hassle-free power management. Simply place the device on any compatible charging pad to recharge. This eliminates the need for cables, enhancing convenience and ensuring the device is always ready for use, even on the go.

For detailed instructions on building, flashing, and working with each firmware component, please refer to the respective repository’s README:

• 🏁 Bootstrapper: ERA-Bootstrapper
  Visit the repository’s README for guidance on building and flashing the bootstrapper.

• ⚙️ Bootloader (MCUBoot-based): ERA-Bootloader
  Consult the repository’s README for instructions on compiling, flashing, and updating the secure bootloader.

• 📦 Main Firmware: ERA-Firmware
  Check the repository’s README to learn how to build and deploy the main firmware, as well as configure key features and settings.

We welcome contributions from the community! Whether you’re a developer, security researcher, or simply passionate about hardware wallets, your input is valuable. Please review our Code of Conduct before submitting issues or pull requests.

Unless otherwise specified, ERA repositories are licensed under the Business Source License (BUSL). Specific license terms, usage grants, and change dates are indicated in each repository's LICENSE file. Please refer to the relevant repository for detailed licensing information.

• 🌐 Website: Browse our website
• 🐦 Twitter: Follow us on Twitter
• 💼 LinkedIn: Connect with us on LinkedIn
• ✈️ Telegram: Join our Telegram channel

Join us in shaping the future of secure, open-source cryptocurrency management. Your trust and feedback are invaluable. Together, we will build a safer, more accessible digital economy.