tweetCoder

Embedded firmware developer, CTO at @era_wallet. Optimistic Pessimist. **Views are mine***

15% off ERA 👉

[QuickEx @QuickEx_Tweets]

Our conversation with @era_wallet yesterday was a banger. Mike was on stream with Alex and DTM.

This was a very info-packed conversation. You should check it out. But here are the cliff notes just in case you are feeling lazy 👇

[ERA Wallet @era_wallet]

See you there! 👋
Our founder @alexey9kin and CTO @_D_TM_ will be joining the AMA - come say hi.
We’ll be waiting for you! 🖤

[tweetCoder @_D_TM_]

@CyberScrilla Thanks for the useful tool. Minor correction: @era_wallet accepts crypto payments - mainly usdt on various chains

[tweetCoder @_D_TM_]

@CyberScrilla @Tangem @Trezor @Ledger @OneKeyHQ Solid 🫡A lil bit of @era_wallet would complete the list

[tweetCoder @_D_TM_]

@Crypto_Jargon Very old video

[tweetCoder @_D_TM_]

Personally, Id go for a manufacturer that didn’t just point to a certificate (EAL-X) but one who actually cross checked the certificate. One who had an audit from professionals, and note just hoped that open source would solve the security question (coldcard)?

At ERA we did these tests and published the results so that you can check them out yourselves here

https://t.co/eHEW37jG1o

[tweetCoder @_D_TM_]

Personally, Id go for a manufacturer that didn’t just point to a certificate (EAL-X) but one who actually cross checked the certificate. One who had an audit from professionals, and note just hoped that open source would solve the security question (coldcard)?

At ERA we did these tests and published the results so that you can check them out yourselves here

https://t.co/eHEW37jG1o

[tweetCoder @_D_TM_]

@0_3_BTC @Trezor 256 is what we have. If that suits you try @era_wallet

[QuickEx @QuickEx_Tweets]

Era Wallet x Quickex AMA session is coming soon!

We are going live with @era_wallet! Join us as we discuss Era's safety-first approach to wallets, Quickex's privacy, and where we are headed together. Join us!

Join us:
📍 https://t.co/535P5a4qFO
⏰ 20th Aug, 1 PM UTC

[fintech-portal @fintech_portal]

Community exclusive deal.

ERA hardware wallet with a 20% discount using my code FPORTAL20

Five factors of randomness for entropy. ERA Lens for clear signing with readable data. Air-gapped only. Bitcoin only if you want to.

https://t.co/9JrIz7RfYQ

[tweetCoder @_D_TM_]

Will be live in an AMA at 1700 talking about #selfCustody #Defi

[ERA Wallet @era_wallet]

🚀 Today: #LetsTalkCrypto Hardware Wallet AMA

⏱ 2 PM UTC
🤩 X Spaces
👉 Join us: https://t.co/szT3rSI1zs

[tweetCoder @_D_TM_]

@pastorcoin Checkout @era_wallet, would love to hear your thoughts. Multiseed (10 wallets, incl. passphrase support), multichain, versatile backup options including multishare (shamir) and encrypted NFC backup, 5 entropy sources (see vid.) …. We tried to make sure the UI is intuitive, and the device look great besides your other gadgets.

[tweetCoder @_D_TM_]

@pastorcoin Checkout @era_wallet, would love to hear your thoughts. Multiseed (10 wallets, incl. passphrase support), multichain, versatile backup options including multishare (shamir) and encrypted NFC backup, 5 entropy sources (see vid.) …. We tried to make sure the UI is intuitive, and the device look great besides your other gadgets.

[GUARDA 💎 WALLET @GuardaWallet]

Now you can connect ERA Wallet to Guarda. 🔐

For most everyday transactions, managing crypto directly in Guarda is fast and convenient. But when you hold a larger balance or want an extra layer of protection, a hardware wallet can make a real difference.

That’s where ERA Wallet comes in.

ERA keeps your keys fully offline and connects to Guarda through QR codes — no cables, no ports, and no direct internet connection. Before signing, you can review the transaction details on the device itself and clearly see what you’re approving.

With Guarda + ERA, you get:

→ the convenience of managing your assets in Guarda
→ offline protection for your private keys
→ clearer transaction verification before signing
→ a hardware setup without cables or constant charging

ERA’s battery lasts up to one year or around 300 transactions.

And Guarda users get 15% off ERA Wallet with our exclusive promo code:

"GUARDA15"

Get ERA Wallet 👇
https://t.co/cBeSde4u2K

[tweetCoder @_D_TM_]

Most cold wallet vendors answer the randomness question with a chip certificate. We decided to do it differently - scientifically cross check the TRNGs themselves using NIST.

So we bench-tested the ERA Wallet. 8 broken RNGs as controls, one of them the real #Coldcard formula. published everything. Code, data so that you can cross-check and rerun the analysis yourself.

[ERA Wallet @era_wallet]

❓ How random are the numbers your hardware wallet builds your seed from?
Most manufacturers point to chip certifications. We tested the wallet itself.

🧪 NIST SP 800-90B, SP 800-22, AIS-31, PractRand + 1,000 cold boots.

🔬 Then we tested 5 intentionally broken RNGs through the same pipeline.

4 were caught. 1 wasn't. 👀

That last result was one of the most interesting findings of the research.

📖 Full research: https://t.co/goLI50NeKi

[ERA Wallet @era_wallet]

❓ How random are the numbers your hardware wallet builds your seed from?
Most manufacturers point to chip certifications. We tested the wallet itself.

🧪 NIST SP 800-90B, SP 800-22, AIS-31, PractRand + 1,000 cold boots.

🔬 Then we tested 5 intentionally broken RNGs through the same pipeline.

4 were caught. 1 wasn't. 👀

That last result was one of the most interesting findings of the research.

📖 Full research: https://t.co/goLI50NeKi

[tweetCoder @_D_TM_]

It's a small-hidden-state PRNG: 32-bit seed, good mixer, statistically flawless output, only ~4B possible streams. Not a fixable gap; it's the fundamental limit of output-only testing . Entropy lives in the process, not the bytes. Catching it needs restart tests (we caught the actual Coldcard formula at boot #2 as published). Checkout the repo - it has it all, fakes included.

[tweetCoder @_D_TM_]

Exactly the point. Either they had to commission an audit - like most cold-wallets did or start a bug-bounty program. At ERA we commissioned one from @keylabsio same as @KeystoneWallet and @FoundationHQ. ColdCard had the customers hence the profits but they did not take their security that seriously to commission an audit or start a bug bounty. Open source is for transparency but **not** for security. Other projects like Seedsigner, Blockstream also have this issue

[tweetCoder @_D_TM_]

@Scavacini777 Exactly! Commissioned audits could have avoided this, instead of relying exclusively on being open source! Jade too isn’t audited but I see people rushing to it, smh. Being open source/code does not mean being audited and secure